TI-2019-02900 CVE-2019-3890 · GHSA-mcq7-35g4-3c5q
Improper certificate validation in GNOME evolution-ews
Priority LOW 37
It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates.
RHSA-2020:1080
evolution security and bug fix update
Released 2020-03-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) atk-2.28.1-2.el7, evolution-3.28.5-8.el7, evolution-data-server-3.28.5-4.el7 +5
- Red Hat Enterprise Linux Client Optional (v. 7) atk-devel-2.28.1-2.el7, evolution-bogofilter-3.28.5-8.el7, evolution-data-server-devel-3.28.5-4.el7 +7
- Red Hat Enterprise Linux ComputeNode (v. 7) atk-2.28.1-2.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) atk-devel-2.28.1-2.el7, evolution-data-server-3.28.5-4.el7, evolution-data-server-devel-3.28.5-4.el7 +4
- Red Hat Enterprise Linux Server (v. 7) atk-2.28.1-2.el7, atk-2.28.1-2.el7.ppc, atk-devel-2.28.1-2.el7 +5
- Red Hat Enterprise Linux Server Optional (v. 7) evolution-3.28.5-8.el7, evolution-bogofilter-3.28.5-8.el7, evolution-data-server-devel-3.28.5-4.el7 +13
- Red Hat Enterprise Linux Workstation (v. 7) atk-2.28.1-2.el7, atk-devel-2.28.1-2.el7, evolution-3.28.5-8.el7 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) evolution-bogofilter-3.28.5-8.el7, evolution-data-server-doc-3.28.5-4.el7, evolution-data-server-perl-3.28.5-4.el7 +5
Fixes 2 records
TI-2018-11118 CVE-2018-15587 · GHSA-9p6f-v932-mfxm
GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary…
Priority LOW 34
GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.