Stay Secure with the Latest Linux Advisories

security advisoryencryptionFedora

Fedora 28: 2018-22c1b7e738 Critical: Thunderbird Enigmail Message Issue

Update to 2.0.8: * A security issue has been fixed that allows an attacker to prepare a plain, unauthenticated HTML message in a way that it looks like it's signed and/or encrypted. * Changelog: https://enigmail.net/index.php/en/download/changelog. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-22c1b7e738 2018-08-09 17:40:27.265138 --------------------------------------------------------------------------------Name : thunderbird-enigmail Product : Fedora 28 Version : 2.0.8 Release : 1.fc28 URL : https://enigmail.net/index.php/en/ Summary : Authentication and encryption extension for Mozilla Thunderbird Description : Enigmail is an extension to the mail client Mozilla Thunderbird which allows users to access the authentication and encryption features provided by GnuPG --------------------------------------------------------------------------------Update Information: Update to 2.0.8: * A security issue has been fixed that allows an attacker to prepare a plain, unauthenticated HTML message in a way that it looks like it's signed and/or encrypted. * Changelog: https://enigmail.net/index.php/en/download/changelog --------------------------------------------------------------------------------ChangeLog: * Sun Aug 5 2018 Christian Dersch - 2.0.8-1 - new version * Sat Jul 14 2018 Fedora Release Engineering - 2.0.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Jun 14 2018 Christian Dersch - 2.0.7-1 - new version * Mon May 28 2018 Christian Dersch - 2.0.6-1 - new version * Sat May 19 2018 Christian Dersch - 2.0.4-1 - new version fixing efail vulnerability --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-22c1b7e738' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/A6LYQDDGBT5IRSYPMS26TWOIKLKZUMNC/ . Fedora 28 releases a security notice concerning the thunderbird-enigmail upgrade to version 2.0.8 addressing a significant message correction issue.. ThunderBird Enigmail, Fedora Security, Threat Mitigation, Authentication Extensions. . Severity: Critical. LinuxSecurity.com Team

Aug 09, 2018 •Critical Fedora