Summary
It was discovered that Evolution Data Server incorrectly handled removing
local cache files. An attacker could possibly use this issue to cause
Evolution Data Server to remove arbitrary files.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | evolution-data-server | 3.44.4-0ubuntu1.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | evolution-data-server | 3.52.3-0ubuntu1.2 |
| Ubuntu · 25.10 | evolution-data-server | 3.56.2-3ubuntu0.1 |
References
-
report
https://ubuntu.com/security/CVE-2026-2604