KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt acti...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 kf5-messagelib

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:16.04.3-3"}]}]

参照URL

advisory security-tracker.debian.org