Autor: sajolida Datum: To: The Tails public development discussion list Betreff: Re: [Tails-dev] #8999: Claws Mail leaks cleartext of encrypted
email to the IMAP server
intrigeri: > intrigeri wrote (07 May 2015 13:44:31 GMT) :
>> Before publishing, you'll want to check that the attached images don't
>> show up in the Atom/RSS feeds.
>
> The attached images did show up on top of the feeds, and the
> notification end-users were seeing since the publication of the
> advisory was:
>
> * local folders.png
> * select inbox.png
> * add mailbox.png
>
> Now fixed, in a way that should make our stuff more robust against
> such omissions in the future. And applied the robustness improvement
> in a few more places as well, because why not.
>
> => lesson learnt: after publishing a security advisory, boot Tails to
> make sure it looks like what you believe it does :)
I'm sorry I let you handle this in a hurry :(
I checked the result on the website but no on the feed...
%20:%0A>%20>>%20Before%20publishing,%20you'll%20want%20to%20check%20that%20the%20attached%20images%20don't%0A>%20>>%20show%20up%20in%20the%20Atom/RSS%20feeds.%0A>%20>%20%0A>%20>%20The%20attached%20images%20did%20show%20up%20on%20top%20of%20the%20feeds,%20and%20the%0A>%20>%20notification%20end-users%20were%20seeing%20since%20the%20publication%20of%20the%0A>%20>%20advisory%20was:%0A>%20>%20%0A>%20>%20%20*%20local%20folders.png%0A>%20>%20%20*%20select%20inbox.png%0A>%20>%20%20*%20add%20mailbox.png%0A>%20>%20%0A>%20>%20Now%20fixed,%20in%20a%20way%20that%20should%20make%20our%20stuff%20more%20robust%20against%0A>%20>%20such%20omissions%20in%20the%20future.%20And%20applied%20the%20robustness%20improvement%0A>%20>%20in%20a%20few%20more%20places%20as%20well,%20because%20why%20not.%0A>%20>%20%0A>%20>%20=>%20lesson%20learnt:%20after%20publishing%20a%20security%20advisory,%20boot%20Tails%20to%0A>%20>%20make%20sure%20it%20looks%20like%20what%20you%20believe%20it%20does%20:)%0A>%20%0A>%20I'm%20sorry%20I%20let%20you%20handle%20this%20in%20a%20hurry%20:(%0A>%20I%20checked%20the%20result%20on%20the%20website%20but%20no%20on%20the%20feed...%0A>%20%0A>%20--%20%0A>%20sajolida%0A>%20%0A>%20 "Nachricht beantworten")
