evolution-data-server Vulnerability: Bug Fix and Enhancement Update

evolution-data-server Updated 02 Oct 2025

Summary

10/05/2022
N/A
Yes i
Unrated
Not published

ALBA-2022:1782: evolution-data-server bug fix and enhancement update. Affects evolution-data-server versions < 3.28.5-19.el8. Fixed in 3.28.5-19.el8. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored Lume, the Habilume companion Habilume Habit tracker with a companion that grows with you Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent. App Store Google Play

Background

evolution-data-server is a package in the AlmaLinux ecosystem that provides a backend for the Evolution groupware suite. It allows users to manage their email, contacts, and calendars. The package is an essential component for users relying on the Evolution suite for their productivity needs.

Vulnerability Detail

This vulnerability in evolution-data-server (versions prior to 3.28.5-19.el8) could potentially lead to security breaches and unauthorized access to sensitive user data. The specific details of the vulnerability are not provided in this report, but it is recommended to update to version 3.28.5-19.el8 or later to address the issue.

How To Fix

Minimum fixed version

3.28.5-19.el8

This is the first release that contains the fix.

sudo dnf update evolution-data-server

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Workaround

No workaround is mentioned in the provided information.

Conclusion

In conclusion, it is important to update the evolution-data-server package to the latest version to address this vulnerability. Failure to do so may expose users to potential security risks. For further support on vulnerability remediation, you can reach out to DevNack.com.

See every vulnerability recorded for evolution-data-server →

Share this vulnerability

FAQ

evolution-data-server is a package in the AlmaLinux ecosystem that provides a backend for the Evolution groupware suite. It allows users to manage their email, contacts, and calendars.

This vulnerability could potentially lead to security breaches and unauthorized access to sensitive user data.

To fix this vulnerability, it is recommended to update the evolution-data-server package to version 3.28.5-19.el8 or later.

No workaround is mentioned in the provided information.

For more information about this vulnerability, you can refer to the AlmaLinux Release Notes linked in the References section of the advisory.

Related vulnerabilities

Recent vulnerabilities recorded for evolution-data-server.

Sponsored Lume, the Habilume companion Habilume Habit tracker with a companion that grows with you Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent. App Store Google Play

How To Fix

Minimum fixed version

3.28.5-19.el8

This is the first release that contains the fix.

sudo dnf update evolution-data-server

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback