group.of.nepali.translators team mailing list archive

[Marc Deslauriers <marc.deslauriers@xxxxxxxxxxxxx>]

Probably want this fix too:
https://github.com/hexchat/hexchat/commit/50463ca8321c39f3966c278ab25ca158404d72f1

** Changed in: xchat (Ubuntu Xenial)
       Status: New => Invalid

** Changed in: xchat-gnome (Ubuntu Precise)
       Status: New => Confirmed

** Changed in: xchat-gnome (Ubuntu Precise)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: hexchat (Ubuntu Trusty)
       Status: New => Confirmed

** Changed in: hexchat (Ubuntu Precise)
       Status: New => Invalid

** Changed in: hexchat (Ubuntu Wily)
       Status: New => Fix Released

** Changed in: hexchat (Ubuntu Xenial)
       Status: New => Fix Released

** Changed in: xchat (Ubuntu Precise)
       Status: New => Confirmed

** Changed in: xchat (Ubuntu Trusty)
       Status: New => Confirmed

** Changed in: xchat (Ubuntu Wily)
       Status: New => Confirmed

** Changed in: xchat-gnome (Ubuntu Trusty)
       Status: New => Confirmed

** Changed in: xchat-gnome (Ubuntu Trusty)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: xchat-gnome (Ubuntu Wily)
       Status: New => Confirmed

** Changed in: xchat-gnome (Ubuntu Wily)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Changed in: xchat-gnome (Ubuntu Xenial)
       Status: New => Confirmed

** Changed in: xchat-gnome (Ubuntu Xenial)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1565000

Title:
  xchat-gnome doesn't validate ssl hostnames

Status in hexchat package in Ubuntu:
  Fix Released
Status in xchat package in Ubuntu:
  Invalid
Status in xchat-gnome package in Ubuntu:
  Confirmed
Status in hexchat source package in Precise:
  Invalid
Status in xchat source package in Precise:
  Confirmed
Status in xchat-gnome source package in Precise:
  Confirmed
Status in hexchat source package in Trusty:
  Confirmed
Status in xchat source package in Trusty:
  Confirmed
Status in xchat-gnome source package in Trusty:
  Confirmed
Status in hexchat source package in Wily:
  Fix Released
Status in xchat source package in Wily:
  Confirmed
Status in xchat-gnome source package in Wily:
  Confirmed
Status in hexchat source package in Xenial:
  Fix Released
Status in xchat source package in Xenial:
  Invalid
Status in xchat-gnome source package in Xenial:
  Confirmed

Bug description:
  http://www.openwall.com/lists/oss-security/2015/01/29/23

  XChat did not verify that the server hostname matched the domain name in 
  the subject's Common Name (CN) or subjectAltName field in X.509 
  certificates. This could allow a man-in-the-middle attacker to spoof an 
  SSL server if they had a certificate that was valid for any domain name.

  Also applied to hexchat and xchat-gnome.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/hexchat/+bug/1565000/+subscriptions