** Changed in: thunderbird (Ubuntu)
Status: New => Triaged
** Changed in: thunderbird (Ubuntu)
Importance: Undecided => Low
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to thunderbird in Ubuntu.
https://bugs.launchpad.net/bugs/1098340
Title:
denial-of-service from multiple "Confirm security exception" windows
Status in “thunderbird” package in Ubuntu:
Triaged
Bug description:
Thunderbird creates a new "Confirm security exception" window for each
ssl certificate authentication error with the mail server. The result
is potentially hundreds or thousands of "Confirm security exception"
windows can be open at the same time. To close all the windows, you
have to click on each window one by one, which can take a very long
time. The open windows totally block any other use of thunderbird
while they are open. This provides a feasible denial-of-service
vector:- no further details will be provided about that. The bug can
be fixed regardless. There should be a maximum of one open "Confirm
security exception" window, and the window should not be modal.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1098340/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
