Ubuntu alert USN-8055-1 (evolution-data-server)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8055-1] Evolution Data Server vulnerability
Date:
             
 
Mon, 23 Feb 2026 14:56:14 +0000
Message-ID:
             
 
<E1vuXM6-0005XD-RD@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8055-1
February 23, 2026

evolution-data-server vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Evolution Data Server could be made to remove files.

Software Description:
- evolution-data-server: Evolution suite data server

Details:

It was discovered that Evolution Data Server incorrectly handled removing
local cache files. An attacker could possibly use this issue to cause
Evolution Data Server to remove arbitrary files.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  evolution-data-server           3.56.2-3ubuntu0.1
  evolution-data-server-common    3.56.2-3ubuntu0.1
  libcamel-1.2-64t64              3.56.2-3ubuntu0.1
  libebackend-1.2-11t64           3.56.2-3ubuntu0.1
  libebook-1.2-21t64              3.56.2-3ubuntu0.1
  libebook-contacts-1.2-4t64      3.56.2-3ubuntu0.1
  libecal-2.0-3                   3.56.2-3ubuntu0.1
  libedata-book-1.2-27t64         3.56.2-3ubuntu0.1
  libedata-cal-2.0-2t64           3.56.2-3ubuntu0.1
  libedataserver-1.2-27t64        3.56.2-3ubuntu0.1
  libedataserverui-1.2-4t64       3.56.2-3ubuntu0.1
  libedataserverui4-1.0-0t64      3.56.2-3ubuntu0.1

Ubuntu 24.04 LTS
  evolution-data-server           3.52.3-0ubuntu1.2
  evolution-data-server-common    3.52.3-0ubuntu1.2
  libcamel-1.2-64t64              3.52.3-0ubuntu1.2
  libebackend-1.2-11t64           3.52.3-0ubuntu1.2
  libebook-1.2-21t64              3.52.3-0ubuntu1.2
  libebook-contacts-1.2-4t64      3.52.3-0ubuntu1.2
  libecal-2.0-3                   3.52.3-0ubuntu1.2
  libedata-book-1.2-27t64         3.52.3-0ubuntu1.2
  libedata-cal-2.0-2t64           3.52.3-0ubuntu1.2
  libedataserver-1.2-27t64        3.52.3-0ubuntu1.2
  libedataserverui-1.2-4t64       3.52.3-0ubuntu1.2
  libedataserverui4-1.0-0t64      3.52.3-0ubuntu1.2

Ubuntu 22.04 LTS
  evolution-data-server           3.44.4-0ubuntu1.2
  evolution-data-server-common    3.44.4-0ubuntu1.2
  libcamel-1.2-63                 3.44.4-0ubuntu1.2
  libebackend-1.2-10              3.44.4-0ubuntu1.2
  libebook-1.2-20                 3.44.4-0ubuntu1.2
  libebook-contacts-1.2-3         3.44.4-0ubuntu1.2
  libecal-2.0-1                   3.44.4-0ubuntu1.2
  libedata-book-1.2-26            3.44.4-0ubuntu1.2
  libedata-cal-2.0-1              3.44.4-0ubuntu1.2
  libedataserver-1.2-26           3.44.4-0ubuntu1.2
  libedataserverui-1.2-3          3.44.4-0ubuntu1.2

After a standard system update you need to restart your session to make all
the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8055-1
  CVE-2026-2604

Package Information:
  https://launchpad.net/ubuntu/+source/evolution-data-serve...
  https://launchpad.net/ubuntu/+source/evolution-data-serve...
  https://launchpad.net/ubuntu/+source/evolution-data-serve...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=zR6N
-----END PGP SIGNATURE-----