As detailed on the related security announce page, the real IP address being used, and thus, in some cases, the amnesia user's true location, is disclosed when using Icedove (Thunderbird) to send email.

This has been fixed in amnesia 0.4.1.