[Evolution] Bug#508479: Bug#508479: evolution shows a SMIME signed messages as ok even if modified

Yves-Alexis Perez corsac at debian.org
Sat Feb 14 13:13:58 UTC 2009


On jeu, 2008-12-11 at 18:41 +0100, Joachim Breitner wrote:
> please consider raising the Severity if appropriate.
> 
> Attached are two very minimal test mails. you can drag’n’drop them in
> evolution. The (self-signed) key.pem contains a certificate, you can
> import it a signing authority.
> 
> Both messages will be shown as correctly verfied, although one is just a
> copy of the other, with the body modified.

For the record, CVE-2009-0547 has been assigned to this issue.
-- 
Yves-Alexis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/pkg-evolution-maintainers/attachments/20090214/1efadce8/attachment.pgp 


More information about the Pkg-evolution-maintainers mailing list