Debian DLA-1443-1：evolution-data-server 安全性更新
high Nessus Plugin ID 111315
語言:
概要
遠端 Debian 主機缺少一個安全性更新。說明
據發現，evolution-data-server 中存在通訊協定實作錯誤，其中來自 IMAP 伺服器的「不支援 STARTTLS」錯誤被略過，進而導致在使用者不知情或未同意的情況下使用不安全的連線。針對 Debian 8「Jessie」，此問題已在 evolution-data-server 的版本 3.12.9~git20141128.5242b0-2+deb8u4 中修正。建議您升級 evolution-data-server packages 套件。注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。解決方案
升級受影響的套件。另請參閱
https://lists.debian.org/debian-lts-announce/2018/07/msg00035.html
https://packages.debian.org/source/jessie/evolution-data-server
Plugin 詳細資訊
嚴重性: High
ID: 111315
檔案名稱: debian_DLA-1443.nasl
版本: 1.3
類型: local
代理程式: unix
已發布: 2018/7/25
已更新: 2021/1/11
支援的感應器: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus
弱點資訊
CPE: p-cpe:/a:debian:debian_linux:evolution-data-server-dbg, p-cpe:/a:debian:debian_linux:libebook1.2-dev, p-cpe:/a:debian:debian_linux:libedata-book1.2-dev, p-cpe:/a:debian:debian_linux:libecal-1.2-16, p-cpe:/a:debian:debian_linux:libecal1.2-dev, p-cpe:/a:debian:debian_linux:libebook-1.2-14, p-cpe:/a:debian:debian_linux:libedataserver1.2-dev, p-cpe:/a:debian:debian_linux:evolution-data-server-dev, p-cpe:/a:debian:debian_linux:gir1.2-ebookcontacts-1.2, p-cpe:/a:debian:debian_linux:libedata-cal-1.2-23, p-cpe:/a:debian:debian_linux:libebook-contacts-1.2-0, p-cpe:/a:debian:debian_linux:libedata-cal1.2-dev, p-cpe:/a:debian:debian_linux:gir1.2-edataserver-1.2, p-cpe:/a:debian:debian_linux:libebackend-1.2-7, p-cpe:/a:debian:debian_linux:libebook-contacts1.2-dev, p-cpe:/a:debian:debian_linux:libcamel-1.2-49, p-cpe:/a:debian:debian_linux:gir1.2-ebook-1.2, p-cpe:/a:debian:debian_linux:evolution-data-server-common, p-cpe:/a:debian:debian_linux:evolution-data-server-doc, p-cpe:/a:debian:debian_linux:evolution-data-server, p-cpe:/a:debian:debian_linux:libcamel1.2-dev, p-cpe:/a:debian:debian_linux:libedata-book-1.2-20, p-cpe:/a:debian:debian_linux:libedataserver-1.2-18, cpe:/o:debian:debian_linux:8.0, p-cpe:/a:debian:debian_linux:libebackend1.2-dev
必要的 KB 項目: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
修補程式發佈日期: 2018/7/25