Re: [Evolution] Bug 738247 - unwanted information disclosure in message headers



On 09/22/2017 04:54 PM, Patrick O'Callaghan wrote:

On Fri, 2017-09-22 at 14:10 -0400, d18jf98rw use startmail com wrote:

Greetings to evolution team!
Just today I wanted to start using the program but uncovered a stopper,
listed in subject.
To my huge surprise it has been reported almost three years ago and still
completely ignored.

What program? Please give the version you mean (Help->About if you mean
Evolution).
You don't explain what you mean by information disclosure, nor do you
give a reference to the previous report. If you are concerned about
this then kindly take the trouble to clarify.


Patrick,

From https://bugzilla.gnome.org/show_bug.cgi?id=738247 I see the following:
====
Product:        evolution-data-server
Version:        3.24.x 
Problem Description:
Local host name shows up in recipient email headers.
Sent from evolution:
Received: from [external IP] ([external IP:port] helo=myhost.mydomain.ext)

Sent from thunderbird:
Received: from [external IP] ([external IP:port] helo=[local IP])

helo message must be changed to avoid local host name disclosure.
====
Seems like a pretty extensive report. I have nothing to add other then my exact version is 3.24.5.

Josh.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]