{"id":"SUSE-SU-2018:2641-1","aliases":[],"status":"published","title":"Security update for enigmail","description":"This update for enigmail to 2.0.8 fixes the following issues:\n\nThe enigmail 2.0.8 release addresses a security issue and solves a few regression bugs.\n\n* A security issue has been fixed that allows an attacker to prepare\n  a plain, unauthenticated HTML message in a way that it looks like\n  it's signed and/or encrypted (boo#1104036)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-09-06T17:41:23Z","modified":"2018-09-06T17:41:23Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15","package":"enigmail","fixed_in":["2.0.8-3.10.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15","package":"enigmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.8-3.10.1"}]}]}],"references":[{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182641-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1104036","tags":["report"]}],"sources":{"osv":[{"id":"SUSE-SU-2018:2641-1","title":"Security update for enigmail","description":"This update for enigmail to 2.0.8 fixes the following issues:\n\nThe enigmail 2.0.8 release addresses a security issue and solves a few regression bugs.\n\n* A security issue has been fixed that allows an attacker to prepare\n  a plain, unauthenticated HTML message in a way that it looks like\n  it's signed and/or encrypted (boo#1104036)\n","status":"published","published":"2018-09-06T17:41:23Z","modified":"2018-09-06T17:41:23Z","updated_at":"2026-11-02T15:53:45.378228Z"}]}}