CVE-2021-3349: Gnome Evolution

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted key because Evolution does not retrieve enough information from the GnuPG API. NOTE: third parties dispute the significance of this issue, and dispute whether Evolution is the best place to change this behavior

Affected products

• Gnome Evolution: up to and including 3.38.3

Published 2021-02-01. Last modified 2026-06-17.