| Package | Affected versions | Patched versions |
|---|---|---|
| k-mail | = 0.0.29.2= 1.0.23= 1.0.24= 1.0.25= 1.0.26= 1.0.27= 1.0.28= 1.0.29= 1.0.29.1= 1.0.29.2= 1.1= 1.101= 1.102= 1.2= 1.3.1= 1.7.1= 1.86.2.36= 1.87= 1.88= 1.89= 1.9.1= 1.90= 1.92= 1.93= 1.94= 1.95 |
KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free