CVE catalog

CVE-2018-15587

evolution: CVE-2018-15587

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
2.44% · Oct 25, 2026

GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianevolutionsid3.56.2-10fixed
Debianevolutionforky3.56.2-10fixed
Debianevolutiontrixie3.56.2-0+deb13u1fixed
Debianevolutiontrixie-security3.56.1-1+deb13u1fixed
Debianevolutionbookworm3.46.4-2+deb12u1fixed
Debianevolutionbookworm-security3.46.4-2+deb12u1fixed
Ubuntuevolution-data-server16.043.16.5-1ubuntu3vulnerable
Ubuntuevolution-data-server16.043.18.1-1ubuntu1vulnerable
Ubuntuevolution-data-server16.043.18.2-0ubuntu1vulnerable
Ubuntuevolution-data-server16.043.18.2-0ubuntu2vulnerable
Ubuntuevolution-data-server16.043.18.3-1ubuntu1vulnerable
Ubuntuevolution-data-server16.043.18.3-1ubuntu2vulnerable
Ubuntuevolution-data-server16.043.18.4-0ubuntu1vulnerable
Ubuntuevolution-data-server16.043.18.5-1ubuntu1vulnerable
Ubuntuevolution-data-server16.043.18.5-1ubuntu1.1vulnerable
Ubuntuevolution-data-server16.043.18.5-1ubuntu1.2fixed
Ubuntuevolution-data-server18.043.26.1-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.26.2-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.26.2.1-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.26.2.1-1ubuntu3vulnerable
Ubuntuevolution-data-server18.043.26.3-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.26.5-1ubuntu3vulnerable
Ubuntuevolution-data-server18.043.27.90-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.28.0-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.28.0-2ubuntu1vulnerable
Ubuntuevolution-data-server18.043.28.0-2ubuntu2vulnerable
Ubuntuevolution-data-server18.043.28.1-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.28.3-0ubuntu0.18.04.1vulnerable
Ubuntuevolution-data-server18.043.28.5-0ubuntu0.18.04.1vulnerable
Ubuntuevolution-data-server18.043.28.5-0ubuntu0.18.04.2fixed
Ubuntuevolution-data-server16.043.16.5-1ubuntu3vulnerable
Ubuntuevolution-data-server16.043.18.1-1ubuntu1vulnerable
Ubuntuevolution-data-server16.043.18.2-0ubuntu1vulnerable
Ubuntuevolution-data-server16.043.18.2-0ubuntu2vulnerable
Ubuntuevolution-data-server16.043.18.3-1ubuntu1vulnerable
Ubuntuevolution-data-server16.043.18.3-1ubuntu2vulnerable
Ubuntuevolution-data-server16.043.18.4-0ubuntu1vulnerable
Ubuntuevolution-data-server16.043.18.5-1ubuntu1vulnerable
Ubuntuevolution-data-server16.043.18.5-1ubuntu1.1vulnerable
Ubuntuevolution-data-server16.043.18.5-1ubuntu1.2fixed
Ubuntuevolution16.043.16.5-1ubuntu3vulnerable
Ubuntuevolution16.043.18.1-1ubuntu2vulnerable
Ubuntuevolution16.043.18.2-0ubuntu1vulnerable
Ubuntuevolution16.043.18.2-0ubuntu2vulnerable
Ubuntuevolution16.043.18.3-0ubuntu1vulnerable
Ubuntuevolution16.043.18.3-1ubuntu1vulnerable
Ubuntuevolution16.043.18.4-0ubuntu1vulnerable
Ubuntuevolution16.043.18.5-1ubuntu1vulnerable
Ubuntuevolution16.043.18.5.1-1ubuntu1vulnerable
Ubuntuevolution16.043.18.5.2-0ubuntu1vulnerable
Ubuntuevolution16.043.18.5.2-0ubuntu3vulnerable
Ubuntuevolution16.043.18.5.2-0ubuntu3.1vulnerable
Ubuntuevolution16.043.18.5.2-0ubuntu3.2vulnerable
Ubuntuevolution-data-server18.043.26.1-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.26.2-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.26.2.1-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.26.2.1-1ubuntu3vulnerable
Ubuntuevolution-data-server18.043.26.3-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.26.5-1ubuntu3vulnerable
Ubuntuevolution-data-server18.043.27.90-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.28.0-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.28.0-2ubuntu1vulnerable
Ubuntuevolution-data-server18.043.28.0-2ubuntu2vulnerable
Ubuntuevolution-data-server18.043.28.1-1ubuntu1vulnerable
Ubuntuevolution-data-server18.043.28.3-0ubuntu0.18.04.1vulnerable
Ubuntuevolution-data-server18.043.28.5-0ubuntu0.18.04.1vulnerable
Ubuntuevolution-data-server18.043.28.5-0ubuntu0.18.04.2fixed
Ubuntuevolution18.043.26.1-1vulnerable
Ubuntuevolution18.043.26.2-1vulnerable
Ubuntuevolution18.043.26.2-1ubuntu1vulnerable
Ubuntuevolution18.043.26.3-1vulnerable
Ubuntuevolution18.043.26.5-1vulnerable
Ubuntuevolution18.043.26.5-1build1vulnerable
Ubuntuevolution18.043.27.90-1vulnerable
Ubuntuevolution18.043.28.0-1vulnerable
Ubuntuevolution18.043.28.0-4vulnerable
Ubuntuevolution18.043.28.1-1vulnerable
Ubuntuevolution18.043.28.1-2vulnerable
Ubuntuevolution18.043.28.5-0ubuntu0.18.04.1vulnerable
Ubuntuevolution18.043.28.5-0ubuntu0.18.04.2vulnerable
Suseevolutionlinux enterprise software development kit 12 sp53.22.6-19.9.1fixed
Suseevolutionlinux enterprise workstation extension 12 sp53.22.6-19.9.1fixed
Suseevolutionlinux enterprise desktop 12 sp33.22.6-19.9.1fixed
Suseevolutionlinux enterprise desktop 12 sp43.22.6-19.9.1fixed
Suseevolutionlinux enterprise software development kit 12 sp33.22.6-19.9.1fixed
Suseevolutionlinux enterprise software development kit 12 sp43.22.6-19.9.1fixed
Suseevolutionlinux enterprise workstation extension 12 sp33.22.6-19.9.1fixed
Suseevolutionlinux enterprise workstation extension 12 sp43.22.6-19.9.1fixed
Suseevolutionlinux enterprise workstation extension 153.26.6-4.3.1fixed
Opensuseevolutionleap 15.03.26.6-lp150.3.3.1fixed
Opensuseevolutionleap 15.13.26.6-lp151.4.3.1fixed
Suseevolutionlinux enterprise workstation extension 15 sp13.26.6-4.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianevolutionsourcesid3.30.5-1.1not yet assignedNot reported[924616]
Debianevolutionsourceforky3.30.5-1.1not yet assignedNot reported[924616]
Debianevolutionsourcetrixie3.30.5-1.1not yet assignedNot reported[924616]
Debianevolutionsourcebookworm3.30.5-1.1not yet assignedNot reported[924616]
Ubuntuevolution-data-serverdeb16.043.18.5-1ubuntu1.2Not reportedUSN-3998-1Not reported
Ubuntuevolution-data-serverdeb18.043.28.5-0ubuntu0.18.04.2Not reportedUSN-3998-1Not reported
Ubuntuevolution-data-serverdeb16.043.18.5-1ubuntu1.2Not reportedUBUNTU-CVE-2018-15587Not reported
Ubuntuevolution-data-serverdeb18.043.28.5-0ubuntu0.18.04.2Not reportedUBUNTU-CVE-2018-15587Not reported
Suseevolutionrpmlinux enterprise software development kit 12 sp53.22.6-19.9.1Not reportedSUSE-SU-2019:1391-2Not reported
Suseevolutionrpmlinux enterprise workstation extension 12 sp53.22.6-19.9.1Not reportedSUSE-SU-2019:1391-2Not reported
Suseevolutionrpmlinux enterprise desktop 12 sp33.22.6-19.9.1Not reportedSUSE-SU-2019:1391-1Not reported
Suseevolutionrpmlinux enterprise desktop 12 sp43.22.6-19.9.1Not reportedSUSE-SU-2019:1391-1Not reported
Suseevolutionrpmlinux enterprise software development kit 12 sp33.22.6-19.9.1Not reportedSUSE-SU-2019:1391-1Not reported
Suseevolutionrpmlinux enterprise software development kit 12 sp43.22.6-19.9.1Not reportedSUSE-SU-2019:1391-1Not reported
Suseevolutionrpmlinux enterprise workstation extension 12 sp33.22.6-19.9.1Not reportedSUSE-SU-2019:1391-1Not reported
Suseevolutionrpmlinux enterprise workstation extension 12 sp43.22.6-19.9.1Not reportedSUSE-SU-2019:1391-1Not reported
Suseevolutionrpmlinux enterprise workstation extension 153.26.6-4.3.1Not reportedSUSE-SU-2019:1266-1Not reported
Opensuseevolutionrpmleap 15.03.26.6-lp150.3.3.1Not reportedOPENSUSE-SU-2019:1453-1Not reported
Opensuseevolutionrpmleap 15.13.26.6-lp151.4.3.1Not reportedOPENSUSE-SU-2019:1431-1Not reported
Suseevolutionrpmlinux enterprise workstation extension 15 sp13.26.6-4.3.1Not reportedSUSE-SU-2019:1266-2Not reported

[Debian bug #924616]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [evolution]Unknown
    Details (4)
    • 3.46.4-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

  • Source package: [evolution]

    Details (4)
    • 3.46.4-2+deb12u1 · all · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · all · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

  • [evolution-dev]Unknown

    Source package: [evolution]

    Details (4)
    • 3.46.4-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

  • Source package: [evolution]

    Details (4)
    • 3.46.4-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

  • Source package: [evolution]

    Details (4)
    • 3.46.4-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

  • Source package: [evolution]

    Details (4)
    • 3.46.4-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

  • Source package: [evolution]

    Details (4)
    • 3.46.4-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

  • Source package: [evolution]

    Details (4)
    • 3.46.4-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

  • [libevolution]Unknown

    Source package: [evolution]

    Details (4)
    • 3.46.4-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

    • 3.46.4-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · bookworm; dsa · evolution · debian · 12

[Debian 13 (Trixie)]

  • [evolution]Unknown
    Details (4)
    • 3.56.2-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.2-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

  • Source package: [evolution]

    Details (4)
    • 3.56.2-0+deb13u1 · all · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.2-0+deb13u1 · all · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · all · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · all · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

  • [evolution-dev]Unknown

    Source package: [evolution]

    Details (4)
    • 3.56.2-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.2-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

  • Source package: [evolution]

    Details (4)
    • 3.56.2-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.2-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

  • Source package: [evolution]

    Details (4)
    • 3.56.2-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.2-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

  • Source package: [evolution]

    Details (4)
    • 3.56.2-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.2-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

  • Source package: [evolution]

    Details (4)
    • 3.56.2-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.2-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

  • Source package: [evolution]

    Details (4)
    • 3.56.2-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.2-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

  • [libevolution]Unknown

    Source package: [evolution]

    Details (4)
    • 3.56.2-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.2-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

    • 3.56.1-1+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.30.5-1.1

      dsa · evolution · debian · 13

Observed:

References