Re: CVE Request -- Mercurial --Doesn't verify subject Common Name properly

[Matthias Andree <matthias.andree () gmx de>]

Am 16.11.2010 17:02, schrieb Marc Deslauriers:

> Thanks for the clarification. Here are some more projects that need CVEs
> for this issue:
>
> libcloud:
> https://issues.apache.org/jira/browse/LIBCLOUD-55
> https://bugs.launchpad.net/ubuntu/+source/libcloud/+bug/675217
>
> Checkbox:
> https://bugs.launchpad.net/ubuntu/+source/checkbox/+bug/625076
>
> Bazaar:
> https://bugs.edge.launchpad.net/bzr/+bug/651161

In the past, Charles Cazabon's getmail would have had to be added to the
list, but he didn't care and pointed fingers at the Python library
developers, and I'm not sure what the current shape of getmail 4 is, and
don't care sufficiently to look it up.

Getmail used to happily connect to sites that have expired certs, for
instance.

-- 
Matthias Andree