amaharaneko/guix-mirrors
1
1
Fork 0
mirror of https://codeberg.org/guix/guix.git synced 2025-10-02 02:15:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

gnu: evolution-data-server: Fix CVE-2020-14928 and CVE-2020-16117.

Browse source 
* gnu/packages/patches/evolution-data-server-CVE-2020-14928.patch,
gnu/packages/patches/evolution-data-server-CVE-2020-16117.patch: New patches.
* gnu/local.mk (dist_patch_DATA): Register them.
* gnu/packages/gnome.scm (evolution-data-server): Apply them.
This commit is contained in:
Léo Le Bouter 2021-03-11 01:10:29 +01:00
parent 24f0bb21ab
commit c35f87bb1a
No known key found for this signature in database
GPG key ID: 45A8B1E86BCD10A6
4 changed files with 148 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

28
gnu/packages/patches/evolution-data-server-CVE-2020-16117.patch Normal file
View file

@ -0,0 +1,28 @@
From 2cc39592b532cf0dc994fd3694b8e6bf924c9ab5 Mon Sep 17 00:00:00 2001
From: Milan Crha <mcrha@redhat.com>
Date: Mon, 10 Feb 2020 10:00:32 +0100
Subject: [PATCH] I#189 - Crash on malformed server response with minimal
capabilities
Closes https://gitlab.gnome.org/GNOME/evolution-data-server/issues/189
---
src/camel/providers/imapx/camel-imapx-server.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/src/camel/providers/imapx/camel-imapx-server.c b/src/camel/providers/imapx/camel-imapx-server.c
index 3c38fb1e9..3883321ec 100644
--- a/src/camel/providers/imapx/camel-imapx-server.c
+++ b/src/camel/providers/imapx/camel-imapx-server.c
@@ -3045,7 +3045,8 @@ connected:
/* See if we got new capabilities
* in the STARTTLS response. */
- imapx_free_capability (is->priv->cinfo);
+ if (is->priv->cinfo)
+ imapx_free_capability (is->priv->cinfo);
is->priv->cinfo = NULL;
if (ic->status->condition == IMAPX_CAPABILITY) {
is->priv->cinfo = ic->status->u.cinfo;
--
GitLab