[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-devel
Subject:    Re: SECURITY: Konqueror SSL Vulnerability
From:       dep <dep () linuxandmain ! com>
Date:       2002-08-12 17:57:27
[Download RAW message or body]

begin  Waldo Bastian's  quote:
| Konqueror (kssl to be precisely) fails to detect certificates as
| invalid that have been signed by an issuer who is not allowed to do
| so. A patch for this problem has been commited to both the CVS HEAD
| branch and the KDE_3_0_BRANCH.

question: is it known when this vulnerability was introduced? if it 
was before kde-3.x, will there be patches made available for earlier 
versions?
-- 
dep

http://www.linuxandmain.com -- outside the box, barely within the 
envelope, and no animated paperclip anywhere.
 
>> Visit http://mail.kde.org/mailman/listinfo/kde-devel#unsub to unsubscribe <<
[prev in list] [next in list] [prev in thread] [next in thread]