SUSE-SU-2018:4215-1
Security update for enigmail
No scoreFix available
This update for enigmail to version 2.0.9 fixes the following issues:
Security issue fixed:
- When using Web Key Discovery, a HTTP authentication may be triggered. This may trick users into possibly sending e-mail credentials (bsc#1118935).
Non-security issues fixed:
- pEp - PGP/MIME signed-only messages are ignored
- Autocrypt overrules manually created Per-Recipient Rules
- 'Re:' prefix on subject line disappears when editing encrypted, saved draft
What each source reports
OSVNo score
Security update for enigmail
This update for enigmail to version 2.0.9 fixes the following issues:
Security issue fixed:
- When using Web Key Discovery, a HTTP authentication may be triggered. This may trick users into possibly sending e-mail credentials (bsc#1118935).
Non-security issues fixed:
- pEp - PGP/MIME signed-only messages are ignored
- Autocrypt overrules manually created Per-Recipient Rules
- 'Re:' prefix on subject line disappears when editing encrypted, saved draft
- Record
SUSE-SU-2018:4215-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
enigmailSUSE:Linux Enterprise Workstation Extension 15 | before 2.0.9-3.13.1 | 2.0.9-3.13.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2018:4215-1 is a vulnerability with no CVSS score yet in enigmail, published December 21, 2018. No source lists public exploit code. Fixed in enigmail 2.0.9-3.13.1.