Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 418
Alerts This Week
Warning Icon 1 418

Red Hat Enterprise Linux 8 RHSA-2021-1752-01 Low Impact: Evolution Bug Fix

red hat
Calendar Grey May 18, 2021
Scroller Redhat
New patches for evolution, data-server, and evolution-ews have been released. Minor security updates for Red Hat Enterprise Linux 8.
An update for evolution, evolution-data-server, and evolution-ews is now available for Red Hat Enterprise Linux 8

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of Evolution must be restarted for this update to take effect.

Summary

Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.
The evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.
Security Fix(es):
* evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server (CVE-2020-16117)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.

Topics%20covered

Topics Covered

security advisory security update bug fix Red Hat Enterprise Linux NULL pointer evolution low impact email client email management evolution application

References

https://access.redhat.com/security/cve/CVE-2020-16117 https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/

Package List

Red Hat Enterprise Linux AppStream (v. 8):
Source: evolution-3.28.5-16.el8.src.rpm evolution-data-server-3.28.5-15.el8.src.rpm evolution-ews-3.28.5-10.el8.src.rpm
aarch64: evolution-3.28.5-16.el8.aarch64.rpm evolution-bogofilter-3.28.5-16.el8.aarch64.rpm evolution-bogofilter-debuginfo-3.28.5-16.el8.aarch64.rpm evolution-data-server-3.28.5-15.el8.aarch64.rpm evolution-data-server-debuginfo-3.28.5-15.el8.aarch64.rpm evolution-data-server-debugsource-3.28.5-15.el8.aarch64.rpm evolution-data-server-devel-3.28.5-15.el8.aarch64.rpm evolution-data-server-tests-debuginfo-3.28.5-15.el8.aarch64.rpm evolution-debuginfo-3.28.5-16.el8.aarch64.rpm evolution-debugsource-3.28.5-16.el8.aarch64.rpm evolution-ews-3.28.5-10.el8.aarch64.rpm evolution-ews-debuginfo-3.28.5-10.el8.aarch64.rpm evolution-ews-debugsource-3.28.5-10.el8.aarch64.rpm evolution-pst-3.28.5-16.el8.aarch64.rpm evolution-pst-debuginfo-3.28.5-16.el8.aarch64.rpm evolution-spamassassin-3.28.5-16.el8.aarch64.rpm evolution-spamassassin-debuginfo-3.28.5-16.el8.aarch64.rpm
noarch: evolution-data-server-langpacks-3.28.5-15.el8.noarch.rpm evolution-ews-langpacks-3.28.5-10.el8.noarch.rpm evolution-help-3.28.5-16.el8.noarch.rpm evolution-langpacks-3.28.5-16.el8.noarch.rpm
ppc64le: evolution-3.28.5-16.el8.ppc64le.rpm

Read the Full Advisory


Severity
low
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2021:1752-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2021:1752
Issue date: 2021-05-18

Topic

An update for evolution, evolution-data-server, and evolution-ews is nowavailable for Red Hat Enterprise Linux 8.Red Hat Product Security has rated this update as having a security impactof Low. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory security update bug fix Red Hat Enterprise Linux NULL pointer evolution low impact email client email management evolution application

Relevant Releases Architectures

Red Hat CodeReady Linux Builder (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64

Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64

Bugs Fixed

1862125 - CVE-2020-16117 evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server

1883619 - ECalendarItem: Settings loaded only when being shown

1885229 - Allow change of the Microsoft 365 OAuth2 endpoints

1886026 - Simplify OAuth2 for outlook.office365.com server

1902630 - Crash on file drag into mail composer with WebKitGTK 2.30

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.