GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade evolution-ews-langpacksUpgrade evolution-ews | May 4, 2022 | Feb 11, 2019 |
| Amazon Linux Ami 2 | — | Upgrade evolution-develUpgrade evolution-bogofilterUpgrade evolution-pstUpgrade evolution-spamassassinUpgrade evolution-debuginfoUpgrade evolutionUpgrade evolution-langpacksUpgrade evolution-devel-docsUpgrade evolution-help | Aug 25, 2020 | Feb 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 11, 2019 |
| Centos_linux | — | Upgrade evolution-data-server-perlUpgrade evolution-langpacksUpgrade evolution-data-server-tests-debuginfoUpgrade evolution-data-server-testsUpgrade evolution-data-server-langpacksUpgrade evolution-spamassassin-debuginfoUpgrade evolution-pst-debuginfoUpgrade evolution-data-server-debuginfoUpgrade evolution-helpUpgrade evolution-ews-debuginfoUpgrade evolution-devel-docsUpgrade evolution-ews-langpacksUpgrade evolution-develUpgrade evolution-data-server-docUpgrade evolution-pstUpgrade evolution-debuginfoUpgrade evolutionUpgrade evolution-bogofilter-debuginfoUpgrade evolution-bogofilterUpgrade evolution-ews-debugsourceUpgrade evolution-debugsourceUpgrade evolution-data-server-develUpgrade evolution-data-serverUpgrade evolution-data-server-debugsourceUpgrade evolution-ewsUpgrade evolution-spamassassin | Apr 1, 2020 | Feb 11, 2019 |
| Debian | — | Upgrade evolution | Apr 29, 2019 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade evolutionUpgrade evolution-help | Feb 22, 2021 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade evolutionUpgrade evolution-help | Apr 30, 2021 | Feb 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade evolution-helpUpgrade evolution | Dec 16, 2020 | Feb 11, 2019 |
| Oracle_linux | — | Upgrade evolution-data-serverUpgrade evolution-data-server-perlUpgrade evolution-ews-langpacksUpgrade evolution-devel-docsUpgrade evolution-spamassassinUpgrade evolution-data-server-docUpgrade evolution-pstUpgrade evolution-data-server-develUpgrade evolution-helpUpgrade evolution-langpacksUpgrade evolution-develUpgrade evolution-ewsUpgrade atkUpgrade evolution-data-server-langpacksUpgrade evolution-bogofilterUpgrade evolutionUpgrade atk-develUpgrade evolution-data-server-tests | Oct 5, 2022 | May 27, 2018 |
| Redhat_linux | — | Upgrade evolution-data-serverUpgrade atk-debuginfoUpgrade evolution-data-server-develNo solution existsUpgrade evolution-data-server-langpacksUpgrade evolution-ews-debugsourceUpgrade evolution-spamassassinUpgrade evolution-ews-debuginfoUpgrade evolution-devel-docsUpgrade evolution-ews-langpacksUpgrade evolution-data-server-testsUpgrade evolution-data-server-tests-debuginfoUpgrade evolution-pstUpgrade evolution-debuginfoUpgrade evolution-data-server-debugsourceUpgrade evolution-data-server-perlUpgrade atkUpgrade evolution-bogofilterUpgrade evolution-data-server-debuginfoUpgrade evolution-data-server-docUpgrade evolutionUpgrade evolution-develUpgrade evolution-langpacksUpgrade evolution-ewsUpgrade evolution-spamassassin-debuginfoUpgrade evolution-pst-debuginfoUpgrade evolution-debugsourceUpgrade evolution-helpUpgrade atk-develUpgrade evolution-bogofilter-debuginfo | Apr 1, 2020 | Feb 11, 2019 |
| Suse | — | Upgrade evolution-langUpgrade evolution-plugin-bogofilterUpgrade glade-catalog-evolutionUpgrade evolution-plugin-spamassassinUpgrade evolution-plugin-text-highlightUpgrade evolutionUpgrade evolution-plugin-pst-importUpgrade evolution-devel | May 24, 2019 | Feb 11, 2019 |
| Ubuntu | — | Upgrade libcamel-1.2-54Upgrade libcamel-1.2-61Upgrade evolution-data-server-commonUpgrade libedataserver-1.2-23Upgrade evolution-data-serverUpgrade libedataserver-1.2-21Upgrade libebackend-1.2-10 | May 31, 2019 | Feb 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub