Red Hat Security AdvisoryRHSA-2008:0177
evolution security update
Released 2008-03-05 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 evolution-2.0.2-35.0.4.el4_6.1, evolution-2.0.2-35.0.4.el4_6.1.i386, evolution-2.0.2-35.0.4.el4_6.1.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) evolution-2.8.0-40.el5_1.1, evolution-2.8.0-40.el5_1.1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) evolution-2.8.0-40.el5_1.1, evolution-devel-2.8.0-40.el5_1.1, evolution-devel-2.8.0-40.el5_1.1.i386
- Red Hat Enterprise Linux Desktop version 4 evolution-2.0.2-35.0.4.el4_6.1, evolution-2.0.2-35.0.4.el4_6.1.i386, evolution-devel-2.0.2-35.0.4.el4_6.1 +5
- Red Hat Enterprise Linux ES version 4 evolution-2.0.2-35.0.4.el4_6.1, evolution-2.0.2-35.0.4.el4_6.1.i386, evolution-2.0.2-35.0.4.el4_6.1.ia64 +9
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) evolution-2.8.0-40.el5_1.1, evolution-2.8.0-40.el5_1.1.i386, evolution-devel-2.8.0-40.el5_1.1 +1
- Red Hat Enterprise Linux WS version 4 evolution-2.0.2-35.0.4.el4_6.1, evolution-2.0.2-35.0.4.el4_6.1.i386, evolution-2.0.2-35.0.4.el4_6.1.ia64 +9
Fixes 1 record
Priority LOW 39
Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated u…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.06018 · Published 2008-03-06 · Fixed CWE-134
