evolution security update

2007-06-2514:45:34

CentOS Project

lists.centos.org

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.03

Percentile

91.0%

JSON

CentOS Errata and Security Advisory CESA-2007:0509

Evolution is the GNOME collection of personal information management (PIM)
tools.

A flaw was found in the way Evolution processes certain IMAP server
messages. If a user can be tricked into connecting to a malicious IMAP
server it may be possible to execute arbitrary code as the user running
evolution. (CVE-2007-3257)

All users of Evolution should upgrade to these updated packages, which
contain a backported patch which resolves this issue.

Affected packages:
evolution
evolution-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0509

OSVersionArchitecturePackageVersionFilename
CentOS3i386evolution< 1.4.5-21.el3evolution-1.4.5-21.el3.i386.rpm
CentOS3i386evolution-devel< 1.4.5-21.el3evolution-devel-1.4.5-21.el3.i386.rpm
CentOS3x86_64evolution< 1.4.5-21.el3evolution-1.4.5-21.el3.x86_64.rpm
CentOS3x86_64evolution-devel< 1.4.5-21.el3evolution-devel-1.4.5-21.el3.x86_64.rpm
CentOS4i386evolution< 2.0.2-35.0.4.el4evolution-2.0.2-35.0.4.el4.i386.rpm
CentOS4i386evolution-devel< 2.0.2-35.0.4.el4evolution-devel-2.0.2-35.0.4.el4.i386.rpm
CentOS4x86_64evolution< 2.0.2-35.0.4.el4evolution-2.0.2-35.0.4.el4.x86_64.rpm
CentOS4x86_64evolution-devel< 2.0.2-35.0.4.el4evolution-devel-2.0.2-35.0.4.el4.x86_64.rpm
CentOS3ia64evolution< 1.4.5-21.el3evolution-1.4.5-21.el3.ia64.rpm
CentOS3ia64evolution-devel< 1.4.5-21.el3evolution-devel-1.4.5-21.el3.ia64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	3	i386	evolution	< 1.4.5-21.el3	evolution-1.4.5-21.el3.i386.rpm
CentOS	3	i386	evolution-devel	< 1.4.5-21.el3	evolution-devel-1.4.5-21.el3.i386.rpm
CentOS	3	x86_64	evolution	< 1.4.5-21.el3	evolution-1.4.5-21.el3.x86_64.rpm
CentOS	3	x86_64	evolution-devel	< 1.4.5-21.el3	evolution-devel-1.4.5-21.el3.x86_64.rpm
CentOS	4	i386	evolution	< 2.0.2-35.0.4.el4	evolution-2.0.2-35.0.4.el4.i386.rpm
CentOS	4	i386	evolution-devel	< 2.0.2-35.0.4.el4	evolution-devel-2.0.2-35.0.4.el4.i386.rpm
CentOS	4	x86_64	evolution	< 2.0.2-35.0.4.el4	evolution-2.0.2-35.0.4.el4.x86_64.rpm
CentOS	4	x86_64	evolution-devel	< 2.0.2-35.0.4.el4	evolution-devel-2.0.2-35.0.4.el4.x86_64.rpm
CentOS	3	ia64	evolution	< 1.4.5-21.el3	evolution-1.4.5-21.el3.ia64.rpm
CentOS	3	ia64	evolution-devel	< 1.4.5-21.el3	evolution-devel-1.4.5-21.el3.ia64.rpm