openSUSE-SU-2017:3427-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2017:3427-1

Published

2017-12-22T15:45:46Z

Modified

2017-12-22T15:45:46Z

Summary

Security update for enigmail

Details

This update for enigmail to version 1.9.9 fixes the following issues (boo#1073858):

Enigmail could be coerced to use a malicious PGP public key with a corresponding secret key controlled by an attacker
Enigmail could have replayed encrypted content in partially encrypted e-mails, allowing a plaintext leak
Enigmail could be tricked into displaying incorrect signature verification results
Specially crafted content may cause denial of service

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.9.9-6.1

{
    "binaries": [
        {
            "enigmail": "1.9.9-6.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2017:3427-1.json"