[Bug 1384232] Re: Certificate hostname verification fix

2014-10-28 Thread Roca
** Changed in: exim4 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to exim4 in Ubuntu. https://bugs.launchpad.net/bugs/1384232 Title: Certificate hostname verification fix To manage notificati

[Bug 1384232] Re: Certificate hostname verification fix

2014-10-22 Thread Roca
We sent email to cve-ass...@mitre.org and got the following response, but we don't agree that this is an intentionally made. This patch appears to be outside the scope of CVE. For issues of this type, the scope of CVE is limited to unintentional implementation mistakes. Here, the vendor intentio