Enigmail vulnerable to signature spoofing (again): CVE-2019-12269
Originally created by @segfault on #16738 (Redmine)
Enigmail 2.0.11 was released today which fixes another signature
spoofing vulnerability:
https://www.enigmail.net/index.php/en/download/changelog#enig2.0.11
https://sourceforge.net/p/enigmail/bugs/983/
Feature Branch: bugfix/16738-enigmail-signature-spoofing
Related issues
- Related to #16978 (closed)
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information