Debian/messagelib: low 3.4
KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API (aka phishing API), which might allow spoofing of threat data. NOTE: this Lookup API is
Action: Upgrade messagelib to 4:25.08.3-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4:25.08.3-3 | - |
Fixed versions
| 4:25.08.3-3 |
Sources
- osv: DEBIAN-CVE-2025-69412#Debian:14/messagelib
- https://security-tracker.debian.org/tracker/CVE-2025-69412
published · modified · JSON