Red Hat Security AdvisoryRHSA-2020:1600
evolution security and bug fix update
Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) evolution-data-server-doc-3.28.5-13.el8, evolution-data-server-perl-3.28.5-13.el8, evolution-data-server-tests-3.28.5-13.el8 +1
- Red Hat Enterprise Linux AppStream (v. 8) evolution-3.28.5-12.el8, evolution-bogofilter-3.28.5-12.el8, evolution-data-server-3.28.5-13.el8 +8
Fixes 1 record
Priority LOW 34
GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02443 · Published 2019-02-11 · Partial fix CWE-347
