https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:05:49.863441+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1752 ALSA-2021:1752 — Low: evolution security, bug fix, and enhancement update 2026-10-04T18:05:49.874318+00:00

Affected: AlmaLinux:8: evolution-data-server-doc, AlmaLinux:8: evolution-data-server-perl, AlmaLinux:8: evolution-data-server-tests, AlmaLinux:8: evolution-devel

Evolution is a GNOME application that provides integrated email, calendar, contact management, and communications functionality.

The evolution-data-server packages provide a unified back end for applications which interact with contacts, tasks and calendar information. Evolution Data Server was originally developed as a back end for the Evolution information management application, but is now used by various other applications.

Security Fix(es):

* evolution-data-server: NULL pointer dereference related to imapx_free_capability and imapx_connect_to_server (CVE-2020-16117)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-43376 EUVD-2026-43376 2026-10-04T18:05:49.874389+00:00 EUVD-2026-43376 https://cve.radiocsirt.org/vuln/fkie_cve-2020-16117 fkie_cve-2020-16117 2026-10-04T18:05:49.874405+00:00

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

 https://cve.radiocsirt.org/vuln/ghsa-j89v-2w65-5qmq GHSA-j89v-2w65-5qmq 2026-10-04T18:05:49.874428+00:00

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.

 https://cve.radiocsirt.org/vuln/gsd-2020-16117 gsd-2020-16117 2026-10-04T18:05:49.874442+00:00 gsd-2020-16117 https://cve.radiocsirt.org/vuln/oesa-2022-1628 OESA-2022-1628 — evolution-data-server security update 2026-10-04T18:05:49.874453+00:00

Affected: openEuler:20.03-LTS-SP1: evolution-data-server, openEuler:20.03-LTS-SP3: evolution-data-server

The evolution-data-server package provides a personal information management application that provides integrated mail, calendaring and address book functionality. The evolution-data-server package provides a single database for common, desktop-wide information, such as a user's address book or calendar events. Security Fix(es): In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.(CVE-2020-16117)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0482-1 openSUSE-SU-2021:0482-1 — Security update for evolution-data-server 2026-10-04T18:05:49.874478+00:00

Security update for evolution-data-server

 https://cve.radiocsirt.org/vuln/suse-su-2021:0885-1 SUSE-SU-2021:0885-1 — Security update for evolution-data-server 2026-10-04T18:05:49.874494+00:00

Security update for evolution-data-server

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-16117 UBUNTU-CVE-2020-16117 2026-10-04T18:05:49.874508+00:00

Affected: Ubuntu:16.04:LTS: evolution-data-server, Ubuntu:Pro:18.04:LTS: evolution-data-server

In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.