Synopsis:          Moderate: evolution security and bug fix update
Advisory ID:       SLSA-2020:1080-1
Issue Date:        2020-04-07
CVE Numbers:       CVE-2018-15587
                   CVE-2019-3890
--

* evolution: specially crafted email leading to OpenPGP signatures being
    spoofed for arbitrary messages
    
* evolution-ews: all certificate errors ignored if error is ignored during
    initial account setup in gnome-online-accounts
--

SL7
  x86_64
    evolution-data-server-langpacks-3.28.5-4.el7.noarch.rpm
    evolution-data-server-3.28.5-4.el7.x86_64.rpm
    atk-2.28.1-2.el7.i686.rpm
    atk-devel-2.28.1-2.el7.x86_64.rpm
    evolution-data-server-devel-3.28.5-4.el7.i686.rpm
    evolution-data-server-3.28.5-4.el7.i686.rpm
    atk-devel-2.28.1-2.el7.i686.rpm
    atk-2.28.1-2.el7.x86_64.rpm
    evolution-data-server-devel-3.28.5-4.el7.x86_64.rpm
    atk-debuginfo-2.28.1-2.el7.i686.rpm
    atk-debuginfo-2.28.1-2.el7.x86_64.rpm
    evolution-3.28.5-8.el7.i686.rpm
    evolution-3.28.5-8.el7.x86_64.rpm
    evolution-data-server-debuginfo-3.28.5-4.el7.i686.rpm
    evolution-data-server-debuginfo-3.28.5-4.el7.x86_64.rpm
    evolution-debuginfo-3.28.5-8.el7.i686.rpm
    evolution-debuginfo-3.28.5-8.el7.x86_64.rpm
    evolution-ews-3.28.5-5.el7.i686.rpm
    evolution-ews-3.28.5-5.el7.x86_64.rpm
    evolution-ews-debuginfo-3.28.5-5.el7.i686.rpm
    evolution-ews-debuginfo-3.28.5-5.el7.x86_64.rpm
    evolution-bogofilter-3.28.5-8.el7.x86_64.rpm
    evolution-data-server-perl-3.28.5-4.el7.x86_64.rpm
    evolution-data-server-tests-3.28.5-4.el7.i686.rpm
    evolution-data-server-tests-3.28.5-4.el7.x86_64.rpm
    evolution-devel-3.28.5-8.el7.i686.rpm
    evolution-devel-3.28.5-8.el7.x86_64.rpm
    evolution-pst-3.28.5-8.el7.x86_64.rpm
    evolution-spamassassin-3.28.5-8.el7.x86_64.rpm
  noarch
    evolution-data-server-langpacks-3.28.5-4.el7.noarch.rpm
    evolution-ews-langpacks-3.28.5-5.el7.noarch.rpm
    evolution-help-3.28.5-8.el7.noarch.rpm
    evolution-langpacks-3.28.5-8.el7.noarch.rpm
    evolution-data-server-doc-3.28.5-4.el7.noarch.rpm
    evolution-devel-docs-3.28.5-8.el7.noarch.rpm

- Scientific Linux Development Team