Fedora Core 6: 2007-485 Critical: APOP Authentication Risk

The evolution-data-server package provides a unified backend for programs

that work with contacts, tasks, and calendar information.

It was originally developed for Evolution (hence the name), but is now used

by other packages.

This update fixes a security vulnerability in APOP

authentication. This only affects POP mail accounts.

- Revise patch for RH bug #235290 to not break string freeze.

* Tue Apr 24 2007 Matthew Barnes - 1.8.3-5.fc6

- Add patch for RH bug #235290 (APOP authentication vulnerability).

a4fec398ad6e36c04adc6db264b19587f11fe062 SRPMS/evolution-data-server-1.8.3-6.fc6.src.rpm

a4fec398ad6e36c04adc6db264b19587f11fe062 noarch/evolution-data-server-1.8.3-6.fc6.src.rpm

0ddeb616d33d2ec503d99100843398c4230f97d9 ppc/evolution-data-server-1.8.3-6.fc6.ppc.rpm

14bd0fc568d275836df54b32a32853c05032a711 ppc/debug/evolution-data-server-debuginfo-1.8.3-6.fc6.ppc.rpm

0f9eefa8853dbdb03c5f9fca096b80376cd6e650 ppc/evolution-data-server-devel-1.8.3-6.fc6.ppc.rpm

117d78875939bf9aba27ca461195ef6bc9da9f06 x86_64/evolution-data-server-1.8.3-6.fc6.x86_64.rpm

85a7c24179c9df5383e305e9e2848028b0f8ca07 x86_64/evolution-data-server-devel-1.8.3-6.fc6.x86_64.rpm

abd09339cf2b950cb4700eafc636f44fe93c3a35 x86_64/debug/evolution-data-server-debuginfo-1.8.3-6.fc6.x86_64.rpm

f66889ddecf8ee036cac006dbb947c2005995d52 i386/evolution-data-server-devel-1.8.3-6.fc6.i386.rpm

c71211822de68554b152b15b9d293dca589b5122 i386/evolution-data-server-1.8.3-6.fc6.i386.rpm

8524ac26ece7f70625352408ca63f366b6711726 i386/debug/evolution-data-server-debuginfo-1.8.3-6.fc6.i386.rpm

This update can be installed with the 'yum' update program. Use 'yum update

package-name' at the command line. For more information, refer to 'Managing

Software with yum,' available at .

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/