severity 603450 important kthxbye On Sun, Nov 14, 2010 at 19:55:23 +1100, david b wrote: > Package: offlineimap > Severity: grave > Tags: security > Justification: user security hole > > offlineimap performs absolutely no ssl certificate checking. So users could/can be the victim of a man in the middle attack. Long known/documented limitation, I don't think this is RC. A fix can still be considered either before release or for a point update. Cheers, Julien
Attachment:
signature.asc
Description: Digital signature