Description
Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | evolution | 2.12.0-1 | — |
| Debian 14 | evolution-data-server | 1.10.2-2 | — |
| Debian 13 | evolution | 2.12.0-1 | — |
| Debian 13 | evolution-data-server | 1.10.2-2 | — |
| Debian 12 | evolution | 2.12.0-1 | — |
| Debian 12 | evolution-data-server | 1.10.2-2 | — |
| Debian 4.0 | evolution | 2.6.3-6etch1 | DSA-1325-1 |
| Debian 4.0 | evolution-data-server | 1.6.3-5etch1 | DSA-1321-1 |
| Debian 3.1 | evolution | 2.0.4-2sarge2 | DSA-1325-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | evolution-data-server +1 | 1.8.0-15.0.4.el5 | RHSA-2007:0510 |
| RHEL 4 | evolution +1 | 2.0.2-35.0.4.el4 | RHSA-2007:0509 |
| RHEL 3 | evolution +1 | 1.4.5-21.el3 | RHSA-2007:0509 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | evolution-data-server | 3.40.4-1.4 | openSUSE-SU-2024:10744-1 |
Advisories 5
- RHSA-2007:0510 Red Hat Security Advisory: evolution-data-server security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0509 Red Hat Security Advisory: evolution security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1321-1 evolution-data-server Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1325-1 evolution Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10744-1 evolution-data-server-3.40.4-1.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- RHSA-2007:0510 vendor-advisory
- 25894 third-party-advisory
- 20070615 rPSA-2007-0122-1 evolution-data-server mailing-list
- ADV-2007-2282 vdb-entry
- 26083 third-party-advisory
- GLSA-200711-04 vendor-advisory
- 25880 third-party-advisory
- 1018284 vdb-entry
- SUSE-SR:2007:014 vendor-advisory
- DSA-1325 vendor-advisory
- USN-475-1 vendor-advisory
- 25766 third-party-advisory
- 25843 third-party-advisory
- 25798 third-party-advisory
- GLSA-200707-03 vendor-advisory
- MDKSA-2007:136 vendor-advisory
- 25777 third-party-advisory
- oval:org.mitre.oval:def:11724 vdb-entry signature
- RHSA-2007:0509 vendor-advisory
- 37489 vdb-entry
- 24567 vdb-entry
- [Evolution-hackers] 20070619 Evolution 2.11.4 , Evolution-Data-Server 1.11.4 , GtkHTML 3.15.4 and Evolution-Exchange 2.11.4 released mailing-list
- 25906 third-party-advisory
- gnome-imaprescan-code-execution(34964) vdb-entry
- DSA-1321 vendor-advisory
- SUSE-SA:2007:042 vendor-advisory
- 25774 third-party-advisory
- 25958 third-party-advisory
- 25793 third-party-advisory
- http://bugzilla.gnome.org/show_bug.cgi?id=447414
- 25765 third-party-advisory