Your message dated Sun, 15 Mar 2015 14:07:31 +0100
with message-id <20150315130731.ga1...@jessie.cruise.homelinux.net>
and subject line Re: Bug#772076: confirm certificate exception dialog keeps
re-appearing
has caused the Debian Bug report #772076,
regarding confirm certificate exception dialog keeps re-appearing
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
772076: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772076
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: icedove
Version: 24.7.0-1~deb7u1
Severity: serious
Tags: security
I've marked this serious and added the security tag because it is
possible that users confronted by this situation may be tempted to click
the "confirm" rather than "cancel" button when trying to get out of this
loop and then icedove will remember that they have authorized a
certificate that they might not have really wanted or inspected.
The TLS certificate on the IMAP server expired early in the morning.
The popup appeared asking me to confirm an exception to allow the
certificate.
Regardless of whether I click confirm or cancel, the popup keeps
re-appearing. It seems that icedove has queued up many operations
asynchronously (I was away from the computer for many hours) and keeps
showing the popup.
Despite clicking cancel continuously for 1 minute it still didn't go
away so I had to terminate the process.
--- End Message ---
--- Begin Message ---
No more feedback from the reporter. As version 24.x.x is also gone for
longer time from stable-security this report will be closed.
Please reopen if really needed.
Regards
Carsten
On Sun, Dec 07, 2014 at 01:23:25PM +0100, Carsten Schoenert wrote:
> Hello Daniel,
>
> On Thu, Dec 04, 2014 at 10:29:09PM +0100, Daniel Pocock wrote:
> > Package: icedove
> > Version: 24.7.0-1~deb7u1
> > Severity: serious
> > Tags: security
> >
> > I've marked this serious and added the security tag because it is
> > possible that users confronted by this situation may be tempted to click
> > the "confirm" rather than "cancel" button when trying to get out of this
> > loop and then icedove will remember that they have authorized a
> > certificate that they might not have really wanted or inspected.
> >
> > The TLS certificate on the IMAP server expired early in the morning.
> >
> > The popup appeared asking me to confirm an exception to allow the
> > certificate.
> >
> > Regardless of whether I click confirm or cancel, the popup keeps
> > re-appearing. It seems that icedove has queued up many operations
> > asynchronously (I was away from the computer for many hours) and keeps
> > showing the popup.
> >
> > Despite clicking cancel continuously for 1 minute it still didn't go
> > away so I had to terminate the process.
>
> Can you please test with teh recent version from stable-security?
>
> Regards
> Carsten
--- End Message ---
