http://bugzilla.novell.com/show_bug.cgi?id=496385
User thomas@novell.com added comment
http://bugzilla.novell.com/show_bug.cgi?id=496385#c5
Thomas Biege changed:
What |Removed |Added
----------------------------------------------------------------------------
Priority|P3 - Medium |P4 - Low
Summary|VUL-0: gnutls-cli fails to |gnutls-cli fails to verify
|verify certificate name |certificate name
Severity|Major |Minor
--- Comment #5 from Thomas Biege 2009-04-23 07:48:59 MDT ---
Hello Matthias,
you are right; indeed it seems only Gnus, the news/mail reader, uses
gnutls-cli. A man-in-the-middle attack on plaintext information that is routed
over potentially untrusted servers and only affects one client is reason enough
to fix it as part of another gnutls update and effectivly use our QA resources.
--
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.