GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade evolution-ewsUpgrade evolution-ews-langpacks | May 4, 2022 | Feb 11, 2019 |
| Amazon Linux Ami 2 | — | Upgrade evolution-helpUpgrade evolution-langpacksUpgrade evolution-devel-docsUpgrade evolution-bogofilterUpgrade evolutionUpgrade evolution-pstUpgrade evolution-spamassassinUpgrade evolution-develUpgrade evolution-debuginfo | Aug 25, 2020 | Feb 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 11, 2019 |
| Centos_linux | — | Upgrade evolution-debugsourceUpgrade evolution-data-server-develUpgrade evolutionUpgrade evolution-data-server-debugsourceUpgrade evolution-spamassassinUpgrade evolution-debuginfoUpgrade evolution-data-server-docUpgrade evolution-ews-debugsourceUpgrade evolution-bogofilterUpgrade evolution-data-serverUpgrade evolution-develUpgrade evolution-pstUpgrade evolution-bogofilter-debuginfoUpgrade evolution-ews-langpacksUpgrade evolution-ewsUpgrade evolution-langpacksUpgrade evolution-data-server-perlUpgrade evolution-helpUpgrade evolution-devel-docsUpgrade evolution-data-server-testsUpgrade evolution-pst-debuginfoUpgrade evolution-data-server-langpacksUpgrade evolution-data-server-debuginfoUpgrade evolution-data-server-tests-debuginfoUpgrade evolution-spamassassin-debuginfoUpgrade evolution-ews-debuginfo | Apr 1, 2020 | Feb 11, 2019 |
| Debian | — | Upgrade evolution | Apr 29, 2019 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade evolution-helpUpgrade evolution | Feb 22, 2021 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade evolutionUpgrade evolution-help | Apr 30, 2021 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade evolutionUpgrade evolution-help | Dec 16, 2020 | Feb 11, 2019 |
| Oracle_linux | — | Upgrade evolution-data-server-testsUpgrade evolution-data-server-langpacksUpgrade evolution-ewsUpgrade evolutionUpgrade evolution-develUpgrade atkUpgrade atk-develUpgrade evolution-langpacksUpgrade evolution-bogofilterUpgrade evolution-ews-langpacksUpgrade evolution-helpUpgrade evolution-data-server-perlUpgrade evolution-devel-docsUpgrade evolution-data-serverUpgrade evolution-pstUpgrade evolution-data-server-develUpgrade evolution-spamassassinUpgrade evolution-data-server-doc | Oct 5, 2022 | May 27, 2018 |
| Redhat_linux | — | Upgrade evolution-data-server-develUpgrade evolution-ews-debuginfoUpgrade evolution-ews-debugsourceUpgrade evolution-debuginfoUpgrade evolution-pstUpgrade evolution-data-server-tests-debuginfoUpgrade evolution-data-server-langpacksUpgrade evolution-ews-langpacksNo solution existsUpgrade evolution-devel-docsUpgrade evolution-spamassassinUpgrade atk-debuginfoUpgrade evolution-data-server-debugsourceUpgrade evolution-data-server-testsUpgrade evolution-data-serverUpgrade evolution-data-server-perlUpgrade evolutionUpgrade evolution-bogofilterUpgrade evolution-pst-debuginfoUpgrade evolution-data-server-debuginfoUpgrade atk-develUpgrade evolution-spamassassin-debuginfoUpgrade evolution-data-server-docUpgrade evolution-develUpgrade evolution-helpUpgrade evolution-bogofilter-debuginfoUpgrade evolution-langpacksUpgrade evolution-debugsourceUpgrade atkUpgrade evolution-ews | Apr 1, 2020 | Feb 11, 2019 |
| Suse | — | Upgrade evolutionUpgrade evolution-plugin-pst-importUpgrade evolution-plugin-text-highlightUpgrade evolution-develUpgrade evolution-langUpgrade evolution-plugin-bogofilterUpgrade glade-catalog-evolutionUpgrade evolution-plugin-spamassassin | May 24, 2019 | Feb 11, 2019 |
| Ubuntu | — | Upgrade libebackend-1.2-10Upgrade libedataserver-1.2-21Upgrade libcamel-1.2-61Upgrade libcamel-1.2-54Upgrade libedataserver-1.2-23Upgrade evolution-data-server-commonUpgrade evolution-data-server | May 31, 2019 | Feb 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub