Please backport fix to Exim4: [Bug 1384232] Re: Certificate hostname verification fix

[Robie Basak]

Hi Chuck,

On Sun, Jun 21, 2015 at 08:54:30PM +0000, Chuck Peters wrote:
> Andreas Metzler pointed to a set of patches which are included in the
> upcoming release of Exim4.  I would like to see this issue resolved
> for trusty and newer releases.

Thank you for bringing this bug to our attention. I've stated my opinion
in the bug itself.

> Is someone from the Server Team, or Security Team, backporting this
> set of patches?

I don't believe so.

> If so, will we see a backport for trusty?

I don't think so, but discussion welcome.

> Perhaps this issue could be discussed at the next Security Team
> meeting Monday or Server Team meeting Tuesday?

I suggest that we discuss options for this feature in the bug itself so
the discussion stays in one place. But if there's anything that requires
a decision, please feel free to take it to the server team meeting.

Robie
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-server/attachments/20150622/b1e1251d/attachment.pgp>