evolution-data-server-3.28.5-15.el8, evolution-ews-3.28.5-10.el8, evolution-3.28.5-16.el8

エラータID: AXSA:2021-2137:01

リリース日: 
2021/07/01 Thursday - 11:53
題名: 
evolution-data-server-3.28.5-15.el8, evolution-ews-3.28.5-10.el8, evolution-3.28.5-16.el8
影響のあるチャネル: 
Asianux Server 8 for x86_64
Severity: 
Low
Description: 

以下項目について対処しました。

[Security Fix]
- GNOME の evolution-data-server には imapx_free_capability と imapx_connect_to_server
に関連した NULL ポインタデリファレンスの問題があり、悪意のあるサーバーが接続試行
時に、無効な、例えば最小の CAPABILITY 行を送信することで、メールクライアントをク
ラッシュさせる脆弱性があります。(CVE-2020-16117)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2020-16117
In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. evolution-data-server-3.28.5-15.el8.src.rpm
    MD5: 145487d8c28c18a476f5d5818cd75d67
    SHA-256: 7dd3b535b457fc78626947453115dfacdf1c8f6810fc4e887ac6638e1c7b2484
    Size: 4.34 MB
  2. evolution-ews-3.28.5-10.el8.src.rpm
    MD5: 62b1b89e48a4078be62b6884458feb71
    SHA-256: b8eab5c8b1222b6e902032bdb1be826785dde570e41b9bad12e131b1d7be9058
    Size: 546.81 kB
  3. evolution-3.28.5-16.el8.src.rpm
    MD5: 0679c42677dae95fd9fb0f0c19e64a3b
    SHA-256: c4fbb429fd2c08b6eade76d3245770496e3208fb74e0a2b62eda38900ed64e81
    Size: 11.65 MB

Asianux Server 8 for x86_64
  1. evolution-data-server-3.28.5-15.el8.x86_64.rpm
    MD5: 151d15b48cf5723e6557d1c749fdcd2e
    SHA-256: 6c126b50bab6908915835a1b7fd96766417354748a1d03c1ddf7daebaaff99e6
    Size: 2.14 MB
  2. evolution-data-server-devel-3.28.5-15.el8.x86_64.rpm
    MD5: 50cc23d6a0186cf6712a5a8273449cb9
    SHA-256: 97ca2bc120efb0658b354b2fbe668a53f7570856abd459c30ebc2fff7cdfd031
    Size: 559.61 kB
  3. evolution-data-server-langpacks-3.28.5-15.el8.noarch.rpm
    MD5: 964e44f704f09723b1283bbce7641689
    SHA-256: 015ca8a9b839f0cff67b369cba5e5c8a09f172e64c5b7214ace2ba0177d97652
    Size: 1.42 MB
  4. evolution-ews-3.28.5-10.el8.x86_64.rpm
    MD5: a72bb008e6d88143010df4d4a8141fb2
    SHA-256: 688d177c0864d47162c9b6578677a6b44799f9ef5aaaff0e1bf74eaa5cd039d8
    Size: 398.50 kB
  5. evolution-ews-langpacks-3.28.5-10.el8.noarch.rpm
    MD5: d8e6c39d9949447db8be8b4c5c7da255
    SHA-256: 52040fc23b3ab2ec7965112a987744bfdc01ebfb4d97c0138ed76a42ab9a9725
    Size: 165.46 kB
  6. evolution-3.28.5-16.el8.x86_64.rpm
    MD5: 42da6ecbdfa2597688ba272c69a46348
    SHA-256: dcb4317f951daa4ff220639fe90461a41a21732a828fdd8663c25255518fe83b
    Size: 4.02 MB
  7. evolution-bogofilter-3.28.5-16.el8.x86_64.rpm
    MD5: 399821780a5fdb5b8ae49021ccfbe813
    SHA-256: 437051b79db455ce21789ad1642b4f275d31c9fbfa54480749564b3801ea54fd
    Size: 19.06 kB
  8. evolution-help-3.28.5-16.el8.noarch.rpm
    MD5: af93947ba06e2311a7066e001d329acf
    SHA-256: 8b6d997f596498e09b00578ca2b57cf99b43b56f9763f2799d7b40f38444c72e
    Size: 2.09 MB
  9. evolution-langpacks-3.28.5-16.el8.noarch.rpm
    MD5: 48b20bb5f102b2a158c1e0bfb45aec83
    SHA-256: bcfede01cc01ebf89a34a78fb888c9c6930886d685b30b1d3d5bd3fcea47afb6
    Size: 6.13 MB
  10. evolution-pst-3.28.5-16.el8.x86_64.rpm
    MD5: d4be03cd5a1766e34ddbbb7e7065270c
    SHA-256: b7df02f54c6307c0f43c2e9087ac6c5fd4cd4fb45aedda8e7fd3aa550850098e
    Size: 31.85 kB
  11. evolution-spamassassin-3.28.5-16.el8.x86_64.rpm
    MD5: 70c1f3ea0a0b1c4a477dde873f2845fd
    SHA-256: 29bcdf40d8dbba5cb1e1554fe6153277e699675c44e2b8ff9ee13866c7c660b7
    Size: 20.49 kB
  12. evolution-data-server-3.28.5-15.el8.i686.rpm
    MD5: db529061f6da42a33911e35627c646cc
    SHA-256: 82a852585ac55161853df18fc9ba5076c52e2016f161105dba34c796cfb82773
    Size: 2.28 MB
  13. evolution-data-server-devel-3.28.5-15.el8.i686.rpm
    MD5: eb7d422ce7e4688759591a6107bf2008
    SHA-256: ac062a4dccd2f041bd34e594c9112a336bbe777bee730a5fed2665b92d0f04c9
    Size: 559.56 kB