evolution security and bug fix update

2020-04-0600:00:00

linux.oracle.com

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

JSON

atk
[2.28.1-2]

Remove patch to fix invalid unref at atk_gobject_accessible_object_gone_cb()
Resolves: #1753123
evolution
[3.28.5-8]
Update patch for RH bug #1686408 (CVE-2018-15587: Reposition signature bar)
[3.28.5-7]
Add patch for RH bug #1686408 (CVE-2018-15587: Reposition signature bar)
[3.28.5-6]
Add patch for RH bug #1753122 (GalA11yETableItem: Incorrect implementation of AtkObjectClass::ref_child())
evolution-data-server
[3.28.5-4]
Add patch related to evolution-ews CVE-2019-3890 (RH bug #1696762)
evolution-ews
[3.28.5-5]
Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)
[3.28.5-4]
Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)
[3.28.5-3]
Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)

OSVersionArchitecturePackageVersionFilename
oracle linux7srcatk< 2.28.1-2.el7atk-2.28.1-2.el7.src.rpm
oracle linux7srcevolution< 3.28.5-8.el7evolution-3.28.5-8.el7.src.rpm
oracle linux7srcevolution-data-server< 3.28.5-4.el7evolution-data-server-3.28.5-4.el7.src.rpm
oracle linux7srcevolution-ews< 3.28.5-5.el7evolution-ews-3.28.5-5.el7.src.rpm
oracle linux7aarch64atk< 2.28.1-2.el7atk-2.28.1-2.el7.aarch64.rpm
oracle linux7aarch64atk-devel< 2.28.1-2.el7atk-devel-2.28.1-2.el7.aarch64.rpm
oracle linux7aarch64evolution< 3.28.5-8.el7evolution-3.28.5-8.el7.aarch64.rpm
oracle linux7aarch64evolution-bogofilter< 3.28.5-8.el7evolution-bogofilter-3.28.5-8.el7.aarch64.rpm
oracle linux7aarch64evolution-data-server< 3.28.5-4.el7evolution-data-server-3.28.5-4.el7.aarch64.rpm
oracle linux7aarch64evolution-data-server-devel< 3.28.5-4.el7evolution-data-server-devel-3.28.5-4.el7.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	7	src	atk	< 2.28.1-2.el7	atk-2.28.1-2.el7.src.rpm
oracle linux	7	src	evolution	< 3.28.5-8.el7	evolution-3.28.5-8.el7.src.rpm
oracle linux	7	src	evolution-data-server	< 3.28.5-4.el7	evolution-data-server-3.28.5-4.el7.src.rpm
oracle linux	7	src	evolution-ews	< 3.28.5-5.el7	evolution-ews-3.28.5-5.el7.src.rpm
oracle linux	7	aarch64	atk	< 2.28.1-2.el7	atk-2.28.1-2.el7.aarch64.rpm
oracle linux	7	aarch64	atk-devel	< 2.28.1-2.el7	atk-devel-2.28.1-2.el7.aarch64.rpm
oracle linux	7	aarch64	evolution	< 3.28.5-8.el7	evolution-3.28.5-8.el7.aarch64.rpm
oracle linux	7	aarch64	evolution-bogofilter	< 3.28.5-8.el7	evolution-bogofilter-3.28.5-8.el7.aarch64.rpm
oracle linux	7	aarch64	evolution-data-server	< 3.28.5-4.el7	evolution-data-server-3.28.5-4.el7.aarch64.rpm
oracle linux	7	aarch64	evolution-data-server-devel	< 3.28.5-4.el7	evolution-data-server-devel-3.28.5-4.el7.aarch64.rpm