KMail is vulnerable to EFAIL #22

Closed
opened 5 years ago by luke-jr · 6 comments
Collaborator
https://www.efail.de/
Collaborator

Hi, I am hanging on the gnupg mailing list. I recall there was some discussion around this.
probably tdes kmail is affected, but I do not see evidence and the discussion on gnupg was also worth reading.
could you provide more specific details reagrding tdes kmail?

Hi, I am hanging on the gnupg mailing list. I recall there was some discussion around this. probably tdes kmail is affected, but I do not see evidence and the discussion on gnupg was also worth reading. could you provide more specific details reagrding tdes kmail?
Owner

Somewhere in my notes I have links to the corresponding patches for KDE4 KMail. So thank you @luke-jr for reminding this.

Somewhere in my notes I have links to the corresponding patches for KDE4 KMail. So thank you @luke-jr for reminding this.
Alexis commented 2 years ago
Collaborator

Just a gentle reminder of this important pending issue to be fixed as I understand it to be "open" still.
Thank you very much for your volunteer work.

Just a gentle reminder of this important pending issue to be fixed as I understand it to be "open" still. Thank you very much for your volunteer work.
SlavekB added this to the R14.0.13 release milestone 2 years ago
Owner

We made a backport patches from KDE Kmail that concerned EFAIL and adapted them for our TDE KMail. This was the case to require confirmation for loading external content for encrypted messages. Do you have any other knowledge?

We made a backport patches from KDE Kmail that concerned EFAIL and adapted them for our TDE KMail. This was the case to require confirmation for loading external content for encrypted messages. Do you have any other knowledge?
Owner

If someone has any new knowledge, do not hesitate to reopen this task. For now I close it as finished.

If someone has any new knowledge, do not hesitate to reopen this task. For now I close it as finished.
SlavekB closed this issue 2 years ago
Alexis commented 2 years ago
Collaborator

I did not investigate beyond https://efail.de/ where the topic is basically explained.

I think that incorporating the same patches with which KDE closed the bug is enough.

Thank you very much!

I did not investigate beyond https://efail.de/ where the topic is basically explained. I think that incorporating the same patches with which KDE closed the bug is enough. Thank you very much!
Sign in to join this conversation.
No Milestone
No Assignees
4 Participants
Notifications
Due Date

No due date set.

Dependencies

No dependencies set.

Reference: TDE/tdepim#22
Loading…
There is no content yet.