GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade evolution-ewsUpgrade evolution-ews-langpacks | May 4, 2022 | Feb 11, 2019 |
| Amazon Linux Ami 2 | — | Upgrade evolution-debuginfoUpgrade evolution-pstUpgrade evolutionUpgrade evolution-develUpgrade evolution-bogofilterUpgrade evolution-spamassassinUpgrade evolution-langpacksUpgrade evolution-helpUpgrade evolution-devel-docs | Aug 25, 2020 | Feb 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 11, 2019 |
| Centos_linux | — | Upgrade evolution-data-server-debugsourceUpgrade evolution-ews-langpacksUpgrade evolution-develUpgrade evolution-data-server-develUpgrade evolution-spamassassinUpgrade evolution-debuginfoUpgrade evolution-pstUpgrade evolution-bogofilter-debuginfoUpgrade evolutionUpgrade evolution-bogofilterUpgrade evolution-debugsourceUpgrade evolution-ewsUpgrade evolution-ews-debugsourceUpgrade evolution-data-server-docUpgrade evolution-data-serverUpgrade evolution-ews-debuginfoUpgrade evolution-data-server-perlUpgrade evolution-data-server-langpacksUpgrade evolution-pst-debuginfoUpgrade evolution-data-server-tests-debuginfoUpgrade evolution-devel-docsUpgrade evolution-spamassassin-debuginfoUpgrade evolution-data-server-testsUpgrade evolution-data-server-debuginfoUpgrade evolution-langpacksUpgrade evolution-help | Apr 1, 2020 | Feb 11, 2019 |
| Debian | — | Upgrade evolution | Apr 29, 2019 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade evolutionUpgrade evolution-help | Feb 22, 2021 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade evolution-helpUpgrade evolution | Apr 30, 2021 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade evolutionUpgrade evolution-help | Dec 16, 2020 | Feb 11, 2019 |
| Oracle_linux | — | Upgrade evolution-spamassassinUpgrade evolution-data-server-perlUpgrade evolution-helpUpgrade evolution-data-server-docUpgrade evolution-pstUpgrade evolution-data-server-develUpgrade evolution-data-serverUpgrade evolution-devel-docsUpgrade evolution-ews-langpacksUpgrade evolution-bogofilterUpgrade atkUpgrade evolution-langpacksUpgrade evolution-develUpgrade evolutionUpgrade evolution-data-server-testsUpgrade evolution-ewsUpgrade atk-develUpgrade evolution-data-server-langpacks | Oct 5, 2022 | May 27, 2018 |
| Redhat_linux | — | Upgrade evolution-bogofilterUpgrade atk-develUpgrade evolution-helpUpgrade evolution-debugsourceUpgrade evolution-data-server-docUpgrade evolutionUpgrade evolution-langpacksUpgrade atkUpgrade evolution-data-server-debuginfoUpgrade evolution-develUpgrade evolution-ewsUpgrade evolution-spamassassin-debuginfoUpgrade evolution-data-server-perlUpgrade evolution-pst-debuginfoUpgrade evolution-bogofilter-debuginfoNo solution existsUpgrade evolution-data-server-testsUpgrade evolution-devel-docsUpgrade evolution-ews-debugsourceUpgrade evolution-data-server-langpacksUpgrade evolution-data-server-tests-debuginfoUpgrade evolution-pstUpgrade evolution-ews-langpacksUpgrade evolution-ews-debuginfoUpgrade evolution-debuginfoUpgrade evolution-spamassassinUpgrade evolution-data-server-debugsourceUpgrade evolution-data-server-develUpgrade atk-debuginfoUpgrade evolution-data-server | Apr 1, 2020 | Feb 11, 2019 |
| Suse | — | Upgrade evolutionUpgrade evolution-develUpgrade evolution-plugin-pst-importUpgrade evolution-plugin-text-highlightUpgrade glade-catalog-evolutionUpgrade evolution-plugin-spamassassinUpgrade evolution-plugin-bogofilterUpgrade evolution-lang | May 24, 2019 | Feb 11, 2019 |
| Ubuntu | — | Upgrade libebackend-1.2-10Upgrade libedataserver-1.2-23Upgrade libcamel-1.2-61Upgrade libcamel-1.2-54Upgrade evolution-data-serverUpgrade evolution-data-server-commonUpgrade libedataserver-1.2-21 | May 31, 2019 | Feb 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub