SurgeMail Version 6.6d-3, Built Apr 10 2014 12:11:50, Platform Linux_64 displays as vulnerable to the SSL/TLS MITM vulnerability (CVE-2014-0224) using Red Hat's CSS Injection Detector (https://access.redhat.com/labs/ccsinjectiontest/).

No we just looked through that list and it appears none of those issues are relevant for surgemail's use of SSL.

 

We will release a new beta late next week with new SSL libraries anyway just incase but there doesn't seem to be any urgent need for it based on SSL.

 

    ChrisP.

--
Christopher Greiner
Université de Lausanne
Centre informatique
Amphimax
CH-1015 Lausanne

E-mail: Christopher.Greiner [at] unil.ch
Tel:    +41 21 692 21 93
URL:    http://www.unil.ch/ci/