Fri Jun 6 20:55:48 BST 2008

Accepted:
 OK: evolution_2.10.1.orig.tar.gz
 OK: evolution_2.10.1-0ubuntu2.4.diff.gz
 OK: evolution_2.10.1-0ubuntu2.4.dsc
     -> Component: main Section: mail
 OK: evolution_2.10.1-0ubuntu2.4_amd64.deb
 OK: evolution-dbg_2.10.1-0ubuntu2.4_amd64.deb
 OK: evolution-dev_2.10.1-0ubuntu2.4_amd64.deb
 OK: evolution-plugins_2.10.1-0ubuntu2.4_amd64.deb
 OK: evolution-plugins-experimental_2.10.1-0ubuntu2.4_amd64.deb
 OK: evolution_2.10.1-0ubuntu2.4_i386.deb
 OK: evolution-common_2.10.1-0ubuntu2.4_all.deb
 OK: evolution-dbg_2.10.1-0ubuntu2.4_i386.deb
 OK: evolution-dev_2.10.1-0ubuntu2.4_i386.deb
 OK: evolution-plugins_2.10.1-0ubuntu2.4_i386.deb
 OK: evolution-plugins-experimental_2.10.1-0ubuntu2.4_i386.deb
 OK: evolution_2.10.1-0ubuntu2.4_ia64.deb
 OK: evolution-dbg_2.10.1-0ubuntu2.4_ia64.deb
 OK: evolution-dev_2.10.1-0ubuntu2.4_ia64.deb
 OK: evolution-plugins_2.10.1-0ubuntu2.4_ia64.deb
 OK: evolution-plugins-experimental_2.10.1-0ubuntu2.4_ia64.deb
 OK: evolution_2.10.1-0ubuntu2.4_powerpc.deb
 OK: evolution-dbg_2.10.1-0ubuntu2.4_powerpc.deb
 OK: evolution-dev_2.10.1-0ubuntu2.4_powerpc.deb
 OK: evolution-plugins_2.10.1-0ubuntu2.4_powerpc.deb
 OK: evolution-plugins-experimental_2.10.1-0ubuntu2.4_powerpc.deb
 OK: evolution_2.10.1-0ubuntu2.4_sparc.deb
 OK: evolution-dbg_2.10.1-0ubuntu2.4_sparc.deb
 OK: evolution-dev_2.10.1-0ubuntu2.4_sparc.deb
 OK: evolution-plugins_2.10.1-0ubuntu2.4_sparc.deb
 OK: evolution-plugins-experimental_2.10.1-0ubuntu2.4_sparc.deb
 OK: evolution_2.10.1-0ubuntu2.4_amd64_translations.tar.gz
 OK: evolution_2.10.1-0ubuntu2.4_i386_translations.tar.gz
 OK: evolution_2.10.1-0ubuntu2.4_ia64_translations.tar.gz
 OK: evolution_2.10.1-0ubuntu2.4_powerpc_translations.tar.gz
 OK: evolution_2.10.1-0ubuntu2.4_sparc_translations.tar.gz

Format: 1.7
Date: Thu, 05 Jun 2008 07:09:56 -0400
Source: evolution
Binary: evolution evolution-common evolution-dbg evolution-dev evolution-plugins evolution-plugins-experimental
Architecture: amd64_translations amd64 i386_translations i386 all ia64_translations ia64 powerpc_translations powerpc source sparc_translations sparc
Version: 2.10.1-0ubuntu2.4
Distribution: feisty-security
Urgency: low
Maintainer: Ubuntu Desktop Team <ubuntu-desktop at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
 evolution  - groupware suite with mail client and organizer
 evolution-dbg - debugging symbols for Evolution
 evolution-dev - development library files for Evolution
 evolution-plugins - standard plugins for Evolution
 evolution-plugins-experimental - experimental plugins for Evolution
 evolution-common - architecture independent files for Evolution
Changes:
 evolution (2.10.1-0ubuntu2.4) feisty-security; urgency=low
 .
   * SECURITY UPDATE: buffer overflow via timezone data in crafted ical
     attachments
   * debian/patches/99_01_CVE-2008-1108.patch: adjust
     calendar/gui/e-itip-control.c to use a GString rather than a fixed-size
     buffer to build the HTML string to avoid the possibility of an overflow.
   * SECURITY UPDATE: heap-based overflow via crafted ical attachments with
     long DESCRIPTION
   * debian/patches/99_02_CVE-2008-1109.patch: adjust calendar/gui/itip-utils.c
     to not use a fixed-size buffer for parsing external data. Simplify the
     logic to just split and rejoin the string with a different line separator.
   * SECURITY UPDATE: remotely triggered denial of service
   * debian/patches/99_03_bug535459.patch: add sanity checks and don't use
     component when checks fail in plugins/itip-formatter.c, gui/itip-utils.h,
     gui/itip-utils.c, gui/e-itip-control.c
   * References
     CVE-2008-1108
     CVE-2008-1109
     http://bugzilla.gnome.org/show_bug.cgi?id=535459
Files:
 66d3e48ee03366ea9d4a51cae87e5d75 10309982 raw-translations - evolution_2.10.1-0ubuntu2.4_amd64_translations.tar.gz
 6ae1ce9ff2ef44e4cdce50f818b9c2ef 2737060 gnome optional evolution_2.10.1-0ubuntu2.4_amd64.deb
 71473dea1c4e6e6e3971c6a389962dfd 216856 devel optional evolution-dev_2.10.1-0ubuntu2.4_amd64.deb
 d97d5f646e246135c6d2df4f89c88bae 6714068 gnome extra evolution-dbg_2.10.1-0ubuntu2.4_amd64.deb
 bec623d5c300e6b11db67ec4cd86e52a 136724 gnome optional evolution-plugins_2.10.1-0ubuntu2.4_amd64.deb
 efb865a9376f84bbe82a01300d853a1a 97868 gnome optional evolution-plugins-experimental_2.10.1-0ubuntu2.4_amd64.deb
 1b3ab6330bcdce5ce3fc7c2ba5199854 19354100 gnome optional evolution-common_2.10.1-0ubuntu2.4_all.deb
 8383051892c697d2720bd2d9c268d8d4 18528110 raw-translations - evolution_2.10.1-0ubuntu2.4_i386_translations.tar.gz
 313fc6df8eadc3723aa2b9beed5457c6 2539324 gnome optional evolution_2.10.1-0ubuntu2.4_i386.deb
 d637818c4f2d06f125b75bc90efd40ac 216862 devel optional evolution-dev_2.10.1-0ubuntu2.4_i386.deb
 8e779b9eb6f3bc224c072e4f3e2aa4e1 6309214 gnome extra evolution-dbg_2.10.1-0ubuntu2.4_i386.deb
 8bb6f4f2ab0a470c5da0d80f8bd8db34 130428 gnome optional evolution-plugins_2.10.1-0ubuntu2.4_i386.deb
 5c1b1841b11a437728fcf3a817f714fb 95846 gnome optional evolution-plugins-experimental_2.10.1-0ubuntu2.4_i386.deb
 28c6f1ac6ca1b501b75ebd4549758151 10310026 raw-translations - evolution_2.10.1-0ubuntu2.4_ia64_translations.tar.gz
 0b84f7b8b0628691190860e2c7bdc960 3616210 gnome optional evolution_2.10.1-0ubuntu2.4_ia64.deb
 cbbdeac0bcd42d1c9c608fb2754c4e02 216860 devel optional evolution-dev_2.10.1-0ubuntu2.4_ia64.deb
 be437932c630e9e09586dd3b9bf2a061 6329322 gnome extra evolution-dbg_2.10.1-0ubuntu2.4_ia64.deb
 37425c82a750955702244ccfe21d0552 152358 gnome optional evolution-plugins_2.10.1-0ubuntu2.4_ia64.deb
 6a33e9380c67ab37412316d1b7d2a424 102480 gnome optional evolution-plugins-experimental_2.10.1-0ubuntu2.4_ia64.deb
 ee2bc793ce418eb0f5c6f6cb0d546b67 10310144 raw-translations - evolution_2.10.1-0ubuntu2.4_powerpc_translations.tar.gz
 800d6f0b60e2538ce37031d414284161 2873012 gnome optional evolution_2.10.1-0ubuntu2.4_powerpc.deb
 1863782df70332dff3c3f89cb84baaf6 216862 devel optional evolution-dev_2.10.1-0ubuntu2.4_powerpc.deb
 7b037647295a98db4ce48d26bd07f4ae 6706294 gnome extra evolution-dbg_2.10.1-0ubuntu2.4_powerpc.deb
 e20705846316b5c140a5723dbae53f0d 155296 gnome optional evolution-plugins_2.10.1-0ubuntu2.4_powerpc.deb
 d02b12ed5037a9d68c6e9ee0d9ec0362 104816 gnome optional evolution-plugins-experimental_2.10.1-0ubuntu2.4_powerpc.deb
 0b9f3407e6501976383e9e040a8b1252 2018 gnome optional evolution_2.10.1-0ubuntu2.4.dsc
 88b708469fe9115eb3dbb95544694e3c 214860 gnome optional evolution_2.10.1-0ubuntu2.4.diff.gz
 cbbe402c2a22a30def0e3661b51a045d 10310068 raw-translations - evolution_2.10.1-0ubuntu2.4_sparc_translations.tar.gz
 f1b5ba42ac897bf9c3aa6360bd6c7165 2552740 gnome optional evolution_2.10.1-0ubuntu2.4_sparc.deb
 3c38af05834d20616bf3e1f239aabe74 216894 devel optional evolution-dev_2.10.1-0ubuntu2.4_sparc.deb
 8eef7654d385acd64fab7dd9c6ba627c 6216710 gnome extra evolution-dbg_2.10.1-0ubuntu2.4_sparc.deb
 96e91900e7fe68563eaf6b3dd15f4e8b 128670 gnome optional evolution-plugins_2.10.1-0ubuntu2.4_sparc.deb
 ba4eb1aa3af5df5b74519d7792b5f97c 95274 gnome optional evolution-plugins-experimental_2.10.1-0ubuntu2.4_sparc.deb
Original-Maintainer: Debian Evolution Maintainers <pkg-evolution-maintainers at lists.alioth.debian.org>