Format: 1.7 Date: Thu, 05 Jun 2008 06:34:50 -0400 Source: evolution Binary: evolution evolution-common evolution-dbg evolution-dev evolution-plugins evolution-plugins-experimental Architecture: amd64_translations amd64 hppa_translations hppa all i386_translations i386 ia64_translations ia64 lpia_translations lpia powerpc_translations powerpc source sparc_translations sparc Version: 2.22.2-0ubuntu1.2 Distribution: hardy-security Urgency: low Maintainer: Ubuntu Desktop Team Changed-By: Jamie Strandboge Description: evolution - groupware suite with mail client and organizer evolution-common - architecture independent files for Evolution evolution-dbg - debugging symbols for Evolution evolution-dev - development library files for Evolution evolution-plugins - standard plugins for Evolution evolution-plugins-experimental - experimental plugins for Evolution Changes: evolution (2.22.2-0ubuntu1.2) hardy-security; urgency=low . * SECURITY UPDATE: buffer overflow via timezone data in crafted ical attachments * debian/patches/99_00_CVE-2008-1108.patch: adjust calendar/gui/e-itip-control.c to use a GString rather than a fixed-size buffer to build the HTML string to avoid the possibility of an overflow. * SECURITY UPDATE: heap-based overflow via crafted ical attachments with long DESCRIPTION * debian/patches/99_01_CVE-2008-1109.patch: adjust calendar/gui/itip-utils.c to not use a fixed-size buffer for parsing external data. Simplify the logic to just split and rejoin the string with a different line separator. * SECURITY UPDATE: remotely triggered denial of service * debian/patches/99_02_bug535459.patch: add sanity checks and don't use component when checks fail in plugins/itip-formatter.c, gui/itip-utils.h, gui/itip-utils.c, gui/e-itip-control.c * References CVE-2008-1108 CVE-2008-1109 http://bugzilla.gnome.org/show_bug.cgi?id=535459 Files: 8baca5d6494959d4365c726cfd8b6a31 12379852 raw-translations - evolution_2.22.2-0ubuntu1.2_amd64_translations.tar.gz 6de1f53d4915c6c9726c52ef45562224 2903352 gnome optional evolution_2.22.2-0ubuntu1.2_amd64.deb 3c34b1b901150dbf1a09c75f6793196f 144708 devel optional evolution-dev_2.22.2-0ubuntu1.2_amd64.deb 8ac74c0e7de072b7ee76739878e74f44 7230946 gnome extra evolution-dbg_2.22.2-0ubuntu1.2_amd64.deb 2ea641d2e83ad2413b7e1a3e933e6109 85044 gnome optional evolution-plugins_2.22.2-0ubuntu1.2_amd64.deb 1bb41364ae99b5bda29e46eddc693806 34392 gnome optional evolution-plugins-experimental_2.22.2-0ubuntu1.2_amd64.deb eba69383a6f4f0033c7c4de565d94740 12379544 raw-translations - evolution_2.22.2-0ubuntu1.2_hppa_translations.tar.gz fa6205bfb23ad330544641aa562a5780 3147624 gnome optional evolution_2.22.2-0ubuntu1.2_hppa.deb cdece933a6b4ec960b7e2497e7813e19 144758 devel optional evolution-dev_2.22.2-0ubuntu1.2_hppa.deb 06d3270184f44bd44ac06c1be50351f3 7107184 gnome extra evolution-dbg_2.22.2-0ubuntu1.2_hppa.deb fc6a9a506d364a3019235ed06c76a78a 86732 gnome optional evolution-plugins_2.22.2-0ubuntu1.2_hppa.deb 0f8d7c729808cd2efcaa8a40fad1e6b5 36030 gnome optional evolution-plugins-experimental_2.22.2-0ubuntu1.2_hppa.deb a421956ace4b74edada5dc54fb9fe9e3 15729664 gnome optional evolution-common_2.22.2-0ubuntu1.2_all.deb 29eef84886583451e36c6a95899b569d 21766879 raw-translations - evolution_2.22.2-0ubuntu1.2_i386_translations.tar.gz 41ff8b7083ee4e2e644904485527a446 2602846 gnome optional evolution_2.22.2-0ubuntu1.2_i386.deb 4dbafce7b3ac38dac260a5ed60bd026c 231654 devel optional evolution-dev_2.22.2-0ubuntu1.2_i386.deb 3560419f20ca7a4cc354fc949eae851f 6926848 gnome extra evolution-dbg_2.22.2-0ubuntu1.2_i386.deb cc6113ddfe62c24b9d77eac7ca4b8dd9 161372 gnome optional evolution-plugins_2.22.2-0ubuntu1.2_i386.deb 5b334a6f159c1ff1196aa39379c0515b 117474 gnome optional evolution-plugins-experimental_2.22.2-0ubuntu1.2_i386.deb ff0beffbff7f107ab67d501e3bd2bf86 12379218 raw-translations - evolution_2.22.2-0ubuntu1.2_ia64_translations.tar.gz a3e981240d0a97ff7be06d967463ce99 3781950 gnome optional evolution_2.22.2-0ubuntu1.2_ia64.deb 7a0ab2a534df646cfffb830d5cd69ccb 144694 devel optional evolution-dev_2.22.2-0ubuntu1.2_ia64.deb 0ce9916ef7e8e5d915e1299f5d33d6df 6881830 gnome extra evolution-dbg_2.22.2-0ubuntu1.2_ia64.deb c3a6e0498af1e4e4d07205a46d9bc698 106332 gnome optional evolution-plugins_2.22.2-0ubuntu1.2_ia64.deb 50e6cf8082bb88feda9e76b31f384882 43196 gnome optional evolution-plugins-experimental_2.22.2-0ubuntu1.2_ia64.deb 9233a15547ff10db96aaaf2f8001b322 12379566 raw-translations - evolution_2.22.2-0ubuntu1.2_lpia_translations.tar.gz 375ec5a84f93d5eb5c9cb9de468a5390 2666618 gnome optional evolution_2.22.2-0ubuntu1.2_lpia.deb 653f609fd8db8befe00b3b711d166630 144706 devel optional evolution-dev_2.22.2-0ubuntu1.2_lpia.deb cecb4f54adb50cecd57de4ed45aaff3b 6915996 gnome extra evolution-dbg_2.22.2-0ubuntu1.2_lpia.deb 72a9baec61117ba8aa9dab9425d67516 75182 gnome optional evolution-plugins_2.22.2-0ubuntu1.2_lpia.deb 0cd359722ffeb6a4da8b6d003e0fb1cd 31390 gnome optional evolution-plugins-experimental_2.22.2-0ubuntu1.2_lpia.deb 441193731df6be12db8ff892cf4d5d02 12379633 raw-translations - evolution_2.22.2-0ubuntu1.2_powerpc_translations.tar.gz 0287ed45a5a2b6a23b0ad3ea0ba039e6 3014834 gnome optional evolution_2.22.2-0ubuntu1.2_powerpc.deb c3d032ed58d78f4a14acfef83413b824 144722 devel optional evolution-dev_2.22.2-0ubuntu1.2_powerpc.deb 762ab94dc1c3c1442d8a6457bfc677ca 7156488 gnome extra evolution-dbg_2.22.2-0ubuntu1.2_powerpc.deb 20854790430b7f3e5e165c40f81f15fb 105452 gnome optional evolution-plugins_2.22.2-0ubuntu1.2_powerpc.deb 7020d0c47b06debdac666d5c1766910e 43614 gnome optional evolution-plugins-experimental_2.22.2-0ubuntu1.2_powerpc.deb 0caef06da65690343376e8d4edfbae0f 2129 gnome optional evolution_2.22.2-0ubuntu1.2.dsc e52c6cd1888a74a273f49fb067f22382 45497 gnome optional evolution_2.22.2-0ubuntu1.2.diff.gz da5a0df89df7c8a30615fe01910cde0d 12379462 raw-translations - evolution_2.22.2-0ubuntu1.2_sparc_translations.tar.gz 489c808c00e311764eeca9b07863170a 2694604 gnome optional evolution_2.22.2-0ubuntu1.2_sparc.deb 88bab60196507672ea142b80ef651b83 144708 devel optional evolution-dev_2.22.2-0ubuntu1.2_sparc.deb a6235b1b90a6df6c67a26c79628b839e 6662906 gnome extra evolution-dbg_2.22.2-0ubuntu1.2_sparc.deb f3eea30237ff391e90b417a79e6d75e0 74054 gnome optional evolution-plugins_2.22.2-0ubuntu1.2_sparc.deb b96aa37d3efaeb5555b438d773274217 31548 gnome optional evolution-plugins-experimental_2.22.2-0ubuntu1.2_sparc.deb Original-Maintainer: Debian Evolution Maintainers