CVE-2020-14928

The evolution-data-server package provides a personal information management application that provides integrated mail, calendaring and address book functionality. The evolution-data-server package provides a single database for common, desktop-wide information, such as a user's address book or calendar events.

Security Fix(es):

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."(CVE-2020-14928)

Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.

The evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.

OpenChange provides libraries to access Microsoft Exchange servers using native protocols.

Security Fix(es):

• evolution-data-server: Response injection via STARTTLS in SMTP and POP3 (CVE-2020-14928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."

Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.

The evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.

OpenChange provides libraries to access Microsoft Exchange servers using native protocols.

Security Fix(es):

• evolution-data-server: Response injection via STARTTLS in SMTP and POP3 (CVE-2020-14928)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection". (CVE-2020-14928)

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server. (CVE-2020-16117)

This update for evolution-data-server fixes the following issues:

• CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).
• CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).
• Fix buffer overrun when parsing base64 data (bsc#1182882).

This update for evolution-ews fixes the following issue:

• Fix buffer overrun when parsing base64 data (bsc#1182882).

This update was imported from the SUSE:SLE-15-SP2:Update update project.

These are all security issues fixed in the evolution-data-server-3.40.4-1.4 package on the GA media of openSUSE Tumbleweed.

This update for evolution-data-server fixes the following issues:

• Fix buffer overrun when parsing base64 data (bsc#1182882).
• CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).
• CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).

This update for evolution-data-server fixes the following issues:

• Fix buffer overrun when parsing base64 data (bsc#1182882).
• CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).
• CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).

This update for evolution-data-server fixes the following issues:

• CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712).
• CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910).
• Fix buffer overrun when parsing base64 data (bsc#1182882).

This update for evolution-ews fixes the following issue:

• Fix buffer overrun when parsing base64 data (bsc#1182882).

It was discovered that Evolution Data Server incorrectly handled STARTTLS when using SMTP and POP3. A remote attacker could possibly use this issue to perform a response injection attack.