USN-3998-1: Evolution Data Server vulnerability

Releases

• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM

Packages

• evolution-data-server - Evolution suite data server

Details

Marcus Brinkmann discovered that Evolution Data Server did not correctly
interpret the output from GPG when decrypting encrypted messages. Under
certain circumstances, this could result in displaying clear-text portions
of encrypted messages as though they were encrypted.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.04

• evolution-data-server - 3.28.5-0ubuntu0.18.04.2
• evolution-data-server-common - 3.28.5-0ubuntu0.18.04.2
• libcamel-1.2-61 - 3.28.5-0ubuntu0.18.04.2
• libebackend-1.2-10 - 3.28.5-0ubuntu0.18.04.2
• libedataserver-1.2-23 - 3.28.5-0ubuntu0.18.04.2

Ubuntu 16.04

• evolution-data-server - 3.18.5-1ubuntu1.2
• evolution-data-server-common - 3.18.5-1ubuntu1.2
• libcamel-1.2-54 - 3.18.5-1ubuntu1.2
• libebackend-1.2-10 - 3.18.5-1ubuntu1.2
• libedataserver-1.2-21 - 3.18.5-1ubuntu1.2

After a standard system update you need to restart Evolution to make
all the necessary changes.

References

• CVE-2018-15587