Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 26: 2018-6020628437 Critical: Enigmail Efail Attack Fix

fedora
Calendar Grey May 27, 2018
Dist Fedora Esm H88
Announcing Enigmail 2.0.4 for Thunderbird, addressing efail vulnerabilities on Fedora 26. Adjust your configurations as necessary immediately.
Enigmail update to version 2.0.4, introduces fixes for the efail attack

Summary

Enigmail is an extension to the mail client Mozilla Thunderbird

which allows users to access the authentication and encryption

features provided by GnuPG

Enigmail update to version 2.0.4, introduces fixes for the efail attack. Please

check and modify your Thunderbird settings if required:

https://enigmail.net/index.php/en/home/news/66-2018-05-16-efail-vulnerability-affects-encrypted-mails

* Sat May 19 2018 Christian Dersch - 2.0.4-1

- new version fixing efail vulnerability

* Fri Feb 9 2018 Fedora Release Engineering - 1.9.9-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Fri Dec 22 2017 Christian Dersch - 1.9.9-1

- new version

* Wed Oct 4 2017 Christian Dersch - 1.9.8.3-1

- new version

* Thu Jul 27 2017 Fedora Release Engineering - 1.9.7-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[ 1 ] Bug #1577912 - CVE-2017-17688 CVE-2017-17689 thunderbird-enigmail: various flaws [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1577912

su -c 'dnf upgrade --advisory FEDORA-2018-6020628437' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FWIR75AEHUD3Y4WUJOSWSVJ32W4XR2UK/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 26
Version: 2.0.4
Release: 1.fc26
Summary: Authentication and encryption extension for Mozilla Thunderbird

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here