Ubuntu

“evolution” 2.22.2-0ubuntu1.2 source package in Ubuntu

Changelog

evolution (2.22.2-0ubuntu1.2) hardy-security; urgency=low

  * SECURITY UPDATE: buffer overflow via timezone data in crafted ical
    attachments
  * debian/patches/99_00_CVE-2008-1108.patch: adjust
    calendar/gui/e-itip-control.c to use a GString rather than a fixed-size
    buffer to build the HTML string to avoid the possibility of an overflow.
  * SECURITY UPDATE: heap-based overflow via crafted ical attachments with
    long DESCRIPTION
  * debian/patches/99_01_CVE-2008-1109.patch: adjust calendar/gui/itip-utils.c
    to not use a fixed-size buffer for parsing external data. Simplify the
    logic to just split and rejoin the string with a different line separator.
  * SECURITY UPDATE: remotely triggered denial of service
  * debian/patches/99_02_bug535459.patch: add sanity checks and don't use
    component when checks fail in plugins/itip-formatter.c, gui/itip-utils.h,
    gui/itip-utils.c, gui/e-itip-control.c
  * References
    CVE-2008-1108
    CVE-2008-1109
    http://bugzilla.gnome.org/show_bug.cgi?id=535459

 -- Jamie Strandboge <email address hidden>   Thu, 05 Jun 2008 06:34:50 -0400

Upload details

Uploaded by:
Jamie Strandboge on 2008-06-06
Uploaded to:
Hardy
Original maintainer:
Ubuntu Desktop
Component:
main
Architectures:
any
Section:
mail
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Hardy security on 2008-06-06 main mail

Downloads

File Size MD5 Checksum
evolution_2.22.2.orig.tar.gz 35.4 MiB 763792ab4262005384ba24d3d4b5998e
evolution_2.22.2-0ubuntu1.2.diff.gz 44.4 KiB e52c6cd1888a74a273f49fb067f22382
evolution_2.22.2-0ubuntu1.2.dsc 2.1 KiB 0caef06da65690343376e8d4edfbae0f

Binary packages built by this source

evolution: groupware suite with mail client and organizer

 Evolution is a groupware suite which integrates mail, calendar,
 address book, to-do list and memo tools.
 .
 Additional features include integration with Exchange and Groupwise
 servers, newsgroup client, LDAP support, web calendars and
 synchronization with Palm devices.
 .
 Evolution is a graphical application that is part of GNOME, and
 is distributed by Novell, Inc.
 .
 See http://www.novell.com/products/evolution/ for more
 information.
 .
 The following plugins belonging to the "base" set are included.
  - bogo-junk-plugin
  - calendar-file
  - calendar-http
  - calendar-weather
  - google-account-setup
  - itip-formatter
  - plugin-manager
  - default-source
  - addressbook-file
  - startup-wizard
  - print-message
  - mark-all-read
  - groupwise-features
  - groupwise-account-setup
  - hula-account-setup
  - mail-account-disable
  - publish-calendar
  - caldav
  - imap-features
  - sa-junk-plugin
  - exchange-operations

evolution-common: architecture independent files for Evolution

 Evolution is a groupware suite which integrates mail, calendar,
 address book, to-do list and memo tools.
 .
 This package contains the architecture independent files needed
 by the evolution package.

evolution-dbg: debugging symbols for Evolution

 Evolution is a groupware suite which integrates mail, calendar,
 address book, to-do list and memo tools.
 .
 This package contains unstripped binaries of evolution for
 use in debugging.

evolution-dev: development library files for Evolution

 Evolution is a groupware suite which integrates mail, calendar,
 address book, to-do list and memo tools.
 .
 This package contains header and static library files
 for developing Evolution components.

evolution-plugins: standard plugins for Evolution

 Evolution is a groupware suite which integrates mail, calendar,
 address book, to-do list and memo tools.
 .
 This package includes plugins for evolution. The plugins belong
 to the set of "standard" plugins, which are useful, but not
 necessary for a functioning application.
 .
 The following standard plugins are included.
  - backup-restore
  - bbdb
  - subject-thread
  - save-calendar
  - select-one-source
  - copy-tool
  - mail-to-task
  - mark-calendar-offline
  - mailing-list-actions
  - mail-notification
  - default-mailer
  - import-ics-attachments
  - prefer-plain

evolution-plugins-experimental: experimental plugins for Evolution

 Evolution is a groupware suite which integrates mail, calendar,
 address book, to-do list and memo tools.
 .
 This package includes plugins for Evolution. The plugins belong
 to the set of "experimental" plugins, which are unsupported, have
 undergone little testing, and might cause problems to the rest of
 Evolution. Use with care.
 .
 The following plugins are included.
  - external-editor
  - folder-unsubscribe
  - mail-to-meeting
  - save-attachments
  - ipod-sync