Summary
Marcus Brinkmann discovered that Evolution Data Server did not correctly
interpret the output from GPG when decrypting encrypted messages. Under
certain circumstances, this could result in displaying clear-text portions
of encrypted messages as though they were encrypted.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | evolution-data-server | 3.18.5-1ubuntu1.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | evolution-data-server | 3.28.5-0ubuntu0.18.04.2 |
Vulnerabilities 1
-
Unscored —
GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially cr…
References
-
report
https://ubuntu.com/security/CVE-2018-15587