----------------------------------------------------------------------

Try a new way to discover vulnerabilities that ALREADY EXIST in your
IT infrastructure.

The Full Featured Secunia Network Software Inspector (NSI) is now
available:
http://secunia.com/network_software_inspector/

The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT
vulnerabilities in more than 4,000 different Windows applications.

----------------------------------------------------------------------

TITLE:
SUSE update for evolution and evolution-data-server

SECUNIA ADVISORY ID:
SA25958

VERIFY ADVISORY:
http://secunia.com/advisories/25958/

CRITICAL:
Less critical

IMPACT:
DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
SUSE Linux 10
http://secunia.com/product/6221/
SUSE Linux 10.1
http://secunia.com/product/10796/
openSUSE 10.2
http://secunia.com/product/13375/
SuSE Linux Desktop 1.x
http://secunia.com/product/2002/
SUSE Linux Enterprise Server 10
http://secunia.com/product/12192/

DESCRIPTION:
SUSE has issued an update for evolution and evolution-data-server.
This fixes a vulnerability, which potentially can be exploited by
malicious people to compromise a user's system.

For more information:
SA25766

SOLUTION:
Apply updated packages.

x86 Platform:

openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/evolution-data-server-1.8.2-11.i586.rpm
cf0ef3332a1005a598dc01b9b8721c3b
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/i586/evolution-data-server-devel-1.8.2-11.i586.rpm
53c2edfea054edf680d16b9a6ebe1d6a

SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/evolution-data-server-1.6.0-43.58.i586.rpm
ac3b9d062feda507bc46bb4537c35f01
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/evolution-data-server-devel-1.6.0-43.58.i586.rpm
999c30d78f4bcedb92cc9d13acd4cb04

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/evolution-data-server-1.4.0-5.6.i586.rpm
f81fc01aac70dacaef72067cd20e1789
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/evolution-data-server-devel-1.4.0-5.6.i586.rpm
0c5019714dc38967250d546e4240324b

Power PC Platform:

openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/evolution-data-server-1.8.2-11.ppc.rpm
bedd7b5ecb09dc7ebe13b4ba5a39746c
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/evolution-data-server-devel-1.8.2-11.ppc.rpm
435aca4e7fd2047c8f65de84b4a460ba

SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/evolution-data-server-1.6.0-43.58.ppc.rpm
d58d33df2443fefe6dede70c06c0151e
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/evolution-data-server-devel-1.6.0-43.58.ppc.rpm
e2be822ff9c625b8d6c2571d6003104e

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/evolution-data-server-1.4.0-5.6.ppc.rpm
7be262a623a6035ddbe8e885aaee59fc
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/evolution-data-server-devel-1.4.0-5.6.ppc.rpm
55e98a69b4e8570548966506ee8b8890

x86-64 Platform:

openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/evolution-data-server-1.8.2-11.x86_64.rpm
ddf44956dd38e64e8fd8f352da504a28
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/evolution-data-server-32bit-1.8.2-11.x86_64.rpm
9f1ee1154618701bb018afdc4df07207
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/evolution-data-server-devel-1.8.2-11.x86_64.rpm
af6d90f21a8574f9ed4a6ac26edc1ba9

SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/evolution-data-server-1.6.0-43.58.x86_64.rpm
f71072d3a1b4cdcae9ac1e4464088b20
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/evolution-data-server-32bit-1.6.0-43.58.x86_64.rpm
e19ff9bd8b3a607dba310ce9f515fec5
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/evolution-data-server-devel-1.6.0-43.58.x86_64.rpm
d080eb77092927c24cd6977f18011008

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/evolution-data-server-1.4.0-5.6.x86_64.rpm
8a82624a404f4a37aeabb10f663f39f9
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/evolution-data-server-32bit-1.4.0-5.6.x86_64.rpm
64b949a2a7feee1015b0172d9d8f4688
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/evolution-data-server-devel-1.4.0-5.6.x86_64.rpm
6d3f26332fd7aee190f9a801411a3ebd

Sources:

openSUSE 10.2:
ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/evolution-data-server-1.8.2-11.src.rpm
cb868a3ffb3dbd880f1eabf52b9a2b2f

SUSE LINUX 10.1:
ftp://ftp.suse.com/pub/suse/update/10.1/rpm/src/evolution-data-server-1.6.0-43.58.src.rpm
b20034e320b6dc7a78c00ac775bd798b

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/evolution-data-server-1.4.0-5.6.src.rpm
e84e74ba25d843e82e15392d125a8c44

SUSE Linux Enterprise Server 10 SP1
http://support.novell.com/techcenter/psdb/05f2191a0a3c694e34ebe389d55eb5ab.html

SUSE Linux Enterprise Desktop 10 SP1
http://support.novell.com/techcenter/psdb/05f2191a0a3c694e34ebe389d55eb5ab.html

Novell Linux Desktop 9
http://support.novell.com/techcenter/psdb/49ddc1710da25d618b1e7a9a8b2194b5.html

SuSE Linux Desktop 1.0
http://support.novell.com/techcenter/psdb/49ddc1710da25d618b1e7a9a8b2194b5.html

ORIGINAL ADVISORY:
http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00004.html

OTHER REFERENCES:
SA25766:
http://secunia.com/advisories/25766/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------