** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to thunderbird in Ubuntu.
https://bugs.launchpad.net/bugs/1098340

Title:
  denial-of-service from multiple "Confirm security exception" windows

Status in “thunderbird” package in Ubuntu:
  New

Bug description:
  Thunderbird creates a new "Confirm security exception" window for each
  ssl certificate authentication error with the mail server. The result
  is potentially hundreds or thousands of "Confirm security exception"
  windows can be open at the same time. To close all the windows, you
  have to click on each window one by one, which can take a very long
  time. The open windows totally block any other use of thunderbird
  while they are open. This provides a feasible denial-of-service
  vector:- no further details will be provided about that. The bug can
  be fixed regardless. There should be a maximum of one open "Confirm
  security exception" window, and the window should not be modal.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1098340/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to