tocsin

Debian/evolution-data-server: unknown

Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a

Action: Upgrade evolution-data-server to 2.24.5-2 or later.

Affected

introducedfixedlast affected
02.24.5-2-

Fixed versions

2.24.5-2

Sources

published · modified · JSON