Alpine/messagelib: low 3.4
KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API (aka phishing API), which might allow spoofing of threat data. NOTE: this Lookup API is
Action: Upgrade messagelib to 25.08.3-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 25.08.3-r1 | - |
Fixed versions
| 25.08.3-r1 |
Sources
published · modified · JSON