{"affected":[{"ecosystem_specific":{"binaries":[{"enigmail":"2.0.9-3.13.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15","name":"enigmail","purl":"purl:rpm/suse/enigmail&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.0.9-3.13.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for enigmail to version 2.0.9 fixes the following issues:\n\nSecurity issue fixed:\n\n- When using Web Key Discovery, a HTTP authentication may be triggered.\n  This may trick users into possibly sending e-mail credentials (bsc#1118935).\n\nNon-security issues fixed:\n\n- pEp - PGP/MIME signed-only messages are ignored\n- Autocrypt overrules manually created Per-Recipient Rules\n- 'Re:' prefix on subject line disappears when editing encrypted, saved draft\n","id":"SUSE-SU-2018:4215-1","modified":"2018-12-21T10:23:52Z","published":"2018-12-21T10:23:52Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20184215-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1118935"}],"related":[],"summary":"Security update for enigmail"}