The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade evolution-data-server-perlUpgrade evolution-data-server-docUpgrade evolution-data-server-testsUpgrade evolution-devel | May 4, 2022 | Jul 29, 2020 |
| Centos_linux | — | Upgrade evolution-data-server-tests-debuginfoUpgrade evolution-spamassassinUpgrade evolution-data-server-debugsourceUpgrade evolution-ews-debugsourceUpgrade evolution-debuginfoUpgrade evolution-pst-debuginfoUpgrade evolution-pstUpgrade evolution-data-server-develUpgrade evolution-ews-debuginfoUpgrade evolution-ews-langpacksUpgrade evolutionUpgrade evolution-data-server-debuginfoUpgrade evolution-bogofilterUpgrade evolution-langpacksUpgrade evolution-data-serverUpgrade evolution-bogofilter-debuginfoUpgrade evolution-helpUpgrade evolution-spamassassin-debuginfoUpgrade evolution-debugsourceUpgrade evolution-data-server-langpacksUpgrade evolution-ews | Jun 1, 2021 | Jul 29, 2020 |
| Debian | — | Upgrade evolution-data-server | Aug 4, 2020 | Jul 29, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade evolution-data-server-develUpgrade evolution-data-server | Feb 22, 2021 | Jul 29, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade evolution-data-server-develUpgrade evolution-data-server | Jan 20, 2021 | Jul 29, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade evolution-data-serverUpgrade evolution-data-server-devel | Nov 2, 2020 | Jul 29, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade evolution-data-serverUpgrade evolution-data-server-develUpgrade evolution-data-server-langpacks | Aug 31, 2020 | Jul 29, 2020 |
| Oracle Solaris | — | Upgrade library/desktop/evolution-data-server to version 3.34.0-11.4.27.0.1.82.0 on Solaris 11.4 | Jan 19, 2021 | Jul 29, 2020 |
| Oracle_linux | — | Upgrade evolution-develUpgrade evolution-data-server-testsUpgrade evolution-data-server-docUpgrade evolution-data-serverUpgrade evolution-spamassassinUpgrade evolutionUpgrade evolution-data-server-develUpgrade evolution-langpacksUpgrade evolution-pstUpgrade evolution-helpUpgrade evolution-ewsUpgrade evolution-bogofilterUpgrade evolution-data-server-perlUpgrade evolution-ews-langpacksUpgrade evolution-data-server-langpacks | May 26, 2021 | Jul 30, 2020 |
| Redhat_linux | — | Upgrade evolution-data-server-develUpgrade evolution-data-serverUpgrade evolution-data-server-langpacksUpgrade evolution-ewsUpgrade evolution-data-server-debuginfoUpgrade evolution-ews-langpacksUpgrade evolution-data-server-perlUpgrade evolution-bogofilterUpgrade evolution-debugsourceUpgrade evolution-bogofilter-debuginfoUpgrade evolution-data-server-docUpgrade evolution-helpUpgrade evolution-spamassassin-debuginfoUpgrade evolution-ews-debugsourceUpgrade evolution-ews-debuginfoUpgrade evolution-develNo solution existsUpgrade evolution-pst-debuginfoUpgrade evolution-pstUpgrade evolution-langpacksUpgrade evolution-data-server-testsUpgrade evolution-spamassassinUpgrade evolutionUpgrade evolution-data-server-debugsourceUpgrade evolution-debuginfoUpgrade evolution-data-server-tests-debuginfo | May 21, 2021 | Jul 29, 2020 |
| Rocky_linux | — | Upgrade evolution-spamassassinUpgrade evolution-data-server-debugsourceUpgrade evolution-pst-debuginfoUpgrade evolution-debuginfoUpgrade evolution-data-server-debuginfoUpgrade evolution-ews-debuginfoUpgrade evolution-develUpgrade evolution-spamassassin-debuginfoUpgrade evolution-debugsourceUpgrade evolution-data-server-testsUpgrade evolution-ews-debugsourceUpgrade evolutionUpgrade evolution-ewsUpgrade evolution-data-server-tests-debuginfoUpgrade evolution-bogofilterUpgrade evolution-bogofilter-debuginfoUpgrade evolution-data-serverUpgrade evolution-data-server-develUpgrade evolution-pstUpgrade evolution-data-server-perl | Mar 12, 2024 | Jul 29, 2020 |
| Suse | — | Upgrade libebook-1_2-20-32bitUpgrade libedataserverui-1_2-1Upgrade libecal-2_0-1Upgrade libedataserver-1_2-22Upgrade evolution-ewsUpgrade libcamel-1_2-57Upgrade libebackend-1_2-10Upgrade libebook-contacts-1_2-2-32bitUpgrade libebook-1_2-16Upgrade libedata-book-1_2-26Upgrade libecal-2_0-1-32bitUpgrade evolution-data-server-langUpgrade libedataserver-1_2-22-32bitUpgrade typelib-1_0-EDataServer-1_2Upgrade libebook-1_2-16-32bitUpgrade libedata-cal-2_0-1-32bitUpgrade typelib-1_0-EDataServerUI-1_2Upgrade evolution-ews-langUpgrade evolution-data-server-32bitUpgrade libedataserverui-1_2-2Upgrade evolution-data-server-develUpgrade libedataserver-1_2-24-32bitUpgrade libcamel-1_2-59-32bitUpgrade libcamel-1_2-59Upgrade libecal-1_2-19-32bitUpgrade libcamel-1_2-62Upgrade libebook-contacts-1_2-3-32bitUpgrade libecal-1_2-19Upgrade typelib-1_0-EBackend-1_2Upgrade typelib-1_0-EBookContacts-1_2Upgrade typelib-1_0-EDataCal-2_0Upgrade libedataserver-1_2-21Upgrade libedata-cal-1_2-28-32bitUpgrade libedataserver-1_2-24Upgrade typelib-1_0-ECal-2_0Upgrade libedata-book-1_2-26-32bitUpgrade libedata-book-1_2-25Upgrade libebackend-1_2-10-32bitUpgrade libedata-cal-2_0-1Upgrade libebook-contacts-1_2-3Upgrade libebook-1_2-20Upgrade libcamel-1_2-62-32bitUpgrade libedata-cal-1_2-28Upgrade libedata-book-1_2-25-32bitUpgrade libedataserverui-1_2-2-32bitUpgrade evolution-data-serverUpgrade typelib-1_0-EBook-1_2Upgrade typelib-1_0-EDataBook-1_2Upgrade typelib-1_0-Camel-1_2Upgrade libebook-contacts-1_2-2 | Mar 20, 2021 | Jul 29, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub