[SECURITY] Fedora 45 Update: evolution-ews-3.62.0-2.fc45

This package allows Evolution to interact with Microsoft Exchange servers, versions 2007 and later, through its Exchange Web Services EWS interface...

[SECURITY] Fedora 45 Update: evolution-data-server-3.62.0-2.fc45

The evolution-data-server package provides a unified backend for programs tha t work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

[SECURITY] Fedora 45 Update: evolution-3.62.0-2.fc45

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The components which make up Evolution are tightly integrated with one another and act as a seamless personal information-management tool...

Rocky Linux 8 [CIQ] Security Update: evolution / evolution-bogofilter / evolution-bogofilter-debuginfo / etc (crlsa-2021_1752)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20211752 advisory. evolution-data-server: NULL pointer dereference related to imapxfreecapability and imapxconnecttoserver CVE-2020-16117 Tenable has extracted the preceding descripti...

Rocky Linux 8 [CIQ] Security Update: bogofilter / bogofilter-debuginfo / bogofilter-debugsource / etc (crlsa-2020_4649)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20204649 advisory. evolution-data-server: Response injection via STARTTLS in SMTP and POP3 CVE-2020-14928 Tenable has extracted the preceding description block directly from the CIQ...

[SECURITY] [DLA 4796-1] evolution-data-server security update

Debian LTS Advisory DLA-4796-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson September 25, 2026 https://wiki.debian.org/LTS Package : evolution-data-server Version : 3.46.4-2+deb12u1 CVE ID : CVE-2026-2604 Debian Bug : 1128332 An issue has been found in...

Debian dla-4796 : evolution-data-server - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4796 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4796-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] Fedora 45 Update: evolution-data-server-3.62.0-1.fc45

The evolution-data-server package provides a unified backend for programs tha t work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

[SECURITY] Fedora 45 Update: evolution-ews-3.62.0-1.fc45

This package allows Evolution to interact with Microsoft Exchange servers, versions 2007 and later, through its Exchange Web Services EWS interface...

[SECURITY] Fedora 45 Update: evolution-3.62.0-1.fc45

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The components which make up Evolution are tightly integrated with one another and act as a seamless personal information-management tool...

Fedora 45 : evolution / evolution-data-server / evolution-ews (2026-5debc0de2b)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-5debc0de2b advisory. Update to 3.62.0 evolution-data-server Bug Fixes: I660 - GOA EWS: Do not require OABUrl in autodiscover I662 - EBackend: Document how OAuth2 sources should a...

CVE-2026-94216

A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is possible to launch the attack...

CVE-2026-94214

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and...

CVE-2026-94216 ST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting

A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is possible to launch the attack...

CVE-2026-94216 ST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting

A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is possible to launch the attack...

EUVD-2026-83907

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This vulnerability affects the function authorize of the file /usr/sbin/webserver of the component HTTP Header Handler. Executing a manipulation of the argument Success can lead to...

CVE-2026-94216

An open redirect vulnerability affects ST Engineering iDirect Evolution and Velocity WebServer Evolution (up to build 20260717). The flaw resides in the authorize function of the file /usr/sbin/webserver, specifically in the HTTP Header Handler component. Manipulating the Success argument allows ...

CVE-2026-94214 ST Engineering iDirect iDX/Evo iDX Location Header redirect

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and...

CVE-2026-94214 ST Engineering iDirect iDX/Evo iDX Location Header redirect

A vulnerability was found in ST Engineering iDirect iDX and Evo iDX. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack remotely. The exploit has been made public and...

EUVD-2026-83902

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the file /login.html of the component Management Service. Performing a manipulation of the argument Host results in open redirect. It is possible to...