Mageia alert MGASA-2013-0014 (claws-mail-plugins)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2013-0014:
 claws-mail-plugins-3.8.1-1.2.mga2 (2/core) 
Date:
    	     
 
Fri, 18 Jan 2013 01:38:13 +0100
Message-ID:
    	     
 
<20130118003812.GA9952@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2013-0014
Date: 	January 18th, 2013
Affected releases: 	2


Description:
Updated claws-mail-plugins packages fix security vulnerabilities:

A security flaw was found in the way vCalendar plug-in of Claws Mail
displayed user credential information in the system tray display when
using https scheme. A local attacker could use this flaw to obtain user
credentials (username and password) used for connection to remote point.
(CVE-2012-5527)


Updated Packages:
i586:
claws-mail-acpi-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-address_keeper-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-attachwarner-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-att_remover-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-bsfilter-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-clamd-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-fancy-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-fetchinfo-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-gtkhtml2_viewer-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-mailmbox-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-newmail-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-notification-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-pdf_viewer-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-perl-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-python-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-rssyl-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-spam_report-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-tnef_parse-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-vcalendar-plugin-3.8.1-1.2.mga2.i586.rpm
claws-mail-vcalendar-plugin-devel-3.8.1-1.2.mga2.i586.rpm

x86_64:
claws-mail-acpi-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-address_keeper-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-attachwarner-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-att_remover-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-bsfilter-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-clamd-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-fancy-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-fetchinfo-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-gtkhtml2_viewer-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-mailmbox-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-newmail-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-notification-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-pdf_viewer-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-perl-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-python-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-rssyl-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-spam_report-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-tnef_parse-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-vcalendar-plugin-3.8.1-1.2.mga2.x86_64.rpm
claws-mail-vcalendar-plugin-devel-3.8.1-1.2.mga2.x86_64.rpm

SRPMS:
claws-mail-plugins-3.8.1-1.2.mga2.src.rpm


References:
http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bu...
https://bugzilla.redhat.com/show_bug.cgi?id=877372

https://bugs.mageia.org/show_bug.cgi?id=8291

https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-...