PatchFirst · Latest vulnerabilities
Vulnerabilities published for evolution-data-server in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."
GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.
Check your installed stack and versions against the current vulnerability feeds.