Public bug reported:

evolution-ews does not respect the privacy of shared calendars.

When a user on a shared calendar marks the appointment as "Private" this
means that users with whom the user shared their calendar with are not
supposed to see the contents of the appointment. On Outlook and OWA the
appointment shows up with a time; however, the details are replaced with
"Private".

As of now, all of the details from a blocked appointment are shown in
evolution.

Details are:

No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 14.04.2 LTS
Release:        14.04
Codename:       trusty

Package: evolution-ews
Status: install ok installed
Priority: optional
Section: gnome
Installed-Size: 1786
Maintainer: Ubuntu Developers <[email protected]>
Architecture: amd64
Version: 3.10.2-0ubuntu2
Depends: libc6 (>= 2.14), libcamel-1.2-45 (>= 3.7.90), libebackend-1.2-7 (>= 
3.8.2), libebook-contacts-1.2-0 (>= 3.7.90), libecal-1.2-16 (>= 3.7.90), 
libedata-book-1.2-20 (>= 3.7.90), libedata-cal-1.2-23 (>= 3.8.4), 
libedataserver-1.2-18 (>= 3.5.91), libevolution (>= 3.10), libevolution (<< 
3.11), libglib2.0-0 (>= 2.32), libgtk-3-0 (>= 3.0.0), libical1 (>= 1.0), 
libkrb5-3 (>= 1.6.dfsg.2), libpango-1.0-0 (>= 1.14.0), libsoup2.4-1 (>= 
2.38.1), libsqlite3-0 (>= 3.6.0), libxml2 (>= 2.9.0), evolution (>= 3.10), 
evolution (<< 3.11)
Description: Exchange Web Services integration for Evolution
 This package allows the Evolution mail and groupware suite to connect
 to Microsoft Exchange servers using the Exchange Web Services interface.
 .
 It works in a very similar way to the Evolution Exchange connector, but
 it supports the Exchange 2007 version.
Homepage: http://www.gnome.org/projects/evolution/
Original-Maintainer: Debian Evolution Maintainers 
<[email protected]>

** Affects: evolution-ews (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1511039

Title:
  security hole with evolution ews

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/evolution-ews/+bug/1511039/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to