SUSE-SU-2018:4215-1

Source
https://www.suse.com/support/update/announcement/2018/suse-su-20184215-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:4215-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2018:4215-1
Published
2018-12-21T10:23:52Z
Modified
2018-12-21T10:23:52Z
Summary
Security update for enigmail
Details

This update for enigmail to version 2.0.9 fixes the following issues:

Security issue fixed:

  • When using Web Key Discovery, a HTTP authentication may be triggered. This may trick users into possibly sending e-mail credentials (bsc#1118935).

Non-security issues fixed:

  • pEp - PGP/MIME signed-only messages are ignored
  • Autocrypt overrules manually created Per-Recipient Rules
  • 'Re:' prefix on subject line disappears when editing encrypted, saved draft
References

Affected packages

SUSE:Linux Enterprise Workstation Extension 15 / enigmail

Package

Name
enigmail
Purl
pkg:rpm/suse/enigmail&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.0.9-3.13.1

Ecosystem specific

{
    "binaries":  [
        {
            "enigmail":  "2.0.9-3.13.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:4215-1.json"