group.of.nepali.translators team mailing list archive

[Simon Quigley <tsimonq2@xxxxxxxxxx>]

kdepim no longer exists in Artful, and fixes are in artful-proposed for
kmail and kf5-messagelib (it's part of the new upstream release).

** Changed in: kdepim (Ubuntu Artful)
       Status: In Progress => Fix Committed

** Changed in: kdepim (Ubuntu Artful)
       Status: Fix Committed => Invalid

** Changed in: kdepim (Ubuntu Artful)
     Assignee: Simon Quigley (tsimonq2) => (unassigned)

** Changed in: kf5-messagelib (Ubuntu)
       Status: In Progress => Fix Committed

** Changed in: kmail (Ubuntu)
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1698180

Title:
  [CVE] Send Later with Delay bypasses OpenPGP

Status in kdepim package in Ubuntu:
  Invalid
Status in kf5-messagelib package in Ubuntu:
  Fix Committed
Status in kmail package in Ubuntu:
  Fix Committed
Status in kdepim source package in Trusty:
  New
Status in kdepim source package in Xenial:
  New
Status in kdepim source package in Zesty:
  New
Status in kdepim source package in Artful:
  Invalid

Bug description:
  KDE Project Security Advisory
  =============================

  Title:          KMail: Send Later with Delay bypasses OpenPGP
  Risk Rating:    Medium
  CVE:            CVE-2017-9604
  Versions:       kmail, messagelib < 5.5.2
  Date:           15 June 2017

  
  Overview
  ========
  KMail’s Send Later with Delay function bypasses OpenPGP signing and
  encryption, causing the message to be sent unsigned and in plain-text.

  Solution
  ========
  Update to kmail, messagelib >= 5.5.2 (Released as part of KDE Applications 17.04.2)

  Or apply the following patches:
       kmail: https://commits.kde.org/kmail/78c5552be2f00a4ac25bd77ca39386522fca70a8
  messagelib: https://commits.kde.org/messagelib/c54706e990bbd6498e7b1597ec7900bc809e8197

  Credits
  =======
  Thanks to Daniel Aleksandersen for the report and to Laurent Montel for the fix.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/1698180/+subscriptions