CVE-2018-15587: Debian Linux

Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days.

GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.

Affected products

• Debian Debian Linux: version 8.0 only
• Gnome Evolution: up to and including 3.28.2

Published 2019-02-11. Last modified 2026-06-17.