CVE-2026-2604
Fixed in a distro release EPSS <1%CVSS 5.6
A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored without proper validation during contact creation or modification. Later, during contact deletion, the URI is processed with a less strict check, leading to the deletion of arbitrary files on the host filesystem. This could potentially include critical Flatpak override files.
Products: GNOME Evolution Data Server, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | evolution-data-server | 3.28.5-4.amzn2.0.2 |
| Amazon Linux 2 | evolution-data-server-devel | 3.28.5-4.amzn2.0.2 |
| Amazon Linux 2 | evolution-data-server-doc | 3.28.5-4.amzn2.0.2 |
| Amazon Linux 2 | evolution-data-server-langpacks | 3.28.5-4.amzn2.0.2 |
| Amazon Linux 2 | evolution-data-server-perl | 3.28.5-4.amzn2.0.2 |
| Amazon Linux 2 | evolution-data-server-tests | 3.28.5-4.amzn2.0.2 |
| Amazon Linux 2023 | evolution-data-server | 3.54.3-1.amzn2023.0.2 |
| Amazon Linux 2023 | evolution-data-server-devel | 3.54.3-1.amzn2023.0.2 |
| Amazon Linux 2023 | evolution-data-server-doc | 3.54.3-1.amzn2023.0.2 |
| Amazon Linux 2023 | evolution-data-server-langpacks | 3.54.3-1.amzn2023.0.2 |
| Amazon Linux 2023 | evolution-data-server-perl | 3.54.3-1.amzn2023.0.2 |
| Amazon Linux 2023 | evolution-data-server-tests | 3.54.3-1.amzn2023.0.2 |
| Debian 11 | evolution-data-server | 3.38.3-1+deb11u3 |
| Debian 12 | evolution-data-server | 3.46.4-2+deb12u1 |
| Debian 13 | evolution-data-server | no fix |
| Debian 14 | evolution-data-server | 3.56.2-8 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | evolution-data-server | 3.42.5-150400.3.10.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | evolution-data-server | 3.50.3-150600.3.9.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP7 | evolution-data-server | 3.50.3-150600.3.9.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP7 | evolution-data-server | 3.42.5-150400.3.10.1 |
| Ubuntu 22.04 LTS | evolution-data-server | 3.44.4-0ubuntu1.2 |
| Ubuntu 24.04 LTS | evolution-data-server | 3.52.3-0ubuntu1.2 |
| Ubuntu 25.10 | evolution-data-server | 3.56.2-3ubuntu0.1 |
| Ubuntu Pro 18.04 LTS | evolution-data-server | 3.28.5-0ubuntu0.18.04.3+esm1 |
| Ubuntu Pro 20.04 LTS | evolution-data-server | 3.36.5-0ubuntu1+esm1 |
| openSUSE Leap 15.6 | evolution-data-server | 3.50.3-150600.3.9.1 |
| openSUSE Tumbleweed | evolution-data-server | 3.58.3-2.1 |