-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 25 Sep 2026 22:41:29 +0200 Source: evolution-data-server Architecture: source Version: 3.46.4-2+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Andreas Henriksson <andreas@fatal.se> Closes: 1128332 Changes: evolution-data-server (3.46.4-2+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2026-2604 - canonicalize path before local cache file removal (Closes: #1128332) * Add new symbol "e_util_filename_is_in_path" Checksums-Sha1: a8221356ee449c2ba5ee31d0f72c560b741506fc 5652 evolution-data-server_3.46.4-2+deb12u1.dsc 88490ec65eda7719195a7f642f02f83e8f988ab3 4889000 evolution-data-server_3.46.4.orig.tar.xz ca7bd5fab2c7db673883eb541fb87955e4bb35e7 61372 evolution-data-server_3.46.4-2+deb12u1.debian.tar.xz a05e95addb5b85d280c375aac0600a1dc0d1c30c 16384 evolution-data-server_3.46.4-2+deb12u1_source.buildinfo Checksums-Sha256: 0eacc1d6da9980153ea25b25f5482aac25774cc8674c446c8a15e1a4637187a3 5652 evolution-data-server_3.46.4-2+deb12u1.dsc a59b254145c59facd7c7b5382db78dc5f0ed1f6a6e9b8fe7d5e75959f93c0cc8 4889000 evolution-data-server_3.46.4.orig.tar.xz 623b6272879ece88336e6efa7a0687059990798fbd4894b364db023eca02030f 61372 evolution-data-server_3.46.4-2+deb12u1.debian.tar.xz 379855e5d0a95b925d5c4d6fe3a00fbda3e7bb8cadf9c514761141ad198302fa 16384 evolution-data-server_3.46.4-2+deb12u1_source.buildinfo Files: 33165d21b307513784a3cc15b455dfb1 5652 gnome optional evolution-data-server_3.46.4-2+deb12u1.dsc 45a022d2460ca032581909eb09b308ec 4889000 gnome optional evolution-data-server_3.46.4.orig.tar.xz fba798ad82a3c1cd2cda510bc761f489 61372 gnome optional evolution-data-server_3.46.4-2+deb12u1.debian.tar.xz 6c19784f3ab336383cf75c2e58af42f5 16384 gnome optional evolution-data-server_3.46.4-2+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+uHltkZSvnmOJ4zCC8R9xk0TUwYFAmq25KgACgkQC8R9xk0T UwaoPg//b5wbUH723UI7Zl5vyrCh3Hr7F2h7eY8wbUfDOv7E957izLYxtP3QeMz6 NdRxV+RkumsxMgSHBFlSe/zSecf02BFj0rPKMvtbipC3d4GgN5UfLU2KduBwdYBl C0v3jyGeWJKD7dAU/7pUufVMFWnaMgSXdJO/E3JxsaSs5KLhcSXDD6WUgXL0DvCx /B1EVS3cO083IzlVCIKlTUZbARQs4pOXD7n7ZI3YfzYy1923BJgfq5W5F43U0TG/ iF/+mE+BmUUKuLi7Om9Btal5NtzP7PSwZQuR5G7/omiAPqhDE8KZZi9uKJo5kZwO VqVSqlCREP50layRLUN0rMeSBScXndFFHXI4oQSP5KHXKxpRsA1kz0N/amiTG8o3 rRtLwbc2/lNHs+NP3S/l7WMJCrq7Aq+JAwybgYMrnFYIxIP3PiyIrM7cKBHjs1Ru 7hGpTfvIqGxEEvqncBywjEKFYpnMAeqsEBaEhbghswenvi2G2S5XxQlPWdEgbST5 UVHgfyT+/D0t7ulZGAATRCbxn9t6dO8m4Wp/RL6JYpYzeJ40yOt8+58FXXNtnnHv LqFjKwz89b49kDHiUztepYXYiOEtine2N98Bi5JkY1ebDQ9UVN6zmR73DpxwuSZG 9uW2iFpni3kDV/4I4IhzMIKH/gJQemBQA5mCeI37d8a4A6t6l/M= =jwVL -----END PGP SIGNATURE-----