Bug#901665: evolution-data-server: CVE-2018-12422

[Salvatore Bonaccorso]

Source: evolution-data-server
Version: 3.28.2-1
Severity: important
Tags: patch security upstream
Forwarded: https://bugzilla.gnome.org/show_bug.cgi?id=796174

Hi,

The following vulnerability was published for evolution-data-server.

CVE-2018-12422[0]:
| addressbook/backends/ldap/e-book-backend-ldap.c in
| Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow
| attackers to trigger a Buffer Overflow via a long query that is
| processed by the strcat function.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-12422
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12422
[1] https://bugzilla.gnome.org/show_bug.cgi?id=796174

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore