Users are unable to edit using a blocked IP, but they still can send email that way — the check in SpecialEmailuser.php doesn’t take it into consideration.
According to a Russian Wikipedia checkuser, this breach is being heavily abused (spam et al), so this is somewhat urgent.
Version: 1.16.x
Severity: major
URL: http://ru.wikipedia.org/wiki/User:Welcome_all