bogofilter-1.2.5-2.el8, evolution-data-server-3.28.5-14.el8, evolution-mapi-3.28.3-3.el8, evolution-3.28.5-14.el8, openchange-2.3-26.el8

エラータID: AXSA:2021-1388:01

リリース日: 
2021/02/04 Thursday - 10:06
題名: 
bogofilter-1.2.5-2.el8, evolution-data-server-3.28.5-14.el8, evolution-mapi-3.28.3-3.el8, evolution-3.28.5-14.el8, openchange-2.3-26.el8
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
Low
Description: 

以下項目について対処しました。

[Security Fix]
- evolution-data-serverには、STARTTLSの処理にバッファリング
の問題があるため、サーバーが "begin TLS" レスポンスを返した時、
TLSコンテキストの中の追加データを読み込み、評価してしまう、
レスポンスインジェクションとしても知られる脆弱性があります。
(CVE-2020-14928)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2020-14928
evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. bogofilter-1.2.5-2.el8.src.rpm
    MD5: 9f3da2621b954c1c2f4e054007418ca7
    SHA-256: 298a39636284a97921632e1bd162f430ad402e5c8b021275939ac0c40b631249
    Size: 796.96 kB
  2. evolution-data-server-3.28.5-14.el8.src.rpm
    MD5: be655228d7f3fe39f4c958696bf4931d
    SHA-256: e556c02a9e74247eb377297bf89f55623d0546b798c863da0e85c19fe644c166
    Size: 4.34 MB
  3. evolution-mapi-3.28.3-3.el8.src.rpm
    MD5: f7d162edb890952a1fb916c6f64ba9b4
    SHA-256: dc1c6bf04aeb2e460df531b80b3afb7aa9d54faf7adea2043be9246d7becdeae
    Size: 422.36 kB
  4. evolution-3.28.5-14.el8.src.rpm
    MD5: 98ab5b092a2fce66a1656b09aef04bdb
    SHA-256: b1f319b248e05d8b4662a94ee529d0ac8815d289b130f8b7c0fbedc3dde44a36
    Size: 11.65 MB
  5. openchange-2.3-26.el8.src.rpm
    MD5: 14016ce76829d3156e0a2844a55f2d84
    SHA-256: ff40131a009271b47c183e9ab74fdad6df3770608f290e17f605f4122e455b39
    Size: 2.04 MB

Asianux Server 8 for x86_64
  1. bogofilter-1.2.5-2.el8.x86_64.rpm
    MD5: 57c873d44f1d25ba243eb4bc9da00f9e
    SHA-256: 15269e892ee678a984c150fd3d559a63e1462921c790c35909f7427b7b65f9f4
    Size: 379.45 kB
  2. evolution-data-server-3.28.5-14.el8.x86_64.rpm
    MD5: 4da0a240e39463ac4da97eb85a39c1eb
    SHA-256: e78b294c570cf51ae1ce73c181a977418b116f4203b6850e8e0e854c080ef853
    Size: 2.14 MB
  3. evolution-data-server-devel-3.28.5-14.el8.x86_64.rpm
    MD5: e2db466529f7962373e6337cad2f2b27
    SHA-256: d85d2b9cb9928ca923f0b76cd8cf5c1418e408b7806bee10e52538b91131ad91
    Size: 559.43 kB
  4. evolution-data-server-langpacks-3.28.5-14.el8.noarch.rpm
    MD5: 0330208cff90f30fe10ad94b9b555bd9
    SHA-256: a1b5f8a734b5dec8b6de6947b4ad2b96daf920c92b0ae11840fc9551e1836678
    Size: 1.42 MB
  5. evolution-mapi-3.28.3-3.el8.x86_64.rpm
    MD5: c4c4f2dfb66ddf7dd8c8c4cc908da66d
    SHA-256: 5a09081f44dc996e37ed4bf9a58d136928cf0b42ea655035421cb772cc982cd3
    Size: 299.87 kB
  6. evolution-mapi-langpacks-3.28.3-3.el8.noarch.rpm
    MD5: 99342492b7f5711141743bf4a9269420
    SHA-256: 62019cc39e271a62c5cd51ccfc56464b0b041afb612fd8932cf1ea8122690f82
    Size: 200.21 kB
  7. evolution-3.28.5-14.el8.x86_64.rpm
    MD5: 674209b348a4b27f5fdb8ea4c8186039
    SHA-256: bc724e991271884defac467857e9024d6445bccae0989c5eaccc2e319989cf8a
    Size: 4.02 MB
  8. evolution-bogofilter-3.28.5-14.el8.x86_64.rpm
    MD5: 65fe9d1577e73c71dab19bbc41bf6431
    SHA-256: 5370c0bd93902d37203d3b91be03d7113e64710b8cc0ffe159a7bfd6990f6cd1
    Size: 18.99 kB
  9. evolution-help-3.28.5-14.el8.noarch.rpm
    MD5: 05f0e66cf18189460d4d8063a75daf96
    SHA-256: 8057414b8c135ef61f879425fe8a4358825a77fb31072675267b968caa7f86ef
    Size: 2.09 MB
  10. evolution-langpacks-3.28.5-14.el8.noarch.rpm
    MD5: b74f38672dc309b08f6fea5b0e93d55f
    SHA-256: d9e9530fcb4dd223cd8f75bf9dfb60ae044802042024516b332dc3053ac659c3
    Size: 6.13 MB
  11. evolution-pst-3.28.5-14.el8.x86_64.rpm
    MD5: f139182740b29acb57c39cd0eb6f9699
    SHA-256: f9fe3f280855bb5b17e307f1f52464f93bc656e70fd4cc54965b0e6bf5e61124
    Size: 31.68 kB
  12. evolution-spamassassin-3.28.5-14.el8.x86_64.rpm
    MD5: e0baf5d3a6d370aee9d42987e0372c4f
    SHA-256: 1bb832370140fae9132786c83a66ac36b7cc323aea733a3d2f06c40be61fe3d9
    Size: 20.32 kB
  13. openchange-2.3-26.el8.x86_64.rpm
    MD5: cd55fe90e9336d5807f79cc0f3cdbc53
    SHA-256: 470e4b81221ed802a15f197b2511bc66e74870e4641f79ea72da75d894941c43
    Size: 492.27 kB
  14. evolution-data-server-3.28.5-14.el8.i686.rpm
    MD5: 53cc96f9d00de7307345425de3a084d8
    SHA-256: 1b1e80ecdf439d03c26db16266642e34cf39723e6526123f39c20c1ea8e748b8
    Size: 2.28 MB
  15. evolution-data-server-devel-3.28.5-14.el8.i686.rpm
    MD5: 53b44d7849f5e9aadf2174f721317fb2
    SHA-256: 3c1aeb6310d08e32e8b0bc09d49947ae2b5526c207d3a5f7fe3f4af6ab0555c3
    Size: 559.37 kB
  16. openchange-2.3-26.el8.i686.rpm
    MD5: b159fe453b5d44819b73dc1b442326ef
    SHA-256: 2d6c50fc1abc9fdf957a47f500fca14d7a79b16276587fce73bbc2cb9f015968
    Size: 533.74 kB