Skip to content
OpenAdvisories
Medium DLA-4503-1 1 CVE

evolution-data-server - security update

Published Mar 19, 2026 · Updated Mar 19, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 evolution-data-server 3.38.3-1+deb11u3

Vulnerabilities 1

  • Medium 5.6
    CVE-2026-2604

    Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling

    A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored without proper valida…

    Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu