Re: Evolution String break request
- From: "Sankar P" <psankar novell com>
- To: <gnome-doc-list gnome org>
- Cc: gnome-i18n gnome org, release-team gnome org
- Subject: Re: Evolution String break request
- Date: Wed, 20 Sep 2006 03:09:35 -0600
The affected module is evolution-data-server and the application
affected is Evolution. I missed to mention this in my previous mail. My
apologies for that.
Sankar
On Wed, 2006-09-20 at 09:07 +0000, Sankar P wrote:
> Hi,
>
> As part of fixing http://bugzilla.gnome.org/show_bug.cgi?id=350617 I
> have attached a patch.
>
> Scenario: Some IMAP servers do not expect password to be sent in plain
> text. This is set in the LOGINDISABLED property of an imap-response.
> Evolution does not read this and sends the password in plain text if
> secure-authentication has failed.
>
> Impact: Sending password in plain text in a network, where it is not
> suggested is a vulnerability issue.
>
> Patch is at :
> http://bugzilla.gnome.org/attachment.cgi?id=73075&action=view
>
> New string added is :
>
> Failed to connect to IMAP server <%s> in secure mode. And, Plain-text
> password authentication is disabled in the server.
>
> I would like to commit this to Evolution 2.8 branch (gnome-2.16) . Can
> someone review/approve this new string ?
>
> Sankar
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]