openSUSE-SU-2017:3427-1
Security update for enigmail
No scoreFix available
This update for enigmail to version 1.9.9 fixes the following issues (boo#1073858):
- Enigmail could be coerced to use a malicious PGP public key with a corresponding secret key controlled by an attacker
- Enigmail could have replayed encrypted content in partially encrypted e-mails, allowing a plaintext leak
- Enigmail could be tricked into displaying incorrect signature verification results
- Specially crafted content may cause denial of service
What each source reports
OSVNo score
Security update for enigmail
This update for enigmail to version 1.9.9 fixes the following issues (boo#1073858):
- Enigmail could be coerced to use a malicious PGP public key with a corresponding secret key controlled by an attacker
- Enigmail could have replayed encrypted content in partially encrypted e-mails, allowing a plaintext leak
- Enigmail could be tricked into displaying incorrect signature verification results
- Specially crafted content may cause denial of service
- Record
openSUSE-SU-2017:3427-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
enigmailSUSE:Package Hub 12 | before 1.9.9-6.1 | 1.9.9-6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
openSUSE-SU-2017:3427-1 is a vulnerability with no CVSS score yet in enigmail, published December 22, 2017. No source lists public exploit code. Fixed in enigmail 1.9.9-6.1.