CVE catalog

CVE-2019-12269

UBUNTU-CVE-2019-12269

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.18% · Oct 25, 2026

Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display a "correctly signed" message indication, but display different unauthenticated text.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianenigmail112:2.0.11+ds1-1fixed
Suseenigmaillinux enterprise workstation extension 152.0.11-3.16.1fixed
Suseenigmaillinux enterprise workstation extension 15 sp12.0.11-3.16.1fixed
Suseenigmailpackage hub 122.0.11-31.1fixed
Opensuseenigmailleap 15.02.0.11-31.1fixed
Opensuseenigmailleap 15.12.0.11-31.1fixed
Ubuntuenigmail16.042:1.8.2-0ubuntu1vulnerable
Ubuntuenigmail16.042:1.8.2-4fakesync1vulnerable
Ubuntuenigmail16.042:1.9.1-1vulnerable
Ubuntuenigmail16.042:1.9.7-1~ubuntu0.16.04.1vulnerable
Ubuntuenigmail16.042:1.9.9-0ubuntu0.16.04.1vulnerable
Ubuntuenigmail16.042:2.0.3-0ubuntu2~16.04.1vulnerable
Ubuntuenigmail16.042:2.0.6-0ubuntu1~16.04.1vulnerable
Ubuntuenigmail16.042:2.0.7-0ubuntu1~16.04.1vulnerable
Ubuntuenigmail16.042:2.0.8-1~ubuntu0.16.04.2vulnerable
Ubuntuenigmail16.042:2.1.6+ds1-1~ubuntu0.16.04.1vulnerable
Ubuntuenigmail18.042:1.9.8.3-1vulnerable
Ubuntuenigmail18.042:1.9.9-1vulnerable
Ubuntuenigmail18.042:1.9.9-2vulnerable
Ubuntuenigmail18.042:2.0.3-0ubuntu2~18.04.1vulnerable
Ubuntuenigmail18.042:2.0.6-0ubuntu1~18.04.1vulnerable
Ubuntuenigmail18.042:2.0.7-0ubuntu1~18.04.1vulnerable
Ubuntuenigmail18.042:2.0.8-1~ubuntu0.18.04.2vulnerable
Ubuntuenigmail18.042:2.1.2-0ubuntu1~18.04.2vulnerable
Ubuntuenigmail18.042:2.1.6+ds1-1~ubuntu0.18.04.1vulnerable
Ubuntuenigmail18.042:2.2.4-0ubuntu0.18.04.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianenigmaildeb112:2.0.11+ds1-1Not reportedDEBIAN-CVE-2019-12269Not reported
Suseenigmailrpmlinux enterprise workstation extension 152.0.11-3.16.1Not reportedSUSE-SU-2019:1576-1Not reported
Suseenigmailrpmlinux enterprise workstation extension 15 sp12.0.11-3.16.1Not reportedSUSE-SU-2019:1576-1Not reported
Suseenigmailrpmpackage hub 122.0.11-31.1Not reportedOPENSUSE-SU-2019:1612-1Not reported
Opensuseenigmailrpmleap 15.02.0.11-31.1Not reportedOPENSUSE-SU-2019:1612-1Not reported
Opensuseenigmailrpmleap 15.12.0.11-31.1Not reportedOPENSUSE-SU-2019:1612-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]