Red Hat Security Updates: evolution, evolution-data-server

Red Hat released two new security advisories this morning.

RHSA-2007:0509 Important: evolution security update

This update addresses one vulnerability in the evolution package for Red Hat Enterprise Linux 3 and 4. If a user connects to a malicious IMAP server, an attacker could execute arbitrary code as the user running Evolution (CVE-2007-3257). The Red Hat Security Response Team has rated this update as having important security impact.

RHSA-2007:0510 Important: evolution-data-server security update

This update fixes a vulnerability in the evolution-data-server package for Red Hat Enterprise Linux 5. If a user connects to a malicious IMAP server, an attacker could execute arbitrary code as the user running the evolution-data-server process (CVE-2007-3257). The Red Hat Security Response Team has rated this update as having important security impact.