Overview
Request 609845 accepted
enigmail 2.0.4:
* CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
plaintext out of encrypted emails. enigmail now fails on GnuPG
integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
* CVE-2017-17689: CBC gadget attacks allows to exfiltrate
plaintext out of encrypted emails (EFAIL), bsc#1093152)
- Created by AndreasStieger
- In state accepted
- Open review for backports-reviewers
Request History
AndreasStieger created request
enigmail 2.0.4:
* CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
plaintext out of encrypted emails. enigmail now fails on GnuPG
integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
* CVE-2017-17689: CBC gadget attacks allows to exfiltrate
plaintext out of encrypted emails (EFAIL), bsc#1093152)
licensedigger accepted review
ok
maintbot added factory-source as a reviewer
maintbot accepted review
ok
maintbot added mozilla:Factory as a reviewer
Submission for None by someone who is not maintainer in the devel project (mozilla:Factory). Please review
wrosenauer accepted review
factory-source added backports-reviewers as a reviewer
Automated review failed. Needs fallback reviewer.
factory-source accepted review
the package needs to be accepted in openSUSE:Factory or openSUSE:Leap:42.2:Update or openSUSE:Leap:42.2 or openSUSE:Leap:42.1:Update or openSUSE:Leap:42.1 first
AndreasStieger accepted request
start update