{"id":"openSUSE-SU-2017:3427-1","aliases":[],"status":"published","title":"Security update for enigmail","description":"This update for enigmail to version 1.9.9 fixes the following issues (boo#1073858):\n\n* Enigmail could be coerced to use a malicious PGP public key with a corresponding secret key controlled by an attacker\n* Enigmail could have replayed encrypted content in partially encrypted e-mails, allowing a plaintext leak\n* Enigmail could be tricked into displaying incorrect signature  verification results\n* Specially crafted content may cause denial of service","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-12-22T15:45:46Z","modified":"2017-12-22T15:45:46Z","fixes":[{"ecosystem":"SUSE:Package Hub 12","package":"enigmail","fixed_in":["1.9.9-6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"enigmail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-6.1"}]}]}],"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IELFUJMXO4YPO5RI5KA64NG5BIRXU4QY/#IELFUJMXO4YPO5RI5KA64NG5BIRXU4QY","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1073858","tags":["report"]}],"sources":{"osv":[{"id":"openSUSE-SU-2017:3427-1","title":"Security update for enigmail","description":"This update for enigmail to version 1.9.9 fixes the following issues (boo#1073858):\n\n* Enigmail could be coerced to use a malicious PGP public key with a corresponding secret key controlled by an attacker\n* Enigmail could have replayed encrypted content in partially encrypted e-mails, allowing a plaintext leak\n* Enigmail could be tricked into displaying incorrect signature  verification results\n* Specially crafted content may cause denial of service\n","status":"published","published":"2017-12-22T15:45:46Z","modified":"2017-12-22T15:45:46Z","updated_at":"2026-11-02T16:58:30.39372Z"}]}}