Secure testing team - Sep 2011 - [Evolution] Bug#641052: Bug#641052: evolution uses insecure connection when storing the sent message to the sent folder

On ven., 2011-09-09 at 23:53 +0200, Yves-Alexis Perez
wrote:
> reassign 641052 src:evolution-data-server3
> forwarded 641052 https://bugzilla.gnome.org/show_bug.cgi?id=648277
> clone 641052 -1
> reassign -1 evolution-data-server
> thanks
> 
> On ven., 2011-09-09 at 23:41 +0200, Yves-Alexis Perez wrote:
> > Reporting the security issue myself, see
> > http://article.gmane.org/gmane.comp.security.oss.general/5833 for more
> > info. 
> 
> In fact this is more evolution-data-server than evolution itself, and it
> seems it''s present in eds 2.x too.
> 
> Note that it won''t always happen, it might depend on how exactly
the
> accounts are configured and how folders are selected.
Some more info:

[23:50:42] (mbarnes): also, I think it only affects 3.0.  2.x should be fine.
[23:51:53] (mbarnes): also, the manual workaround is to simply reselect the 
                      folder in account prefs

and I''m unsure it it can happen outside of the migration path.

Now, I guess the eds bug could be closed and the eds3 downgraded, but
I''m not too sure.
-- 
Yves-Alexis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL:
<http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20110913/ed3ec931/attachment.pgp>