UBUNTU-CVE-2026-110777

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...

CVE-2026-110777

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...

CVE-2026-110777

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...

CVE-2026-110777 Evolution-data-server: local file disclosure via attach file:// uris

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...

CVE-2026-110777

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...

CVE-2026-110777

A flaw in evolution-data-server allows for local file disclosure. When a user saves a calendar event containing a file:// URI in its ATTACH property, the application automatically reads the targeted local file, encodes the content in base64, and uploads it to the server. Because there are no file...

EUVD-2026-101521

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...

CVE-2026-110777 Evolution-data-server: local file disclosure via attach file:// uris

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...

CVE-2026-110777

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...

PT-2026-114140

A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...

Linux Distros Unpatched Vulnerability : CVE-2026-110777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file,...

Astra Linux – Vulnerability in evolution-data-server

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client by dereferencing a NULL pointer, by sending an invalid e.g., minimal CAPABILITY line during a connection attempt. This issue is related to the imapxfreecapability and imapxconnecttoserver functions...

[SECURITY] Fedora 45 Update: evolution-data-server-3.62.0-2.fc45

The evolution-data-server package provides a unified backend for programs tha t work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

Rocky Linux 8 [CIQ] Security Update: bogofilter / bogofilter-debuginfo / bogofilter-debugsource / etc (crlsa-2020_4649)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20204649 advisory. evolution-data-server: Response injection via STARTTLS in SMTP and POP3 CVE-2020-14928 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: evolution / evolution-bogofilter / evolution-bogofilter-debuginfo / etc (crlsa-2021_1752)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20211752 advisory. evolution-data-server: NULL pointer dereference related to imapxfreecapability and imapxconnecttoserver CVE-2020-16117 Tenable has extracted the preceding descripti...

[SECURITY] [DLA 4796-1] evolution-data-server security update

Debian LTS Advisory DLA-4796-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson September 25, 2026 https://wiki.debian.org/LTS Package : evolution-data-server Version : 3.46.4-2+deb12u1 CVE ID : CVE-2026-2604 Debian Bug : 1128332 An issue has been found in...

Debian dla-4796 : evolution-data-server - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4796 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4796-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] Fedora 45 Update: evolution-data-server-3.62.0-1.fc45

The evolution-data-server package provides a unified backend for programs tha t work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

Fedora 45 : evolution / evolution-data-server / evolution-ews (2026-5debc0de2b)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-5debc0de2b advisory. Update to 3.62.0 evolution-data-server Bug Fixes: I660 - GOA EWS: Do not require OABUrl in autodiscover I662 - EBackend: Document how OAuth2 sources should a...

EUVD-2026-37506

A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored without proper validation during contact creation or...