Enigmail Version History
76 versions
Be careful with old versions!
These versions are displayed for reference and testing purposes. You should always use the latest version of an add-on.
Version 2.0.9
This release addresses several regression and defects.
- Source code released under Mozilla Public License, version 2.0
Version 2.0.8
This release addresses a security issue that allows an attacker to prepare a plain, unauthenticated HTML message in a way that it looks like it's signed and/or encrypted. In addition, a few regression bugs were fixed.
See the full list of bugs fixed.
See the full list of bugs fixed.
- Source code released under Mozilla Public License, version 2.0
Version 2.0.7
This release addresses several critical security bugs:
- Spoofing of Email signatures I (CVE-2018-12020)
- Spoofing of Email signatures II (CVE-2018-12019)
- Workaround for Mozilla crash bug 1423895
- Source code released under Mozilla Public License, version 2.0
Version 2.0.6.1
This release addresses compatibility issues with Thunderbird 60b7 and newer.
- Source code released under Mozilla Public License, version 2.0
Version 2.0.6
This release addresses a vulnerability that would allow an attacker to engineer a message containing an encrypted message part in a way that users could be tricked into responding and thus unintentionally revealing protected data.
Furthermore, this version allows to re-encrypt messages without MDC protection.
Furthermore, this version allows to re-encrypt messages without MDC protection.
- Source code released under Mozilla Public License, version 2.0
Version 2.0.5
This release contains the following improvements:
- correct error message in case a message is not integrity protected (missing MDC)
- prevent any form of the Efail vulnerability and similar attacks by disabling decryption for non-standard message structures
- Source code released under Mozilla Public License, version 2.0
Version 2.0.4
This version implements two fixes against Efail vulnerabilities:
1. a workaround to prevent sending decrypted data to remote URLs
2. a workaround that stops decrypting PGP messages using old algorithms like CAST5 that are not MDC-protected
1. a workaround to prevent sending decrypted data to remote URLs
2. a workaround that stops decrypting PGP messages using old algorithms like CAST5 that are not MDC-protected
- Source code released under Mozilla Public License, version 2.0
Version 2.0.3
This release fixes a crash when opening an encrypted forwarded message, as well as a number of other issues.
Please check the changelog for the complete list of fixed defects.
Please check the changelog for the complete list of fixed defects.
- Source code released under Mozilla Public License, version 2.0
Version 2.0.2
This release addresses two regressions:
* Enigmail chose the wrong encryption default for OpenPGP messages
* the Enigmail preferences dialog was always pre-loaded with default values instead of (correctly) configured data.
* Enigmail chose the wrong encryption default for OpenPGP messages
* the Enigmail preferences dialog was always pre-loaded with default values instead of (correctly) configured data.
- Source code released under Mozilla Public License, version 2.0
Version 2.0.1
This release addresses several defects that were found after the v2.0 release. In particular, it fixes:
* a bug with S/MIME not working for an account if Enigmail is not enabled for that account.
* a bug with encrypted messages not being encrypted if the sender address contains brackets
* a bug with S/MIME not working for an account if Enigmail is not enabled for that account.
* a bug with encrypted messages not being encrypted if the sender address contains brackets
- Source code released under Mozilla Public License, version 2.0
Version 2.0
This feature adds support for pEp (Pretty Easy Privacy) and Autocrypt.
The "Encrypt" and "Sign" buttons now work for both OpenPGP and S/MIME
The "Encrypt" and "Sign" buttons now work for both OpenPGP and S/MIME
- Source code released under Mozilla Public License, version 2.0
Version 1.9.9
This release addresses several security vulnerabilities detected by Cure53.
Thanks to Posteo and Mozilla Foundation for financing the security audit!
Thanks to Posteo and Mozilla Foundation for financing the security audit!
- Source code released under Mozilla Public License, version 2.0
Version 1.9.8.3
This version addresses a crash in Thunderbird caused by too much memory consumption during message sending.
- Source code released under Mozilla Public License, version 2.0
Version 1.9.8.2
This release fixes a regression with date localization leading to break encryption/decryption/key listing.
- Source code released under Mozilla Public License, version 2.0
Version 1.9.8.1
This release addresses several issues related to compatibility with Thunderbird 52. In addition, some translations were updated.
- Source code released under Mozilla Public License, version 2.0
Version 1.9.7
This version fixes a compatibility issue with Thunderbird 52 that prevents Enigmail from up-/downloading to/from keyservers.
- Source code released under Mozilla Public License, version 2.0
Version 1.9.6.1
This version fixes a bug that makes Enigmail unusable on some Linux systems.
- Source code released under Mozilla Public License, version 2.0
Version 1.9.6
This is a bugfix release.
- Source code released under Mozilla Public License, version 2.0
Version 1.9.5
This release addresses several defects.
- Source code released under Mozilla Public License, version 2.0
Version 1.9.4
Bug fixes; improved compatibility with 'Send Later' add-on.
- Source code released under Mozilla Public License Version 1.1
Version 1.9.3
This release addresses a number of bugs.
- Source code released under Mozilla Public License Version 1.1
Version 1.9.2
This release addresses various defects.
- Source code released under Mozilla Public License Version 1.1
Version 1.9.1
This release fixes some regressions found in the last version.
- Source code released under Mozilla Public License Version 1.1
Version 1.9
This is a new major update of Enigmail. Major changes:
- Importing and exporting of keys and Enigmail settings
- Messages are sent using PGP/MIME by default
- Several new dialogs that improve usability
- This version requires GnuPG 2.x.; GnuPG 1.4 is not supported anymore.
- Source code released under Mozilla Public License Version 1.1
Version 1.8.1
This version addresses some critical bugs related to saving drafts discovered in the last version.
- Source code released under Mozilla Public License Version 1.1
Version 1.8
Major Changes
Important Note
This is the last major version of Enigmail to support GnuPG v1.4.x. Enigmail v1.9 and later will require GnuPG 2.0.7 or later.
- Improved user interface for message composition
- Simplified setup wizard
- Possibility to permanently decrypt messages via filter rules
- Improved support for PGP/MIME messages from GPGTools sent from MS Exchange Server
- Many bugs fixed
Important Note
This is the last major version of Enigmail to support GnuPG v1.4.x. Enigmail v1.9 and later will require GnuPG 2.0.7 or later.
- Source code released under Mozilla Public License Version 1.1
Version 1.7.2
This is a bugfix release
- Source code released under Mozilla Public License Version 1.1
Version 1.7
This version brings lots of changes:
- New "convenience" mode for sending mails
- Automatic encryption if all keys are known
- More intuitive view of encryption/signing states in icons and menus
- Better selection options for importing keys from address book
- Some support for PGP/MIME mails deformed by Exchange servers
- Menu items and labels changed from "OpenPGP" to "Enigmail"
- Better algorithm for selecting best key for an email address
- More finer-grained options for displaying dialog before message sending
- Better fault tolerance at many places
- Source code released under Mozilla Public License Version 1.1
Version 1.6
Notable Changes
- The setup wizard can now download and install GnuPG as part of the
setup process on Windows and Mac OS X. - The passphrase timeout configuration in Enigmail is now read and
written from/to gpg-agent. - New dialog to change the expiry date of keys.
- New function to search for the OpenPGP keys of all Address Book
entries on a keyserver.
- Source code released under Mozilla Public License Version 1.1
To create your own collections, you must have a Mozilla Add-ons account.