From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Jens Lechtenboerger Newsgroups: gmane.emacs.devel Subject: Re: Release-critical bugs Date: Sat, 27 Sep 2014 17:10:40 +0200 Message-ID: <86d2ahw13j.fsf@informationelle-selbstbestimmung-im-internet.de> References: <87mw9yb2f8.fsf@engster.org> <87a95pnn8n.fsf@lifelogs.com> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1411832812 12799 80.91.229.3 (27 Sep 2014 15:46:52 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 27 Sep 2014 15:46:52 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Sep 27 17:46:47 2014 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XXuCs-000115-3B for ged-emacs-devel@m.gmane.org; Sat, 27 Sep 2014 17:46:46 +0200 Original-Received: from localhost ([::1]:56232 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XXuCr-00075k-M1 for ged-emacs-devel@m.gmane.org; Sat, 27 Sep 2014 11:46:45 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:53272) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XXteG-0004jI-RH for emacs-devel@gnu.org; Sat, 27 Sep 2014 11:11:06 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XXteB-0002Pf-J1 for emacs-devel@gnu.org; Sat, 27 Sep 2014 11:11:00 -0400 Original-Received: from mout.kundenserver.de ([212.227.17.10]:52315) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XXteB-0002Ok-9O for emacs-devel@gnu.org; Sat, 27 Sep 2014 11:10:55 -0400 Original-Received: from PC (mnsr-d9bf2d44.pool.mediaWays.net [217.191.45.68]) by mrelayeu.kundenserver.de (node=mreue103) with ESMTP (Nemesis) id 0M3uUc-1YNw2B00Nm-00raE9; Sat, 27 Sep 2014 17:10:45 +0200 OpenPGP: id=0xA142FD84; url=http://www.informationelle-selbstbestimmung-im-internet.de/A142FD84.asc In-Reply-To: <87a95pnn8n.fsf@lifelogs.com> (Ted Zlatanov's message of "Wed, 24 Sep 2014 09:48:08 -0400") User-Agent: Gnus/5.130012 (Ma Gnus v0.12) Emacs/24.3.50 (gnu/linux) X-Provags-ID: V02:K0:9hTvg/RdR0Vt5cbOOSQgv+POiFli/XnyAvlYPekVaAr GCB90X0imCVHp5TCQ5A3iSohBorsQQ7ZqyQJoT4kHlSps0Y21w K1tcIZtLRr0fOmT0TJ869huVaOBXNFK3QpfHXVFN+ZHan9+Bgm vE+NU7/fqDLTjmRrF93j20/cko3RoJ5e1DR3dOnn4xkZ/9JkVh IfkMzQwnad2/yISdZalY/cg34pzFk9sOJ2xFu2Yjih0qHZmzFW 5DOpP575vKKNqCh2gr7UNlN2n2CbhTWjtYHH0jDGrlX3AbJ3VA F8jLq1WaOF3ls3y21btvab65sY/wG31WDljpWQBNR1ej296Vnd bG4TPRDG9bQICBnYu9EMlStTWfgUOJjqKfCXCU+VfjberPKOlA FjwFGgx2xGxyA== X-UI-Out-Filterresults: notjunk:1; X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x [generic] X-Received-From: 212.227.17.10 X-Mailman-Approved-At: Sat, 27 Sep 2014 11:46:33 -0400 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:174746 Archived-At: On 2014-09-24, Ted Zlatanov wrote: > Let me try to summarize (adding CCs to the parties involved that may not > read emacs-devel): > [...] > http://debbugs.gnu.org/cgi/bugreport.cgi?bug=16978 [i|*| ] [emacs] 24.3; > SSL/TLS with multiple man-in-the-middle vulnerabilities > Reported by: Jens Lechtenboerger fsfe.org>; Date: > Mon, 10 Mar 2014 07:00:02 UTC; Severity: important; Tags: security; Found in > version 24.3; Filed 198 > days ago; Modified 184 days ago; > > We made some fixes. To make things work well we'll need a certificate > management UI, which IMO can happen after the current release. I agree. Thanks for adding me Jens