lp:ubuntu/dapper-updates/evolution

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

27. By Jamie Strandboge on 2008-06-05

* SECURITY UPDATE: buffer overflow via timezone data in crafted ical
  attachments
* debian/patches/99_01_CVE-2008-1108.patch: adjust
  calendar/gui/e-itip-control.c to use a GString rather than a fixed-size
  buffer to build the HTML string to avoid the possibility of an overflow.
* SECURITY UPDATE: heap-based overflow via crafted ical attachments with
  long DESCRIPTION
* debian/patches/99_02_CVE-2008-1109.patch: adjust calendar/gui/itip-utils.c
  to not use a fixed-size buffer for parsing external data. Simplify the
  logic to just split and rejoin the string with a different line separator.
* SECURITY UPDATE: remotely triggered denial of service
* debian/patches/99_03_bug535459.patch: add sanity checks and don't use
  component when checks fail in plugins/itip-formatter.c, gui/itip-utils.h,
  gui/itip-utils.c, gui/e-itip-control.c
* References
  CVE-2008-1108
  CVE-2008-1109
  http://bugzilla.gnome.org/show_bug.cgi?id=535459

26. By Kees Cook on 2008-03-04

* SECURITY UPDATE: code execution via format string in encrypted emails.
* Add 99_00_encryption_format_string_fix.patch: upstream fixes from
  Srinivasa Ragavan.
* References
  CVE-2008-0072

25. By Kees Cook on 2007-03-22

* SECURITY UPDATE: format string overflow via share memo categories.
* debian/patches/93_fix_memo_format_string.patch: protect category list.
* References
  CVE-2007-1002

24. By Sebastien Bacher on 2006-05-20

* debian/patches/20_correct_gettext_domain.patch:
  - patch by Gary Coady <email address hidden>
  - use correct gettext domain, fix some strings not translated to the UI
    (Ubuntu: #44081)

23. By Sebastien Bacher on 2006-05-08

* debian/patches/11_window_settings_stored.patch:
  - patch from CVS, fix the windows settings storage (Ubuntu: #34502)
* debian/patches/17_fix_alarm_delay_for_calendar.patch:
  - patch update by Geoff Jacobsen <email address hidden>
  - fix duplicate menu entry (Ubuntu: #42858)

22. By Sebastien Bacher on 2006-05-03

* debian/patches/17_fix_alarm_delay_for_calendar.patch:
  - fix alarm being set to "-1" (Ubuntu: #33416)
* debian/patches/18_fix_label_typo.patch:
  - fix type to the "To Do" label (Ubuntu: #36744)
* debian/patches/19_fix_account_conditional.patch:
  - fix account conditional (Ubuntu: #26854)

21. By Daniel Holbach on 2006-04-27

* debian/patches/12_fix_icon_metaphors_bug_339626.patch:
  - use patch from http://bugzilla.gnome.org/show_bug.cgi?id=339626 to fix
    Malone: #31034.

20. By Sebastien Bacher on 2006-04-25

* debian/patches/16_new_address_book_fix.patch:
  - fix the new adressbooks validation (Ubuntu: #39086)

19. By Sebastien Bacher on 2006-04-20

* debian/patches/06_fix_inline_pgp_breaking_charset.patch:
  - patch from upstream, fix the inline pgp code breaking the charset
    parameter (Ubuntu: #339052)

18. By Sebastien Bacher on 2006-04-11

New upstream version