news.debuntu.org

Resolved Bugs448540 - CVE-2008-1108 evolution: iCalendar buffer overflow via large timezone specification448541 - CVE-2008-1109 evolution: iCalendar buffer overflow via large description parameter449924 - CVE-2008-1108 CVE-2008-1109 Multiple evolution vulnerabilities [Fedora 9]Fix two buffer overflows in iCalendar .ics file fromat support discovered and reported by Alin Rad Pop of the Secunia Research: CVE-2008-1108, CVE-2008-1109, SA30298
See referenced bugzilla bugs or Secunia advisories for further details:
http://secunia.com/advisories/30298
http://secunia.com/secunia_research/2008-22/advisory/
http://secunia.com/secunia_research/2008-23/advisory/