Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:1391-1

Опубликовано: 31 мая 2019
Источник: suse-cvrf

Описание

Security update for evolution

This update for evolution fixes the following issue:

Security issue fixed:

  • CVE-2018-15587: Fixed OpenPGP signatures spoofing via specially crafted email that contains a valid signature (bsc#1125230).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3
evolution-3.22.6-19.9.1
evolution-lang-3.22.6-19.9.1
SUSE Linux Enterprise Desktop 12 SP4
evolution-3.22.6-19.9.1
evolution-lang-3.22.6-19.9.1
SUSE Linux Enterprise Software Development Kit 12 SP3
evolution-devel-3.22.6-19.9.1
SUSE Linux Enterprise Software Development Kit 12 SP4
evolution-devel-3.22.6-19.9.1
SUSE Linux Enterprise Workstation Extension 12 SP3
evolution-3.22.6-19.9.1
evolution-lang-3.22.6-19.9.1
SUSE Linux Enterprise Workstation Extension 12 SP4
evolution-3.22.6-19.9.1
evolution-lang-3.22.6-19.9.1

Ссылки

Описание

GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:evolution-3.22.6-19.9.1
SUSE Linux Enterprise Desktop 12 SP3:evolution-lang-3.22.6-19.9.1
SUSE Linux Enterprise Desktop 12 SP4:evolution-3.22.6-19.9.1
SUSE Linux Enterprise Desktop 12 SP4:evolution-lang-3.22.6-19.9.1
Ссылки
Уязвимость SUSE-SU-2019:1391-1