Opened 5 years ago

Closed 2 years ago

#6315 closed defect (fixed)

prevent leak via Message-ID header field (local timestamp disclosure)

Reported by: tagnaq Owned by: ioerror
Priority: High Milestone:
Component: Applications/TorBirdy Version:
Severity: Normal Keywords:
Cc: sukhbir, intrigeri Actual Points:
Parent ID: #9131 Points:
Reviewer: Sponsor:

Description

Emails send with TorBirdy installed are currently leaking local timestamp information via the Message-ID header field.

Sukhbir is preparing a patch for Thunderbird that will modify the Message-ID format to a time-independent version as described in chapter 4.2.3: http://bit.ly/qDZm7C

Child Tickets

Change History (9)

comment:1 Changed 5 years ago by ioerror

Is there an upstream bug number for this in Mozilla's bug tracker?

comment:4 Changed 5 years ago by sukhbir

Keywords: SponsorT added

comment:5 Changed 4 years ago by sukhbir

Parent ID: #9131

comment:7 Changed 3 years ago by intrigeri

Cc: intrigeri added

comment:8 Changed 3 years ago by sukhbir

Keywords: SponsorT removed

comment:9 Changed 2 years ago by arthuredelstein

Resolution: fixed
Severity: Normal
Status: newclosed
Note: See TracTickets for help on using tickets.