From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <trinity@okhomes.homedns.org>
Received: from okhomes.homedns.org (ca-stmnca-cuda1-blade2b-101.stmnca.adelphia.net [68.65.195.101])
	by chiba.3jane.net (Postfix) with ESMTP
	id 41FB1ABD68; Fri,  3 May 2002 17:30:47 -0500 (CDT)
Received: by okhomes.homedns.org (Postfix, from userid 1000)
	id 41447151409; Fri,  3 May 2002 15:30:46 -0700 (PDT)
Date: Fri, 3 May 2002 15:30:45 -0700
From: Seemant Kulleen <seemant@gentoo.org>
To: gentoo-announce@gentoo.org, gentoo-security@gentoo.org,
	lwn@lwn.net
Message-Id: <20020503153045.22c3b580.seemant@gentoo.org>
X-Mailer: Sylpheed version 0.7.5claws (GTK+ 1.2.10; i686-pc-linux-gnu)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Subject: [gentoo-announce] Evolution memory bug
Sender: gentoo-announce-admin@gentoo.org
Errors-To: gentoo-announce-admin@gentoo.org
X-BeenThere: gentoo-announce@gentoo.org
X-Mailman-Version: 2.0.6
Precedence: bulk
List-Help: <mailto:gentoo-announce-request@gentoo.org?subject=help>
List-Post: <mailto:gentoo-announce@gentoo.org>
List-Subscribe: <http://lists.gentoo.org/mailman/listinfo/gentoo-announce>,
	<mailto:gentoo-announce-request@gentoo.org?subject=subscribe>
List-Id: Gentoo Linux-related announcements <gentoo-announce.gentoo.org>
List-Unsubscribe: <http://lists.gentoo.org/mailman/listinfo/gentoo-announce>,
	<mailto:gentoo-announce-request@gentoo.org?subject=unsubscribe>
List-Archive: <http://lists.gentoo.org/pipermail/gentoo-announce/>
X-Archives-Salt: 4493291d-fd07-4212-83f2-ada7b81fdb2d
X-Archives-Hash: 8c1b0dc1c1c0b9a33b4cb2d056b0a8b7

- -----------------------------------------------------------------------
GLSA: GENTOO LINUX SECURITY ANNOUNCEMENT
- -----------------------------------------------------------------------
PACKAGE         : evolution
SUMMARY         : security vulnerability in evolution
DATE            : Fri May  3 21:26:24 UTC 2002
- -----------------------------------------------------------------------

OVERVIEW

A security vulnerability has been found that might cause memory to be
eaten up due to malformed headers on incoming messages.


DETAIL

Fix for a security vulnerability that could allow a possible DOS due to
bad headers in incoming messages.
http://lists.gnome.org/archives/gnome-announce-list/2002-May/msg00020.html



SOLUTION

It is recommended that all Gentoo Linux users who are running evolution
update their systems as follows.

emerge --clean rsync
emerge evolution
emerge clean

- ------------------------------------------------------------------------
spider@gentoo.org
seemant@gentoo.org
drobbins@gentoo.org
- ------------------------------------------------------------------------