CVE-2013-4166

Related Files

Red Hat Security Advisory 2013-1540-02

Posted Nov 21, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-1540-02 - Evolution is the integrated collection of email, calendaring, contact management, communications, and personal information management tools for the GNOME desktop environment. A flaw was found in the way Evolution selected GnuPG public keys when encrypting emails. This could result in emails being encrypted with public keys other than the one belonging to the intended recipient. The Evolution packages have been upgraded to upstream version 2.32.3, which provides a number of bug fixes and enhancements over the previous version. These changes include implementation of Gnome XDG Config Folders, and support for Exchange Web Services protocol to connect to Microsoft Exchange servers. EWS support has been added as a part of the evolution-exchange packages.

tags | advisory, web, protocol

systems | linux, redhat

advisories | CVE-2013-4166

SHA-256 | 9fb326f3b1b47a580643bac3c257f224e35acd6f987a04d2349a2234d18d3e18

Download | Favorite | View

Ubuntu Security Notice USN-1922-1

Posted Aug 1, 2013

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1922-1 - Yves-Alexis Perez discovered that Evolution Data Server did not properly select GPG recipients. Under certain circumstances, this could result in Evolution encrypting email to an unintended recipient.

tags | advisory

systems | linux, ubuntu

advisories | CVE-2013-4166

SHA-256 | 673fd931b78efc87aa81d57563e1b586b037596bd37d50b95a2c502ff906fdd3

Download | Favorite | View