Most recent entries from all

ALSA-2021:1752 — Low: evolution security, bug fix, and enhancement update

Affected: AlmaLinux:8: evolution-data-server-doc, AlmaLinux:8: evolution-data-server-perl, AlmaLinux:8: evolution-data-server-tests, AlmaLinux:8: evolution-devel

Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.

The evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.

Security Fix(es):

* evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server (CVE-2020-16117)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

EUVD-2026-43376

fkie_cve-2020-16117

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

GHSA-j89v-2w65-5qmq

gsd-2020-16117

OESA-2022-1628 — evolution-data-server security update

Affected: openEuler:20.03-LTS-SP1: evolution-data-server, openEuler:20.03-LTS-SP3: evolution-data-server

The evolution-data-server package provides a personal information management application that provides integrated mail, calendaring and address book functionality. The evolution-data-server package provides a single database for common, desktop-wide information, such as a user's address book or calendar events. Security Fix(es): In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.(CVE-2020-16117)

openSUSE-SU-2021:0482-1 — Security update for evolution-data-server

Security update for evolution-data-server

SUSE-SU-2021:0885-1 — Security update for evolution-data-server

Security update for evolution-data-server

UBUNTU-CVE-2020-16117

Affected: Ubuntu:16.04:LTS: evolution-data-server, Ubuntu:Pro:18.04:LTS: evolution-data-server