CVE-2021-3349
evolution-data-server: mail is shown as having a valid signature from an unknown identifier on a previously trusted key
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 1, 2021
Updated · November 22, 2025
Description
GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted key because Evolution does not retrieve enough information from the GnuPG API. NOTE: third parties dispute the significance of this issue, and dispute whether Evolution is the best place to change this behavior
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 2.9CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CWE-345 · Insufficient Verification of Data Authenticity