Debian DLA-1443-1:evolution-data-server 安全更新

high Nessus 插件 ID 111315

简介

远程 Debian 主机缺少安全更新。

描述

evolution-data-server 中发现协议实现错误,来自 IMAP 服务器的“STARTTLS not supported”错误会受到忽略,造成在用户不知情或未同意的情况下使用不安全的连接。对于 Debian 8“Jessie”,这一问题已在 evolution-data-server 版本 3.12.9~git20141128.5242b0-2+deb8u4 中修复。建议您升级 evolution-data-server 程序包。注意:Tenable Network Security 已直接从 DLA 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下,尽可能进行自动整理和排版。

解决方案

升级受影响的程序包。

另见

https://lists.debian.org/debian-lts-announce/2018/07/msg00035.html

https://packages.debian.org/source/jessie/evolution-data-server

插件详情

严重性: High

ID: 111315

文件名: debian_DLA-1443.nasl

版本: 1.3

类型: local

代理: unix

发布时间: 2018/7/25

最近更新时间: 2021/1/11

支持的传感器: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

漏洞信息

CPE: p-cpe:/a:debian:debian_linux:evolution-data-server, p-cpe:/a:debian:debian_linux:evolution-data-server-common, p-cpe:/a:debian:debian_linux:evolution-data-server-dbg, p-cpe:/a:debian:debian_linux:evolution-data-server-dev, p-cpe:/a:debian:debian_linux:evolution-data-server-doc, p-cpe:/a:debian:debian_linux:gir1.2-ebook-1.2, p-cpe:/a:debian:debian_linux:gir1.2-ebookcontacts-1.2, p-cpe:/a:debian:debian_linux:gir1.2-edataserver-1.2, p-cpe:/a:debian:debian_linux:libcamel-1.2-49, p-cpe:/a:debian:debian_linux:libcamel1.2-dev, p-cpe:/a:debian:debian_linux:libebackend-1.2-7, p-cpe:/a:debian:debian_linux:libebackend1.2-dev, p-cpe:/a:debian:debian_linux:libebook-1.2-14, p-cpe:/a:debian:debian_linux:libebook-contacts-1.2-0, p-cpe:/a:debian:debian_linux:libebook-contacts1.2-dev, p-cpe:/a:debian:debian_linux:libebook1.2-dev, p-cpe:/a:debian:debian_linux:libecal-1.2-16, p-cpe:/a:debian:debian_linux:libecal1.2-dev, p-cpe:/a:debian:debian_linux:libedata-book-1.2-20, p-cpe:/a:debian:debian_linux:libedata-book1.2-dev, p-cpe:/a:debian:debian_linux:libedata-cal-1.2-23, p-cpe:/a:debian:debian_linux:libedata-cal1.2-dev, p-cpe:/a:debian:debian_linux:libedataserver-1.2-18, p-cpe:/a:debian:debian_linux:libedataserver1.2-dev, cpe:/o:debian:debian_linux:8.0

必需的 KB 项: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

补丁发布日期: 2018/7/25