USN-733-1: evolution-data-server vulnerability

Releases

• Ubuntu 7.10
• Ubuntu 6.06

Packages

• evolution-data-server -

Details

It was discovered that the Base64 encoding functions in
evolution-data-server did not properly handle large strings. If a user were
tricked into opening a specially crafted image file, or tricked into
connecting to a malicious server, an attacker could possibly execute
arbitrary code with user privileges.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 7.10

• libcamel1.2-10 - 1.12.1-0ubuntu2.1
• libebook1.2-9 - 1.12.1-0ubuntu2.1

Ubuntu 6.06

• libcamel1.2-8 - 1.6.1-0ubuntu7.2
• libebook1.2-5 - 1.6.1-0ubuntu7.2

After a standard system upgrade you need to restart Evolution to effect
the necessary changes.

References

• CVE-2009-0587