Accepting request 704852 from mozilla:Factory

OBS-URL: https://build.opensuse.org/request/show/704852
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/enigmail?expand=0&rev=32

enigmail-2.0.10.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:98e22f86f5b1db0cddac676f3fd215e2b057f3ac3293994d5e5e893077752777
-size 2608628

enigmail-2.0.10.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEET5+J9VBawdGiYGMc2xGHud1faTsFAlyXdbIACgkQ2xGHud1f
-aTv9qRAAlBgFexpYucy5hVqH0INZV/RCoP9a1dDuJWPs4zG8lWMmWzLJFHt2vxRZ
-W+BYTfCq8laqEeFD4HYKIU8WU4iYmt6AM+F57NifPTN56o4VDIA2wi6N+POtxXGI
-3Fj/2TFrGLxtC3Iq0r+Cjgf4XRBuXiNSFEhupqGoXKNuOyD5oagi5mnMlLZ7ETCd
-ss8BmHdZHtSGRKDNheLLrNqXj09ZYepvAqL8f1fr/E+rfAzy9bX+NdgmM1h6G707
-V2N1YF1yDCMXwTKPFBIjA2FqnpzKnKVs/Q4MZcynHyqgJa/uI5nj2RsqvgSqG0Aj
-6TViYBguD3QfkaZA3GEipmrvXL+nIhxkELWHY3OXOC/acy2c/UiHvUtNqvoUjfA+
-vAkmB/jVsei3839BQGoFRkezFxI5kRk+QNATrfvqI8G1me4jORLhGPkW18Ivr4V6
-Tg9Kes5xSy3lgxYcUSeOAk9ShSyzPQfMFkacGXswRknzdoPx8mljfA8+Td34zJGR
-eNBJQzkmEjzvrKutVGmSwnduCC5XlN0UTs555DMFIFdG30qVWUo62BkiA1MLLfHu
-BE0orAndQEOUfB28WH5vx4ep76QyWcRG2HtgDD+v5mcevuqOPsGi/ohR87ADRExt
-zBPFLJn+YcZ2r8D4b8/dRRzdHzM14N18a9Yw/z8A6jF7+aoMN2g=
-=4XWO
------END PGP SIGNATURE-----

enigmail-2.0.11.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1203edd83711753f6eb97650cf7dce065c01517351fe7677ba290dc3a798df5b
+size 2613428

enigmail-2.0.11.tar.gz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCAAdFiEET5+J9VBawdGiYGMc2xGHud1faTsFAlzkHN8ACgkQ2xGHud1f
+aTtvSxAAljtgvn0eLeqznvjnqQ//vyvHmpHTMU5e+kvuAPHOtUgX0E718tMvXUWg
+KvHZHmmkh19qO0bwzQb72YtgL9WdXCwAShbGJMx5ogfNPBBsleSOy3BzCfzKFymZ
+lwUmotu0tiAL7zO1tUMb+3c1khOz1ysKRLYYLnoO7V509ufF79uabZDh8lxD3awD
+oRa7WIcDyOSwT6H0S79Ra5vpTDZwQtLI5zRrxFI8mx2ogriGNa2vHhwYUgVtoG29
+99Jpv8+ksXja/BoYLlFpSFBJ3DFNARNXthxqBKE4whxQn1gXYAclJisNhBQKgw4T
+481wAAkP6DP9mFLSkhwgob7+9M4Jsh4yEIYP3GjbqkHkohxg8McWmOVwlDWYxAag
+rfjQhzQrKYwjcf7Xmy9KiGmnC1XMxii1vu6OVpVe7TBNaT1/Ti06voSMyJVST1Bh
+pCKXWCj1Vx7KeF6KtD0uwxKXcBlmBP0qj/yywjR6Td8EymKiDlPntEgJbWVCATSg
+dZRlehS/6Vlx3SgbORwfTu/QrW32GO0l3ay7QfcnuolvGQEMUkzHpMmaYnvK9aUb
+Z6MsLJs3/Rmh/PZcnd+e4eR3iOLi7P9ApjVUWULIA83Yjm93Uy1z/wewBFQZoloN
+pGcD2OYBXc3ZpuuYMaBIrsyzC0TYNC1CkJcVphXktXspITSygfk=
+=pSXq
+-----END PGP SIGNATURE-----

enigmail.changes

@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Wed May 22 20:55:11 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- enigmail 2.0.11:
+  * CVE-2019-12269: Specially crafted inline PGP messages could
+    spoof a "correctly signed" message (boo#1135855)
+
 -------------------------------------------------------------------
 Fri Mar 29 12:15:23 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
 

enigmail.spec

@@ -18,7 +18,7 @@
 
 
 Name:           enigmail
-Version:        2.0.10
+Version:        2.0.11
 Release:        0
 Summary:        OpenPGP addon for Thunderbird and SeaMonkey
 License:        MPL-2.0