CVE-2025-69412
KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API (aka phishing API), which might allow...
Original description
The description as published by the source.
KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API (aka phishing API), which might allow spoofing of threat data. NOTE: this Lookup API is not contacted in the messagelib default configuration.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-69412 kf5-messagelib
- Ubuntu UBUNTU-CVE-2025-69412 kf5-messagelib
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web developers.google.com
- web developers.google.com
- web github.com