{"id":"CVE-2017-17689","aliases":["DEBIAN-CVE-2017-17689","EUVD-2017-8846","GHSA-xv45-9768-g2mm","UBUNTU-CVE-2017-17689","USN-7729-1","USN-7730-1","USN-7731-1","openSUSE-SU-2018:1329-1","openSUSE-SU-2018:1330-1","openSUSE-SU-2024:10736-1"],"status":"published","title":"The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can...","description":"The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04144,"percentile":0.90921,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-05-16T19:00:00Z","modified":"2026-09-01T20:03:46Z","fixes":[{"ecosystem":"Debian:12","package":"kf5-messagelib","fixed_in":["4:18.08.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","fixed_in":["1:52.8.0+build1-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"kdepim","fixed_in":["4:4.13.3-0ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","fixed_in":["1:52.8.0+build1-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"kdepim","fixed_in":["4:15.12.3-0ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","fixed_in":["1:52.8.0+build1-0ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"kf5-messagelib","fixed_in":["4:17.12.3-0ubuntu3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"kmail","fixed_in":["4:17.12.3-0ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.46.4-2","3.46.4-2+deb12u1","3.47.2-1","3.47.3-1","3.48.0-1","3.48.1-1","3.48.2-1","3.48.3-1","3.48.4-1","3.49.2-1","3.49.2-2","3.49.2-3","3.49.3-1","3.50.0-1","3.50.1-1","3.50.2-1","3.50.3-1","3.51.2-1","3.52.0-1","3.52.1-1","3.52.1-2","3.52.1-3","3.52.1-4","3.52.2-1","3.52.2-2","3.52.3-1","3.53.2-1","3.53.3-1","3.54.0-1","3.54.1-1","3.54.2-1","3.54.3-1","3.54.3-2","3.55.1-1","3.55.1-2","3.55.2-1","3.55.3-1","3.56.0-1","3.56.1-1","3.56.2-1","3.56.2-10","3.56.2-2","3.56.2-3","3.56.2-4","3.56.2-5","3.56.2-7","3.56.2-8","3.56.2-9"]},{"source":"osv","ecosystem":"Debian:13","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.56.1-1","3.56.1-1+deb13u1","3.56.2-0+deb13u1","3.56.2-1","3.56.2-10","3.56.2-2","3.56.2-3","3.56.2-4","3.56.2-5","3.56.2-7","3.56.2-8","3.56.2-9"]},{"source":"osv","ecosystem":"Debian:14","package":"evolution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.56.1-1","3.56.2-1","3.56.2-10","3.56.2-2","3.56.2-3","3.56.2-4","3.56.2-5","3.56.2-7","3.56.2-8","3.56.2-9"]},{"source":"osv","ecosystem":"Debian:12","package":"kf5-messagelib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:18.08.1-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1","1:52.1.1+build1-0ubuntu0.14.04.1","1:52.2.1+build1-0ubuntu0.14.04.1","1:52.3.0+build1-0ubuntu0.14.04.1","1:52.4.0+build1-0ubuntu0.14.04.2","1:52.5.0+build1-0ubuntu0.14.04.1","1:52.6.0+build1-0ubuntu0.14.04.1","1:52.7.0+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"kdepim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.13.3-0ubuntu0.2+esm1"}]}],"versions":["4:4.11.2-0ubuntu1","4:4.11.2-0ubuntu2","4:4.11.80-0ubuntu1","4:4.11.95-0ubuntu1","4:4.11.97-0ubuntu1","4:4.12.0-0ubuntu1","4:4.12.1-0ubuntu1","4:4.12.2-0ubuntu1","4:4.12.3-0ubuntu1","4:4.12.90-0ubuntu1","4:4.12.90-0ubuntu2","4:4.12.95-0ubuntu1","4:4.12.97-0ubuntu1","4:4.13.0-0ubuntu1","4:4.13.1-0ubuntu0.1","4:4.13.2-0ubuntu0.1","4:4.13.3-0ubuntu0.1","4:4.13.3-0ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1","1:52.2.1+build1-0ubuntu0.16.04.1","1:52.3.0+build1-0ubuntu0.16.04.1","1:52.4.0+build1-0ubuntu0.16.04.2","1:52.5.0+build1-0ubuntu0.16.04.1","1:52.6.0+build1-0ubuntu0.16.04.1","1:52.7.0+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"kdepim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:15.12.3-0ubuntu1.1+esm1"}]}],"versions":["4:15.08.2-0ubuntu1","4:15.12.1-1ubuntu6","4:15.12.3-0ubuntu1","4:15.12.3-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.8.0+build1-0ubuntu0.18.04.1"}]}],"versions":["1:52.4.0+build1-0ubuntu2","1:52.6.0+build1-0ubuntu1","1:52.7.0+build1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"kf5-messagelib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:17.12.3-0ubuntu3+esm1"}]}],"versions":["4:17.04.3-0ubuntu1","4:17.04.3-0ubuntu2","4:17.08.3-0ubuntu1","4:17.08.3-0ubuntu2","4:17.12.2-0ubuntu3","4:17.12.3-0ubuntu2","4:17.12.3-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"kmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:17.12.3-0ubuntu1+esm1"}]}],"versions":["4:17.04.3-0ubuntu1","4:17.08.3-0ubuntu1","4:17.08.3-0ubuntu2","4:17.12.2-0ubuntu1","4:17.12.3-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"kdepim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.13.3-0ubuntu0.2+esm1"}]}],"versions":["4:4.11.2-0ubuntu1","4:4.11.2-0ubuntu2","4:4.11.80-0ubuntu1","4:4.11.95-0ubuntu1","4:4.11.97-0ubuntu1","4:4.12.0-0ubuntu1","4:4.12.1-0ubuntu1","4:4.12.2-0ubuntu1","4:4.12.3-0ubuntu1","4:4.12.90-0ubuntu1","4:4.12.90-0ubuntu2","4:4.12.95-0ubuntu1","4:4.12.97-0ubuntu1","4:4.13.0-0ubuntu1","4:4.13.1-0ubuntu0.1","4:4.13.2-0ubuntu0.1","4:4.13.3-0ubuntu0.1","4:4.13.3-0ubuntu0.2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"kdepim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:15.12.3-0ubuntu1.1+esm1"}]}],"versions":["4:15.08.2-0ubuntu1","4:15.12.1-1ubuntu6","4:15.12.3-0ubuntu1","4:15.12.3-0ubuntu1.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"kf5-messagelib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:17.12.3-0ubuntu3+esm1"}]}],"versions":["4:17.04.3-0ubuntu1","4:17.04.3-0ubuntu2","4:17.08.3-0ubuntu1","4:17.08.3-0ubuntu2","4:17.12.2-0ubuntu3","4:17.12.3-0ubuntu2","4:17.12.3-0ubuntu3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"kmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:17.12.3-0ubuntu1+esm1"}]}],"versions":["4:17.04.3-0ubuntu1","4:17.08.3-0ubuntu1","4:17.08.3-0ubuntu2","4:17.12.2-0ubuntu1","4:17.12.3-0ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"kmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:19.12.3-0ubuntu1+esm1"}]}],"versions":["4:19.04.3-0ubuntu2","4:19.04.3-0ubuntu3","4:19.12.3-0ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"enigmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"enigmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"enigmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.4-1.4"}]}],"bundled":5}],"products":[{"vendor":"9folders","product":"nine"},{"vendor":"apple","product":"mail"},{"vendor":"bloop","product":"airmail"},{"vendor":"emclient","product":"emclient"},{"vendor":"flipdogsolutions","product":"maildroid"},{"vendor":"freron","product":"mailmate"},{"vendor":"gnome","product":"evolution"},{"vendor":"google","product":"gmail"},{"vendor":"horde","product":"horde_imp"},{"vendor":"ibm","product":"notes"},{"vendor":"kde","product":"kmail"},{"vendor":"kde","product":"trojita"},{"vendor":"microsoft","product":"outlook"},{"vendor":"mozilla","product":"thunderbird"},{"vendor":"postbox-inc","product":"postbox"},{"vendor":"r2mail2","product":"r2mail2"},{"vendor":"ritlabs","product":"the_bat"}],"references":[{"url":"https://news.ycombinator.com/item?id=17066419","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://pastebin.com/gNCc8aYm","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/104165","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://twitter.com/matthew_d_green/status/996371541591019520","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://efail.de","tags":["x_refsource_MISC","x_transferred","Exploit","Mitigation","Third Party Advisory","evidence","report"]},{"url":"https://www.synology.com/support/security/Synology_SA_18_22","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17689"},{"url":"https://github.com/advisories/GHSA-xv45-9768-g2mm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-17689","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-17689","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17689","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7729-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7730-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7731-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-10732","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11880","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50624","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RNZBPQATLVKCT7P5YVUXDDVDFKRPUWP6/#RNZBPQATLVKCT7P5YVUXDDVDFKRPUWP6","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1093151","tags":["report"]},{"url":"https://bugzilla.suse.com/1093152","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17689","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OTHLYEPMU5SK5PDODY44XQQ6DR7FWSLS/#OTHLYEPMU5SK5PDODY44XQQ6DR7FWSLS","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12269","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-17689","description":"The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.","status":"published","published":"2018-05-16T19:00:00Z","modified":"2024-08-05T20:59:17.441Z","updated_at":"2026-11-02T14:33:18.248329Z"}],"euvd":[{"id":"EUVD-2017-8846","description":"The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.","status":"published","published":"2018-05-16T19:00:00Z","modified":"2024-08-05T20:59:17Z","updated_at":"2026-11-03T02:23:08.959608Z"}],"ghsa":[{"id":"GHSA-xv45-9768-g2mm","title":"The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can...","description":"The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.","status":"published","published":"2022-05-13T01:44:27Z","modified":"2023-02-02T05:01:05Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:51:06.494699Z"}],"nvd":[{"id":"CVE-2017-17689","description":"The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.","status":"published","published":"2018-05-16T19:29:00.303Z","modified":"2026-06-17T01:11:29.753Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:17.638656Z"}],"osv":[{"id":"CVE-2017-17689","description":"The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.","status":"published","published":"2018-05-16T19:29:00.303Z","modified":"2026-03-15T13:59:27.952166Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:04.853379Z"},{"id":"DEBIAN-CVE-2017-17689","description":"The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.","status":"published","published":"2018-05-16T19:29:00.303Z","modified":"2026-09-01T20:03:46.244626655Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"UBUNTU-CVE-2017-17689","description":"The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.","status":"published","published":"2018-05-16T19:29:00Z","modified":"2026-04-22T11:20:49.171178Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"openSUSE-SU-2018:1329-1","title":"Security update for enigmail","description":"This update for enigmail to version 2.0.4 fixes multiple issues.\n\nSecurity issues fixed:\n\n- CVE-2017-17688: CFB gadget attacks allowed to exfiltrate plaintext out of encrypted emails.\n  enigmail now fails on GnuPG integrity check warnings for old Algorithms (bsc#1093151)\n- CVE-2017-17689: CBC gadget attacks allows to exfiltrate plaintext out of encrypted emails (bsc#1093152)\n\nThis update also includes new and updated functionality:\n\n- The Encryption and Signing buttons now work for both OpenPGP and S/MIME.\n  Enigmail will chose between S/MIME or OpenPGP depending on whether the keys\n  for all recipients are available for the respective standard\n- Support for the Autocrypt standard, which is now enabled by default\n- Support for Pretty Easy Privacy (p≡p)\n- Support for Web Key Directory (WKD)\n- The message subject can now be encrypted and replaced with a dummy subject,\n  following the Memory Hole standard forprotected Email Headers\n- keys on keyring are automatically refreshed from keyservers at irregular intervals\n- Subsequent updates of Enigmail no longer require a restart of Thunderbird \n- Keys are internally addressed using the fingerprint instead of the key ID","status":"published","published":"2018-05-17T11:35:48Z","modified":"2026-02-04T02:58:28.24307Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2018:1330-1","title":"Security update for enigmail","description":"This update for enigmail to version 2.0.4 fixes multiple issues.\n\nSecurity issues fixed:\n\n- CVE-2017-17688: CFB gadget attacks allowed to exfiltrate plaintext out of encrypted emails.\n  enigmail now fails on GnuPG integrity check warnings for old Algorithms (bsc#1093151)\n- CVE-2017-17689: CBC gadget attacks allows to exfiltrate plaintext out of encrypted emails (bsc#1093152)\n\nThis update also includes new and updated functionality:\n\n- The Encryption and Signing buttons now work for both OpenPGP and S/MIME.\n  Enigmail will chose between S/MIME or OpenPGP depending on whether the keys\n  for all recipients are available for the respective standard\n- Support for the Autocrypt standard, which is now enabled by default\n- Support for Pretty Easy Privacy (p≡p)\n- Support for Web Key Directory (WKD)\n- The message subject can now be encrypted and replaced with a dummy subject,\n  following the Memory Hole standard forprotected Email Headers\n- keys on keyring are automatically refreshed from keyservers at irregular intervals\n- Subsequent updates of Enigmail no longer require a restart of Thunderbird \n- Keys are internally addressed using the fingerprint instead of the key ID","status":"published","published":"2018-05-17T11:35:48Z","modified":"2026-02-04T02:20:13.938333Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10736-1","title":"enigmail-2.2.4-1.4 on GA media","description":"These are all security issues fixed in the enigmail-2.2.4-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:09:52.409086Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"USN-7729-1","title":"kdepim vulnerabilities","description":"Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising,\nSebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg\nSchwenk discovered that the KMail application of KDE PIM could be made\nto leak the plaintext of S/MIME encrypted emails when retrieving\nexternal content in emails. Under certain configurations, if a user were\ntricked into opening a specially crafted email, an attacker could\npossibly use this issue to obtain the plaintext of an encrypted email.\nThis update mitigates the issue by preventing KMail from automatically\nloading external content. (CVE-2017-17689)\n\nJens Müller, Marcus Brinkmann, Damian Poddebniak, Sebastian Schinzel,\nand Jörg Schwenk discovered that the KMail application of KDE PIM could\nbe made to leak the plaintext of S/MIME or PGP encrypted emails. If a\nuser were tricked into replying to a specially crafted email, an\nattacker could possibly use this issue to obtain the plaintext of an\nencrypted email. (CVE-2019-10732)\n\nIt was discovered that the KMail application of KDE PIM could be made to\nattach files to an email without the user's knowledge. If a user\nwere tricked into sending an email created by a specially crafted\n\"mailto\" link, an attacker could possibly use this issue to obtain\nsensitive files. This update mitigates the issue by displaying a\nwarning to the user when files are attached in this way.\n(CVE-2020-11880)\n\nIt was discovered that the Account Wizard application of KDE PIM used\nHTTP rather than HTTPS when retrieving certain email server\nconfigurations. An attacker could possibly use this issue to cause email\nclients to use an attacker-controlled email server. This issue only\naffected Ubuntu 16.04 LTS. (CVE-2024-50624)","status":"published","published":"2025-09-02T16:41:27Z","modified":"2026-06-25T13:32:31.346823446Z","updated_at":"2026-11-02T16:58:21.91885Z"},{"id":"USN-7730-1","title":"kf5-messagelib vulnerabilities","description":"Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising,\nSebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg\nSchwenk discovered that PIM Messagelib could be made to leak the plaintext\nof S/MIME encrypted emails when retrieving external content in emails.\nUnder certain configurations, if a user were tricked into opening a\nspecially crafted email using an application linked against PIM Messagelib,\nan attacker could possibly use this issue to obtain the plaintext of an\nencrypted email. This update mitigates the issue by preventing automatic\nloading of external content. (CVE-2017-17689)\n\nJens Müller, Marcus Brinkmann, Damian Poddebniak, Sebastian Schinzel,\nand Jörg Schwenk discovered that PIM Messagelib could be made to leak the\nplaintext of S/MIME or PGP encrypted emails. If a user were tricked into\nreplying to a specially crafted email using an application linked\nagainst PIM Messagelib, an attacker could possibly use this issue to obtain\nthe plaintext of an encrypted email. (CVE-2019-10732)","status":"published","published":"2025-09-02T18:37:04Z","modified":"2026-04-22T11:01:45.955565Z","updated_at":"2026-11-02T16:58:21.91885Z"},{"id":"USN-7731-1","title":"kmail vulnerabilities","description":"Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising,\nSebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg\nSchwenk discovered that KMail could be made to leak the plaintext\nof S/MIME encrypted emails when retrieving external content in emails.\nUnder certain configurations, if a user were tricked into opening a\nspecially crafted email, an attacker could possibly use this issue to\nobtain the plaintext of an encrypted email. This update mitigates the\nissue by preventing KMail from automatically loading external content.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2017-17689)\n\nIt was discovered that KMail could be made to attach files to an email\nwithout the user's knowledge. If a user were tricked into sending an\nemail created by a specially crafted \"mailto\" link, an attacker could\npossibly use this issue to obtain sensitive files. (CVE-2020-11880)","status":"published","published":"2025-09-02T19:13:09Z","modified":"2026-02-10T04:49:48Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}