SuSE 11 Security Update : KDE4 PIM packages (SAT Patch Number 808)

This kdepim4 and kdepimlibs4 update fixes lots of bugs and one security issue : KMail 4.1.x executes links in mail without confirmation. no cve assigned yet It also fixes lots of non-security bugs : kdepim4 : - kdepim: make sure we initially create items for subresources - kdepim: fix...

SuSE 10 Security Update : KDE PIM packages (ZYPP Patch Number 6160)

This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41531; scriptversion"1.10";...

SuSE9 Security Update : KDE PIM 3 packages (YOU Patch Number 12395)

This update fixes a security issue with KMail where links in mails were executed without confirmation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41291;...

Fedora 10 : akonadi-1.2.1-1.fc10 / kde-l10n-4.3.1-2.fc10 / kdeaccessibility-4.3.1-1.fc10 / etc (2009-9427)

This updates KDE to 4.3.1, the latest upstream bugfix release. The main improvements are: KDE 4.3 is now also available in Croatian. A crash when editing toolbar setup has been fixed. Support for transferring files through SSH using KIO::Fish has been fixed. A number of bugs in KWin, KDE's window...

Fedora 11 : akonadi-1.2.1-1.fc11 / kde-l10n-4.3.1-2.fc11 / kdeaccessibility-4.3.1-1.fc11 / etc (2009-9397)

This updates KDE to 4.3.1, the latest upstream bugfix release. The main improvements are: KDE 4.3 is now also available in Croatian. A crash when editing toolbar setup has been fixed. Support for transferring files through SSH using KIO::Fish has been fixed. A number of bugs in KWin, KDE's window...

[SECURITY] Fedora 10 Update: kdepim-4.3.1-1.fc10

PIM Personal Information Manager applications, including: akregator: feed aggregator kmail: email client knode: newsreader knotes: sticky notes for the desktop kontact: integrated PIM management korganizer: journal, appointments, events, todos kpilot: HotSync=C2=AE software for Palm OS=C2=AE devi...

[SECURITY] Fedora 11 Update: kdepim-4.3.1-1.fc11

PIM Personal Information Manager applications, including: akregator: feed aggregator kmail: email client knode: newsreader knotes: sticky notes for the desktop kontact: integrated PIM management korganizer: journal, appointments, events, todos kpilot: HotSync=C2=AE software for Palm OS=C2=AE devi...

openSUSE Security Update : kdepim3 (kdepim3-770)

This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdepim3-770. The text description of this plugin is C SUSE...

openSUSE Security Update : kde4-akonadi (kde4-akonadi-806)

This kdepim4 and kdepimlibs4 update fixes lots of bugs and one security issue : KMail 4.1.x executes links in mail without confirmation. no cve assigned yet It also fixes lots of non-security bugs : kdepim4 : - kdepim: make sure we initially create items for subresources - kdepim: fix...

openSUSE Security Update : kdepim3 (kdepim3-770)

This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdepim3-770. The text description of this plugin is C SUSE...

MDVA-2008:038 : kdepim

When pasting cells from OpenOffice.org to KMail, on Mandriva Linux 2008.0, KMail would crash. This update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Securit...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : kdepim vulnerability (USN-725-1)

It was discovered that Kmail did not adequately prevent execution of arbitrary code when a user clicked on a URL to an executable within an HTML mail. If a user clicked on a malicious URL and chose to execute the file, a remote attacker could execute arbitrary code with user privileges. This upda...

openSUSE 10 Security Update : kdepim3 (kdepim3-6162)

This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdepim3-6162. The text description of this plugin is C SUSE...

Mandriva Update for kdepim MDVA-2008:038 (kdepim)

Check for the Version of kdepim OpenVAS Vulnerability Test Mandriva Update for kdepim MDVA-2008:038 kdepim Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for kdepim MDVA-2008:038 (kdepim)

Check for the Version of kdepim OpenVAS Vulnerability Test Mandriva Update for kdepim MDVA-2008:038 kdepim Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for kdepim FEDORA-2007-2985

Check for the Version of kdepim OpenVAS Vulnerability Test Fedora Update for kdepim FEDORA-2007-2985 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

USN-725-1: KMail vulnerability

It was discovered that Kmail did not adequately prevent execution of arbitrary code when a user clicked on a URL to an executable within an HTML mail. If a user clicked on a malicious URL and chose to execute the file, a remote attacker could execute arbitrary code with user privileges. This upda...

CVE-2007-1265

KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without...

Kmail CGI authentication bypass vulnerability

Overview Kmail CGI is a web mail system for cellular phones. Kmail CGI contains a user authentication bypass vulnerability. Impact A remote attacker may bypass Kmail CGI's user authentication, and view or delete the emails of Kmail users. Solution None...

CVE-2006-7139

Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service crash via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations...