{"action":"Upgrade enigmail to 2:2.0.6.1-4 or later.","affected":[{"fixed":"2:2.0.6.1-4","introduced":"0"}],"component":"enigmail","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":["2:2.0.6.1-4"],"id":"tcs_01M5NC9TDYZB5T9TFK6M8XN3ZP","modified_at":"2026-08-04T05:47:54.185763955Z","published_at":"2018-05-16T19:29:00.223Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-17688","https://security-tracker.debian.org/tracker/CVE-2017-17688"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-17688","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-17688"}],"summary":"The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a proble"}