Recommended update for enigmail
This update for enigmail to version 2.0.9 fixes the following issues:
Security issues fixed:
* An HTTP authentication dialog maybe displayed during web key
discovery, allowing remote attackers to possibly trick the user
into entering e-mail credentials (boo#1118935)
Non security issues fixed:
* pEp - PGP/MIME signed-only messages are ignored
* Autocrypt overrules manually created Per-Recipient Rules
* "Re:" prefix on subject line disappears when editing encrypted, saved draft
-
Submitted by
Andreas Stieger (AndreasStieger)
Fixed bugs
bnc#1118935
VUL-0: enigmail: HTTP authentication dialog may be triggered (cross-site authentication)