Vulnerability in Evolution Data Server Allows File Deletion in Ubuntu Systems

A vulnerability has been identified in Evolution Data Server affecting Ubuntu 18.04 LTS and 20.04 LTS. The flaw allows an attacker to exploit the software's handling of local cache files, potentially leading to the deletion of arbitrary files. This issue was addressed in the recent USN-8055-2 update, which follows the earlier USN-8055-1 advisory. Users are advised to update their systems to the latest package versions to mitigate this risk. The specific versions impacted include evolution-data-server 3.36.5-0ubuntu1+esm1 for Ubuntu 20.04 LTS and 3.28.5-0ubuntu0.18.04.3+esm1 for Ubuntu 18.04 LTS. A session restart is required post-update to apply the changes. This vulnerability highlights the importance of regular system updates to maintain security.

Key Points: • Evolution Data Server vulnerability allows arbitrary file deletion on affected Ubuntu systems. • Impacted versions include Ubuntu 18.04 LTS and 20.04 LTS with specific package versions. • Users must update their systems and restart sessions to apply the necessary security changes.