Evolution Data Server could be made to remove files.
Software Description:
- evolution-data-server: Evolution suite data server
Details:
USN-8055-1 fixed a vulnerability in Evolution Data Server. This update
provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu
20.04 LTS.
Original advisory details:
It was discovered that Evolution Data Server incorrectly handled
removing local cache files. An attacker could possibly use this issue
to cause Evolution Data Server to remove arbitrary files.
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
evolution-data-server 3.36.5-0ubuntu1+esm1
Available with Ubuntu Pro
Ubuntu 18.04 LTS
evolution-data-server 3.28.5-0ubuntu0.18.04.3+esm1
Available with Ubuntu Pro
After a standard system update you need to restart your session to make all
the necessary changes.https://ubuntu.com/security/notices/USN-8055-2
https://ubuntu.com/security/notices/USN-8055-1
CVE-2026-2604
Get the latest Linux and open source security news straight to your inbox.