[Bug 1376595] Re: xface4-mailwatch-plugin have some SSL security problems

2014-12-16 Thread Launchpad Bug Tracker
[Expired for xfce4-mailwatch-plugin (Ubuntu) because there has been no activity for 60 days.] ** Changed in: xfce4-mailwatch-plugin (Ubuntu) Status: Incomplete = Expired -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1376595] Re: xface4-mailwatch-plugin have some SSL security problems

2014-10-17 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is

[Bug 1376595] Re: xface4-mailwatch-plugin have some SSL security problems

2014-10-11 Thread rainkin
** Description changed: Recently, we are trying to find SSL security problems by static anaylsis. For example, Hostname verification is an important step when verifying X509 certificates, however, people tend to miss the step or to misunderstand the APIs when using SSL/TLS, which might