Detections
Analytics

openSUSE Security Update : enigmail (openSUSE-2017-1403)

high Nessus Plugin ID 105452

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

This update for enigmail to version 1.9.9 fixes the following issues (boo#1073858) :

 - Enigmail could be coerced to use a malicious PGP public key with a corresponding secret key controlled by an attacker

 - Enigmail could have replayed encrypted content in partially encrypted e-mails, allowing a plaintext leak

 - Enigmail could be tricked into displaying incorrect signature verification results

 - Specially crafted content may cause denial of service

Solution

Update the affected enigmail package.

See Also

https://bugzilla.opensuse.org/show_bug.cgi?id=1073858

Plugin Details

Severity: High

ID: 105452

File Name: openSUSE-2017-1403.nasl

Version: 3.3

Type: Local

Agent: unix

Published: 12/26/2017

Updated: 1/19/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Nessus

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:enigmail, cpe:/o:novell:opensuse:42.3, cpe:/o:novell:opensuse:42.2

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 12/22/2017