RHBA-2015:1264 - Bug Fix Advisory

Topic

Updated evolution-data-server packages that fix two bugs are now available for
Red Hat Enterprise Linux 6.

Description

The evolution-data-server packages provide a unified back end for applications
which interact with contacts, tasks and calendar information. Evolution Data
Server was originally developed as a back end for the Evolution information
management application, but is now used by various other applications.

This update fixes the following bugs:

• The Evolution client could not connect to a mail server using the Secure

Sockets Layer (SSL) protocol when the server had SSL disabled due to the POODLE
vulnerability. With this update, the Evolution Data Server has been modified to
also connect using the Transport Layer Security (TLSv1) protocol, thus fixing
this bug. (BZ#1163375)

• Previously, the e-calendar-factory process did not terminate automatically

when the user logged out of the graphical desktop environment, and
e-calendar-factory thus redundantly consumed system resources. This update fixes
the underlying code, which prevents this problem from occurring. (BZ#1141760)

Users of evolution-data-server are advised to upgrade to these updated packages,
which fix these bugs.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 1141760 - e-calendar-factory process does not close on logout
• BZ - 1163375 - CVE-2014-3566 POODLE - Enable TLS for SSL Camel connections

CVEs

(none)

References

(none)