Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: telepathy-idle (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to telepathy-idle in Ubuntu.
https://bugs.launchpad.net/bugs/1183425

Title:
  security update makes -idle unusable on servers with self-signed
  certificates

Status in “telepathy-idle” package in Ubuntu:
  Confirmed

Bug description:
  The recent security update to precise's telepathy-idle package
  (0.1.11-2ubuntu0.1) adds strict checking for SSL certificates, as seen
  in upstream's 0.1.15 release. However, the patch doesn't add any UI to
  accept non-trusted certificates, making the IRC transport unusable
  against servers using self-signed certificates.

  This is a _massive_ regression, with an easy fix available in the form
  of 0.1.16, which does add the required UI.

  Debian's 0.1.16-1 package makes sure the upstream code doesn't require
  the latest and greatest glib, making a backport trivial.

  Please fetch the upstream patch and Debian's addition to ease the
  backport to fix this issue.

  Thanks,
  Jordi

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/telepathy-idle/+bug/1183425/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to