Security Update for enigmail
Summary
DLA-523-1: enigmail - security update. Affects enigmail versions < 2:1.8.2-4~deb7u2. Fixed in 2:1.8.2-4~deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
enigmail is an extension for Icedove, the Debian version of Mozilla Thunderbird, that provides OpenPGP message encryption and authentication. It allows users to send and receive encrypted email messages, ensuring the privacy and integrity of their communications. However, a vulnerability has been discovered in enigmail that affects its compatibility with Icedove 45.
Vulnerability Detail
The vulnerability in enigmail prevents it from being installed together with Icedove 45. This issue arises due to incorrect dependencies of the enigmail extension. As a result, users are unable to utilize the encryption and authentication features provided by enigmail when using Icedove 45. This vulnerability does not pose a direct security risk, but it hinders the functionality of the enigmail extension.
How To Fix
Minimum fixed version
2:1.8.2-4~deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade enigmailTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the enigmail extension for Icedove has a vulnerability that affects its compatibility with Icedove 45. Users are advised to upgrade their enigmail packages to version 1.8.2-4~deb7u2 to resolve this issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for enigmail →
FAQ
Enigmail is an extension for Icedove that provides OpenPGP message encryption and authentication. It allows users to send and receive encrypted email messages, ensuring the privacy and integrity of their communications.
Icedove is the Debian version of Mozilla Thunderbird, a popular email client. It offers a range of features for managing and organizing email accounts.
This vulnerability prevents the installation of enigmail together with Icedove 45, limiting the availability of its encryption and authentication features.
No, this vulnerability does not pose a direct security risk. However, it hinders the functionality of the enigmail extension.
To fix this vulnerability, you should upgrade your enigmail packages to version 1.8.2-4~deb7u2. This update corrects the dependencies of the enigmail extension, allowing it to be installed and used alongside Icedove 45.
Related vulnerabilities
Recent vulnerabilities recorded for enigmail.
