evolution, evolution28 security update

2008-03-0519:23:46

CentOS Project

lists.centos.org

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.435 Medium

EPSS

Percentile

97.4%

JSON

CentOS Errata and Security Advisory CESA-2008:0177

Evolution is the GNOME collection of personal information management (PIM)
tools.

A format string flaw was found in the way Evolution displayed encrypted
mail content. If a user opened a carefully crafted mail message, arbitrary
code could be executed as the user running Evolution. (CVE-2008-0072)

All users of Evolution should upgrade to these updated packages, which
contain a backported patch which resolves this issue.

Red Hat would like to thank Ulf Härnhammar of Secunia Research for finding
and reporting this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2008-March/076904.html
https://lists.centos.org/pipermail/centos-announce/2008-March/076905.html
https://lists.centos.org/pipermail/centos-announce/2008-March/076910.html
https://lists.centos.org/pipermail/centos-announce/2008-March/076911.html
https://lists.centos.org/pipermail/centos-announce/2008-March/076912.html
https://lists.centos.org/pipermail/centos-announce/2008-March/076913.html

Affected packages:
evolution
evolution-devel
evolution28
evolution28-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2008:0177

OSVersionArchitecturePackageVersionFilename
CentOS4ia64evolution< 2.0.2-35.0.4.c4.1evolution-2.0.2-35.0.4.c4.1.ia64.rpm
CentOS4ia64evolution-devel< 2.0.2-35.0.4.c4.1evolution-devel-2.0.2-35.0.4.c4.1.ia64.rpm
CentOS4ia64evolution28< 2.8.0-53.el4_6.2evolution28-2.8.0-53.el4_6.2.ia64.rpm
CentOS4ia64evolution28-devel< 2.8.0-53.el4_6.2evolution28-devel-2.8.0-53.el4_6.2.ia64.rpm
CentOS4s390evolution< 2.0.2-35.0.4.c4.1evolution-2.0.2-35.0.4.c4.1.s390.rpm
CentOS4s390evolution-devel< 2.0.2-35.0.4.c4.1evolution-devel-2.0.2-35.0.4.c4.1.s390.rpm
CentOS4s390evolution28< 2.8.0-53.el4_6.2evolution28-2.8.0-53.el4_6.2.s390.rpm
CentOS4s390evolution28-devel< 2.8.0-53.el4_6.2evolution28-devel-2.8.0-53.el4_6.2.s390.rpm
CentOS4s390xevolution< 2.0.2-35.0.4.c4.1evolution-2.0.2-35.0.4.c4.1.s390x.rpm
CentOS4s390xevolution-devel< 2.0.2-35.0.4.c4.1evolution-devel-2.0.2-35.0.4.c4.1.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	4	ia64	evolution	< 2.0.2-35.0.4.c4.1	evolution-2.0.2-35.0.4.c4.1.ia64.rpm
CentOS	4	ia64	evolution-devel	< 2.0.2-35.0.4.c4.1	evolution-devel-2.0.2-35.0.4.c4.1.ia64.rpm
CentOS	4	ia64	evolution28	< 2.8.0-53.el4_6.2	evolution28-2.8.0-53.el4_6.2.ia64.rpm
CentOS	4	ia64	evolution28-devel	< 2.8.0-53.el4_6.2	evolution28-devel-2.8.0-53.el4_6.2.ia64.rpm
CentOS	4	s390	evolution	< 2.0.2-35.0.4.c4.1	evolution-2.0.2-35.0.4.c4.1.s390.rpm
CentOS	4	s390	evolution-devel	< 2.0.2-35.0.4.c4.1	evolution-devel-2.0.2-35.0.4.c4.1.s390.rpm
CentOS	4	s390	evolution28	< 2.8.0-53.el4_6.2	evolution28-2.8.0-53.el4_6.2.s390.rpm
CentOS	4	s390	evolution28-devel	< 2.8.0-53.el4_6.2	evolution28-devel-2.8.0-53.el4_6.2.s390.rpm
CentOS	4	s390x	evolution	< 2.0.2-35.0.4.c4.1	evolution-2.0.2-35.0.4.c4.1.s390x.rpm
CentOS	4	s390x	evolution-devel	< 2.0.2-35.0.4.c4.1	evolution-devel-2.0.2-35.0.4.c4.1.s390x.rpm