CVE-2013-4166: The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Ev...

Security readout for executives and security teams

CVE-2013-4166 is a confidentiality flaw in GNOME Evolution email encryption. In affected versions, encrypted mail could be protected with the wrong GPG key, meaning the intended privacy control may fail and sensitive email content could be exposed to an unintended key holder. Exposure is limited to environments using affected GNOME Evolution or Evolution Data Server versions for GPG-encrypted email. Systems not using these clients or not relying on GPG email encryption are unlikely to be directly affected based on the provided sources. Treat this as a targeted confidentiality risk. Prioritize remediation where executives, legal, finance, HR, or security teams used affected Evolution versions for encrypted email containing sensitive information. Mitigation focus: Upgrade Evolution and Evolution Data Server beyond the affected versions.; Apply vendor backports referenced by GNOME commits or Red Hat advisory RHSA-2013-1540.; Check distribution security advisories for package-specific fixed builds..

Prepared

Jun 6, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.