oss-sec mailing list archives

Re: PGP/MIME and S/MIME mail clients vulnerabilities


From: Brian May <bam () debian org>
Date: Wed, 16 May 2018 17:28:50 +1000

Brian May <bam () debian org> writes:

From https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060361.html:

"We should also be very careful to note that none of this discussion
thread applies to the MIME concatenation vulnerability, which is a
problem in Thunderbird and other mail clients, and which cannot be
solved by gnupg."

Also see links in
https://lists.gnupg.org/pipermail/gnupg-users/2018-May/060358.html to
upstream bug reports in GnuPG and Enigmail.

https://dev.gnupg.org/T3981
https://sourceforge.net/p/enigmail/bugs/838/
-- 
Brian May <bam () debian org>


Current thread: