Package thunderbird-enigmail: Information

    Binary package: thunderbird-enigmail
    Version: 60.8.0-alt0.M80C.1
    Architecture: x86_64
    Build time:  Jul 19, 2019, 05:27 PM in the task #234809
    Source package: thunderbird
    Category: Networking/Mail
    Report package bug
    License: MPL/GPL
    Summary: Enigmail - GPG support for Mozilla Thunderbird
    Description: 
    Enigmail is an extension to the mail client of Mozilla / Netscape 7.x
    which allows users to access the authentication and encryption features
    provided by the popular GnuPG software.

    Maintainer: Andrey Cherepanov


    Last changed


    July 13, 2019 Andrey Cherepanov 60.8.0-alt0.M80C.1
    - Backport new version to c8 branch.
    July 10, 2019 Andrey Cherepanov 60.8.0-alt1
    - New version (60.8.0).
    - Fixed:
      + CVE-2019-9811 Sandbox escape via installation of malicious language pack
      + CVE-2019-11711 Script injection within domain through inner window reuse
      + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects
      + CVE-2019-11713 Use-after-free with HTTP/2 cached stream
      + CVE-2019-11729 Empty or malformed p256-ECDH public keys may trigger a segmentation fault
      + CVE-2019-11715 HTML parsing error can contribute to content XSS
      + CVE-2019-11717 Caret character improperly escaped in origins
      + CVE-2019-11719 Out-of-bounds read when importing curve25519 private key
      + CVE-2019-11730 Same-origin policy treats all files in a directory as having the same-origin
      + CVE-2019-11709 Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and Thunderbird 60.8
    - Enigmail 2.0.12.
    July 3, 2019 Gleb Fotengauer-Malinovskiy 60.7.2-alt2
    - Added ppc64le support.