[Pkg-mozext-maintainers] Bug#791350: enigmail: autodecryption success/error results shown at top of wrong message

[Andrew Gallagher]

Package: enigmail
Version: 2:1.7.2-3
Severity: important

Dear Maintainer,

When auto-decrypting incoming mail for notification purposes, the coloured bar
is shown at the top of the currently viewed message, no matter what the
currently-viewed message is.

For example, I can have a mail open in one account, and when an encrypted mail
comes in to a second account, it gets auto-decrypted (using gpg-agent) and the
results of the decryption and signature verification are displayed at the top
of whatever message I'm currently viewing. This can potentially cause an
unsigned or unencrypted message to appear signed/crypted, or a badly-signed
message to appear properly signed.

See attached screenshot.

Andrew.



-- System Information:
Debian Release: 8.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.utf8, LC_CTYPE=en_IE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages enigmail depends on:
ii  gnupg    1.4.18-7
ii  icedove  31.7.0-1~deb8u1
ii  libc6    2.19-18

Versions of packages enigmail recommends:
ii  gnupg-agent  2.0.26-6

enigmail suggests no packages.

-- no debconf information


The information in this email and any attachments contain confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail, the attachments or any part thereof. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. Unless expressly stated, this email is not intended to create any contractual relationship. If this email is not sent in the course of the senders employment or fulfilment of his/her duties to Ward Solutions, Ward Solutions accepts no liability whatsoever for the content of this message or any attachment(s). Ward Solutions Ltd. Registered in Republic of Ireland at 2054 Castle Drive, CityWest Business Campus, Dublin 24 Reg. No. 316165. 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: enigmail-bad-decryption-notification-safe.png
Type: image/png
Size: 62498 bytes
Desc: enigmail-bad-decryption-notification-safe.png
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozext-maintainers/attachments/20150703/137b6d47/attachment-0001.png>