cheese, control, ekiga, evolution, finch, gnome, gtkhtml3, libgdata, libpurple, nautilus, openchange, pidgin, planner, totem security update

CentOS Errata and Security Advisory CESA-2013:1540

Evolution is the integrated collection of email, calendaring, contact
management, communications, and personal information management (PIM) tools
for the GNOME desktop environment.

A flaw was found in the way Evolution selected GnuPG public keys when
encrypting emails. This could result in emails being encrypted with public
keys other than the one belonging to the intended recipient.
(CVE-2013-4166)

The Evolution packages have been upgraded to upstream version 2.32.3, which
provides a number of bug fixes and enhancements over the previous version.
These changes include implementation of Gnome XDG Config Folders, and
support for Exchange Web Services (EWS) protocol to connect to Microsoft
Exchange servers. EWS support has been added as a part of the
evolution-exchange packages. (BZ#883010, BZ#883014, BZ#883015, BZ#883017,
BZ#524917, BZ#524921, BZ#883044)

The gtkhtml3 packages have been upgraded to upstream version 2.32.2, which
provides a number of bug fixes and enhancements over the previous version.
(BZ#883019)

The libgdata packages have been upgraded to upstream version 0.6.4, which
provides a number of bug fixes and enhancements over the previous version.
(BZ#883032)

This update also fixes the following bug:

• The Exchange Calendar could not fetch the “Free” and “Busy” information
  for meeting attendees when using Microsoft Exchange 2010 servers, and this
  information thus could not be displayed. This happened because Microsoft
  Exchange 2010 servers use more strict rules for “Free” and “Busy”
  information fetching. With this update, the respective code in the
  openchange packages has been modified so the “Free” and “Busy” information
  fetching now complies with the fetching rules on Microsoft Exchange 2010
  servers. The “Free” and “Busy” information can now be displayed as expected
  in the Exchange Calendar. (BZ#665967)

All Evolution users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues and add these
enhancements. All running instances of Evolution must be restarted for this
update to take effect.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027176.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027182.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027197.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027199.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027200.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027201.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027202.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027219.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027220.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027226.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027252.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027285.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027297.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027317.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027320.html
https://lists.centos.org/pipermail/centos-cr-announce/2013-November/027370.html

Affected packages:
cheese
control-center
control-center-devel
control-center-extra
control-center-filesystem
ekiga
evolution
evolution-data-server
evolution-data-server-devel
evolution-data-server-doc
evolution-devel
evolution-devel-docs
evolution-exchange
evolution-help
evolution-mapi
evolution-mapi-devel
evolution-perl
evolution-pst
evolution-spamassassin
finch
finch-devel
gnome-panel
gnome-panel-devel
gnome-panel-libs
gnome-python2-applet
gnome-python2-brasero
gnome-python2-bugbuddy
gnome-python2-desktop
gnome-python2-evince
gnome-python2-evolution
gnome-python2-gnomedesktop
gnome-python2-gnomekeyring
gnome-python2-gnomeprint
gnome-python2-gtksourceview
gnome-python2-libgtop2
gnome-python2-libwnck
gnome-python2-metacity
gnome-python2-rsvg
gnome-python2-totem
gtkhtml3
gtkhtml3-devel
libgdata
libgdata-devel
libpurple
libpurple-devel
libpurple-perl
libpurple-tcl
nautilus-sendto
nautilus-sendto-devel
openchange
openchange-client
openchange-devel
openchange-devel-docs
pidgin
pidgin-devel
pidgin-docs
pidgin-perl
planner
planner-devel
planner-eds
totem
totem-devel
totem-jamendo
totem-mozplugin
totem-nautilus
totem-upnp
totem-youtube

Upstream details at:
https://access.redhat.com/errata/RHSA-2013:1540