Source: evolution-data-server Version: 3.28.2-1 Severity: important Tags: patch security upstream Forwarded: https://bugzilla.gnome.org/show_bug.cgi?id=796174
Hi, The following vulnerability was published for evolution-data-server. CVE-2018-12422[0]: | addressbook/backends/ldap/e-book-backend-ldap.c in | Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow | attackers to trigger a Buffer Overflow via a long query that is | processed by the strcat function. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2018-12422 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12422 [1] https://bugzilla.gnome.org/show_bug.cgi?id=796174 Please adjust the affected versions in the BTS as needed. Regards, Salvatore