tocsin

Debian/kf5-messagelib: medium 4.3

In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS

Action: Upgrade kf5-messagelib to 4:19.08.3-1 or later.

Affected

introducedfixedlast affected
04:19.08.3-1-

Fixed versions

4:19.08.3-1

Sources

published · modified · JSON