Signature Validation Vulnerability in GNOME Evolution by GNOME
CVE-2021-3349

3.3LOW

Key Information:

Vendor: Gnome
Status: Evolution
Vendor: CVE Published:; 1 February 2021

What is CVE-2021-3349?

GNOME Evolution prior to version 3.38.3 presents a concern where it incorrectly validates signatures from previously trusted keys when an unknown identifier is encountered. This flaw arises because Evolution does not obtain sufficient data from the GnuPG API, potentially leading users to erroneously trust unverified signatures. Discourse among third parties raises questions about the relevance of this issue and whether the behavior should be altered within Evolution itself.