PT-2026-21547 · Gnome · Evolution Data Server

Published 2026-01-01 · Updated 2026-06-01 · CVE-2026-2604

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions evolution-data-server versions 22.04 through 25.10

Description The software contains a flaw related to insecure local cache file removal. This could allow for unauthorized access or modification of cached data.

Recommendations Update to a newer version that addresses the insecure local cache file removal issue.

Related Identifiers

CVE-2026-2604

OESA-2026-2354

OESA-2026-2355

OESA-2026-2356

OPENSUSE-SU-2026:10262-1

SUSE-SU-2026:0775-1

SUSE-SU-2026:0776-1

USN-8055-1

USN-8055-2

Affected Products

Evolution Data Server

References · 24

• https://security-tracker.debian.org/tracker/CVE-2026-2604 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8055-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8055-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8055-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8055-2 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2354 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0775-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-2604 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2356 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-2604 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0776-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2604 · Security Note
• https://ubuntu.com/security/CVE-2026-2604 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2355 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10262-1 · Vendor Advisory