SUSE CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

CVE-2021-31855

KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...

CVE-2021-31855

CVE-2021-31855 affects KDE Messagelib up to 5.17.0. In some scenarios, deleting an attachment from a decrypted message stored on a remote server (e.g., IMAP) causes KMail to upload the decrypted content, enabling a user with access to server-stored messages to read plaintext. The root cause is de...

Updated messagelib packages fix security vulnerability

Deleting an attachment of a decrypted encrypted message stored on a remote server e.g. an IMAP server causes KMail to upload the decrypted content of the message to the remote server. This is not easily noticeable by the user because KMail does not display the decrypted content. With a specially...