Summary: | <mail-client/evolution-3.8.5: Sent folder uses insecure connection instead of SSL (CVE-2011-3355) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Tim Sammut (RETIRED) <underling> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | ||
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://bugzilla.gnome.org/show_bug.cgi?id=648277 | ||
Whiteboard: | A3 [noglsa] | ||
Package list: | Runtime testing required: | --- |
Description
Tim Sammut (RETIRED)
2011-10-02 04:30:05 UTC
Setting whiteboard to [upstream] as the upstream change [1] that corrected the problem is apparently not easily back-ported to the versions we're using. [1] http://git.gnome.org/browse/evolution-data-server/commit/?id=e0ac4d79705c Hi Tim, finding more info, I see secunia advisory[1] about it, and: 1)I think that is gnome-extra/evolution-data-server instead of mail-client/evolution 2) This advisory says that is affected 3.x version; sure that also 2.x is affected? [1]: https://secunia.com/advisories/45941/ I think this is fixed in our part, right? Fixed in 3.1.2, 3.8.5 was stabilized in bug #478252 (In reply to Pacho Ramos from comment #4) > Fixed in 3.1.2, 3.8.5 was stabilized in bug #478252 I think nothing more is needed from us... if that is not the case feel free to CC us again :) GLSA Vote: No GLSA vote: no. Closing as [noglsa] |