Hello Daniel, On Thu, Dec 04, 2014 at 10:29:09PM +0100, Daniel Pocock wrote: > Package: icedove > Version: 24.7.0-1~deb7u1 > Severity: serious > Tags: security > > I've marked this serious and added the security tag because it is > possible that users confronted by this situation may be tempted to click > the "confirm" rather than "cancel" button when trying to get out of this > loop and then icedove will remember that they have authorized a > certificate that they might not have really wanted or inspected. > > The TLS certificate on the IMAP server expired early in the morning. > > The popup appeared asking me to confirm an exception to allow the > certificate. > > Regardless of whether I click confirm or cancel, the popup keeps > re-appearing. It seems that icedove has queued up many operations > asynchronously (I was away from the computer for many hours) and keeps > showing the popup. > > Despite clicking cancel continuously for 1 minute it still didn't go > away so I had to terminate the process.
Can you please test with teh recent version from stable-security? Regards Carsten -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
