Multiple vulnerabilities in Ximian's Evolution

Severity: Security
Product: Evolution Mail
Keywords: Evolution crash uudecode bonobo
References: 
  Core Security Advisory 
    http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10
  CAN-2003-0128 
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0128
  CAN-2003-0129 
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0129
  CAN-2003-0130
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0130

Multiple vulnerabilities have been found in Evolution versions below
1.2.3. These vulnerabilities make it possible for a carefully crafted
email to crash the program, cause general system instability through
resource starvation and get around security measures implemented within
the program.

Please download Evolution 1.2.3 or later using Red Carpet. You may also
obtain this update from the Ximian FTP site. Please note that if you are
Connector customer, you must download an update to Connector through Red
Carpet.

Debian Woody
ftp://ftp.ximian.com/pub/ximian-evolution/debian-woody-i386/evolution-dev_1.2.3-0.ximian.1_i386.deb
ftp://ftp.ximian.com/pub/ximian-evolution/debian-woody-i386/evolution-pilot_1.2.3-0.ximian.1_i386.deb
ftp://ftp.ximian.com/pub/ximian-evolution/debian-woody-i386/evolution_1.2.3-0.ximian.1_i386.deb
ftp://ftp.ximian.com/pub/ximian-evolution/debian-woody-i386/libgal23_0.24-0.ximian.1_i386.deb

Mandrake 8.2
ftp://ftp.ximian.com/pub/ximian-evolution/mandrake-82-i586/evolution-1.2.3-0.ximian.2.i586.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/mandrake-82-i586/evolution-devel-1.2.3-0.ximian.2.i586.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/mandrake-82-i586/evolution-pilot-1.2.3-0.ximian.2.i586.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/mandrake-82-i586/libgal23-0.24-0.ximian.1.i586.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/mandrake-82-i586/libgal23-devel-0.24-0.ximian.1.i586.rpm

Mandrake 9.0
ftp://ftp.ximian.com/pub/ximian-evolution/mandrake-90-i586/evolution-1.2.3-0.ximian.2.i586.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/mandrake-90-i586/evolution-devel-1.2.3-0.ximian.2.i586.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/mandrake-90-i586/evolution-pilot-1.2.3-0.ximian.2.i586.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/mandrake-90-i586/libgal23-0.24-0.ximian.1.i586.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/mandrake-90-i586/libgal23-devel-0.24-0.ximian.1.i586.rpm

Redhat 7.1
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-71-i386/evolution-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-71-i386/evolution-devel-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-71-i386/evolution-pilot-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-71-i386/gal-devel-0.24-1.71.ximian.1.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-71-i386/libgal23-0.24-1.71.ximian.1.i386.rpm

Redhat 7.2
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-72-i386/evolution-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-72-i386/evolution-devel-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-72-i386/evolution-pilot-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-72-i386/gal-devel-0.24-1.72.ximian.1.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-72-i386/libgal23-0.24-1.72.ximian.1.i386.rpm

Redhat 7.3
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-73-i386/evolution-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-73-i386/evolution-devel-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-73-i386/evolution-pilot-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-73-i386/gal-devel-0.24-1.73.ximian.1.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-73-i386/libgal23-0.24-1.73.ximian.1.i386.rpm

Redhat 8.0
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-80-i386/evolution-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-80-i386/evolution-devel-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-80-i386/evolution-pilot-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-80-i386/gal-devel-0.24-1.80.ximian.1.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/redhat-80-i386/libgal23-0.24-1.80.ximian.1.i386.rpm

Solaris 8
ftp://ftp.ximian.com/pub/ximian-evolution/solaris-8-sun4/evolution-1.2.3-0.ximian.1.sparc.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/solaris-8-sun4/evolution-devel-1.2.3-0.ximian.1.sparc.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/solaris-8-sun4/evolution-pilot-1.2.3-0.ximian.1.sparc.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/solaris-8-sun4/gal-devel-0.24-0.ximian.1.sparc.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/solaris-8-sun4/libgal23-0.24-0.ximian.1.sparc.rpm

SuSE 8.0
ftp://ftp.ximian.com/pub/ximian-evolution/suse-80-i386/evolution-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/suse-80-i386/evolution-devel-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/suse-80-i386/evolution-pilot-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/suse-80-i386/gal-devel-0.24-1.80.ximian.1.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/suse-80-i386/libgal23-0.24-1.80.ximian.1.i386.rpm

SuSE 8.1
ftp://ftp.ximian.com/pub/ximian-evolution/suse-81-i386/evolution-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/suse-81-i386/evolution-devel-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/suse-81-i386/evolution-pilot-1.2.3-0.ximian.2.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/suse-81-i386/gal-devel-0.24-1.81.ximian.1.i386.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/suse-81-i386/libgal23-0.24-1.81.ximian.1.i386.rpm

Yellowdog 2.2
ftp://ftp.ximian.com/pub/ximian-evolution/yellowdog-22-ppc/evolution-1.2.3-0.ximian.2.ppc.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/yellowdog-22-ppc/evolution-devel-1.2.3-0.ximian.2.ppc.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/yellowdog-22-ppc/evolution-pilot-1.2.3-0.ximian.2.ppc.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/yellowdog-22-ppc/gal-devel-0.24-0.ximian.1.ppc.rpm
ftp://ftp.ximian.com/pub/ximian-evolution/yellowdog-22-ppc/libgal23-0.24-0.ximian.1.ppc.rpm

_______________________________________________
updates maillist  -  [email protected]
To unsubscribe from this list, or to change your subscription options, follow the link below:
http://lists.ximian.com/mailman/listinfo/updates