The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers to obtain sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Feb 6, 2020 |
| Oracle_linux | — | Upgrade nautilus-sendto-develUpgrade libpurple-perlUpgrade planner-develUpgrade evolutionUpgrade openchangeUpgrade control-center-extraUpgrade pidgin-perlUpgrade openchange-devel-docsUpgrade evolution-pstUpgrade gnome-python2-rsvgUpgrade gnome-panelUpgrade evolution-data-server-develUpgrade gtkhtml3Upgrade finchUpgrade finch-develUpgrade gnome-python2-gnomekeyringUpgrade gnome-python2-metacityUpgrade pidgin-develUpgrade evolution-develUpgrade totem-develUpgrade libpurple-tclUpgrade evolution-data-server-docUpgrade totem-nautilusUpgrade gnome-python2-braseroUpgrade gnome-python2-gtksourceviewUpgrade totem-upnpUpgrade libgdataUpgrade ekigaUpgrade totem-jamendoUpgrade gnome-python2-libgtop2Upgrade evolution-helpUpgrade gnome-python2-gnomeprintUpgrade openchange-clientUpgrade gnome-panel-develUpgrade gnome-python2-evolutionUpgrade totemUpgrade gnome-python2-libwnckUpgrade totem-mozpluginUpgrade control-center-develUpgrade evolution-perlUpgrade evolution-mapiUpgrade gnome-python2-evinceUpgrade gnome-python2-desktopUpgrade evolution-spamassassinUpgrade control-center-filesystemUpgrade gnome-python2-bugbuddyUpgrade pidgin-docsUpgrade libpurple-develUpgrade gnome-python2-gnomedesktopUpgrade totem-youtubeUpgrade evolution-exchangeUpgrade pidginUpgrade evolution-mapi-develUpgrade gnome-python2-appletUpgrade libpurpleUpgrade plannerUpgrade gnome-python2-totemUpgrade evolution-devel-docsUpgrade libgdata-develUpgrade planner-edsUpgrade gnome-panel-libsUpgrade openchange-develUpgrade control-centerUpgrade cheeseUpgrade evolution-data-serverUpgrade gtkhtml3-develUpgrade nautilus-sendto | Oct 16, 2024 | Feb 6, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 6, 2020 |
| Ubuntu | — | Upgrade libcamel-1.2-29Upgrade libcamel-1.2-40 | Nov 8, 2024 | Feb 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub