Enigmail - Multiple Vulnerabilities
Summary
DLA-1219-1: enigmail - security update. Affects enigmail versions < 2:1.9.9-1~deb7u1. Fixed in 2:1.9.9-1~deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Enigmail is an OpenPGP extension for Thunderbird, providing encryption and digital signature capabilities. It allows users to secure their email communications and ensure the authenticity of messages. However, multiple vulnerabilities have been discovered in Enigmail, which could lead to various security issues.
Vulnerability Detail
The identified vulnerabilities in Enigmail could result in a loss of confidentiality, faked signatures, plain text leaks, and denial of service. These vulnerabilities pose a risk to the integrity and privacy of encrypted email communications. More details can be found in the Enigmail Pentest Report by Cure53.
How To Fix
Minimum fixed version
2:1.9.9-1~deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade enigmailTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Multiple vulnerabilities have been identified in Enigmail, which could compromise the confidentiality and integrity of encrypted email communications. It is crucial to upgrade to the latest version of Enigmail to mitigate these security risks. For further assistance or support in addressing these vulnerabilities, please contact DevNack.com.
See every vulnerability recorded for enigmail →
FAQ
Enigmail is an OpenPGP extension for Thunderbird that provides encryption and digital signature capabilities for email communications.
The vulnerabilities in Enigmail could lead to a loss of confidentiality, faked signatures, plain text leaks, and denial of service attacks.
To fix these vulnerabilities, you should upgrade your Enigmail package to version 2:1.9.9-1~deb7u1 or later.
No specific workarounds have been mentioned for these vulnerabilities. It is recommended to apply the available security update.
You can refer to the Enigmail Pentest Report by Cure53 for additional details on these vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for enigmail.
