Package: icedove
Version: 24.7.0-1~deb7u1
Severity: serious
Tags: security

I've marked this serious and added the security tag because it is
possible that users confronted by this situation may be tempted to click
the "confirm" rather than "cancel" button when trying to get out of this
loop and then icedove will remember that they have authorized a
certificate that they might not have really wanted or inspected.

The TLS certificate on the IMAP server expired early in the morning.

The popup appeared asking me to confirm an exception to allow the
certificate.

Regardless of whether I click confirm or cancel, the popup keeps
re-appearing.  It seems that icedove has queued up many operations
asynchronously (I was away from the computer for many hours) and keeps
showing the popup.

Despite clicking cancel continuously for 1 minute it still didn't go
away so I had to terminate the process.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to