REDHAT-BUG-1677650: Medium severity evolution vulnerability
GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.
Upstream issues : https://bugzilla.gnome.org/showbug.cgi?id=796424
Upstream Patch: https://gitlab.gnome.org/GNOME/evolution/commit/f66cd3e1db301d264563b4222a3574e2e58e2b85
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1677650?
The severity of REDHAT-BUG-1677650 is classified as a security vulnerability affecting GNOME Evolution.
How do I fix REDHAT-BUG-1677650?
To fix REDHAT-BUG-1677650, update GNOME Evolution to a version later than 3.28.2 where this vulnerability has been addressed.
What type of vulnerability is REDHAT-BUG-1677650?
REDHAT-BUG-1677650 is an OpenPGP signature spoofing vulnerability that can be exploited through specially crafted emails.
Who is affected by REDHAT-BUG-1677650?
Users of GNOME Evolution versions up to and including 3.28.2 are affected by REDHAT-BUG-1677650.
Can REDHAT-BUG-1677650 lead to data compromise?
Yes, if exploited, REDHAT-BUG-1677650 can allow an attacker to impersonate users and potentially compromise sensitive data.