Register | Log in

kdepim

Choose email to subscribe with

general

source: kdepim (main)
version: 4:16.04.3-4~deb9u1
maintainer: Debian/Kubuntu Qt/KDE Maintainers (archive) [DMD]
uploaders: Michael Meskes [DMD] – Maximiliano Curia [DMD] – George Kiagiadakis [DMD] – Sune Vuorela [DMD] – Eshat Cakar [DMD] – Modestas Vainius [DMD] – Fathi Boudra [DMD]
arch: all any
std-ver: 3.9.8
VCS: Git (Browse)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 4:4.14.1-1+deb8u1
stable: 4:16.04.3-4~deb9u1

versioned links

4:4.14.1-1+deb8u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4:16.04.3-4~deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

accountwizard
akonadiconsole
akregator
blogilo
kaddressbook
kalarm
kdepim
kdepim-doc
kdepim-themeeditors
kmail
knotes
konsolekalendar
kontact
korganizer
ktnef
storageservicemanager

package is gone

This package is not in any development repository. This probably means that the package has been removed (or has been renamed). Thus the information here is of little interest ... the package is going to disappear unless someone takes it over and reintroduces it.

action needed

3 security issues in jessie high

There are 3 open security issues in jessie.

1 important issue:

CVE-2019-10732: In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, they unknowingly leak the plaintext of the encrypted message part(s) back to the attacker.

2 issues skipped by the security teams:

CVE-2017-17689: The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
CVE-2014-8878: KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network.

Please fix them.

Created: 2015-07-12 Last update: 2019-04-20 23:04

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2019-04-08 Last update: 2019-05-23 19:35

2 ignored security issues in stretch low

There are 2 open security issues in stretch.

2 issues skipped by the security teams:

CVE-2017-17689: The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
CVE-2019-10732: In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted part(s) can further be hidden using HTML/CSS or ASCII newline characters. This modified multipart email can be re-sent by the attacker to the intended receiver. If the receiver replies to this (benign looking) email, they unknowingly leak the plaintext of the encrypted message part(s) back to the attacker.

Please fix them.

Created: 2018-05-19 Last update: 2019-04-20 23:04

news

[2018-01-18] kdepim REMOVED from testing (Debian testing watch)
[2018-01-18] kdepim REMOVED from testing (Debian testing watch)
[2017-12-26] Removed 4:16.04.3-4 from unstable (Debian FTP Masters)
[2017-12-26] Removed 4:16.04.3-3 from unstable (Debian FTP Masters)
[2017-12-26] Removed 4:16.04.3-4 from unstable (Debian FTP Masters)
[2017-12-26] Removed 4:16.04.3-3 from unstable (Debian FTP Masters)
[2017-09-07] Accepted kdepim 4:4.14.1-1+deb8u1 (source all amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Sandro Knauß)
[2017-09-07] Accepted kdepim 4:16.04.3-4~deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Sandro Knauß)
[2017-06-20] kdepim 4:16.04.3-4 MIGRATED to testing (Debian testing watch)
[2017-06-18] Accepted kdepim 4:16.04.3-4 (source) into unstable (Sandro Knauß)
[2017-01-22] kdepim 4:16.04.3-3 MIGRATED to testing (Debian testing watch)
[2016-11-23] Accepted kdepim 4:16.04.3-3 (source) into unstable (Sandro Knauß)
[2016-10-26] kdepim 4:16.04.3-2 MIGRATED to testing (Debian testing watch)
[2016-10-20] Accepted kdepim 4:16.04.3-2 (source) into unstable (Maximiliano Curia)
[2016-08-07] kdepim 4:16.04.3-1 MIGRATED to testing (Debian testing watch)
[2016-08-06] kdepim 4:16.04.3-1 MIGRATED to testing (Debian testing watch)
[2016-07-17] Accepted kdepim 4:16.04.3-1 (source) into unstable (Maximiliano Curia)
[2016-07-07] Accepted kdepim 4:16.04.2-2 (source) into unstable (Maximiliano Curia)
[2016-07-02] Accepted kdepim 4:16.04.2-1 (source) into experimental (Maximiliano Curia)
[2016-06-07] Accepted kdepim 4:16.04.1-1 (source amd64 all) into experimental (Maximiliano Curia)
[2016-02-03] Accepted kdepim 4:15.12.1-1 (source amd64 all) into experimental, experimental (Maximiliano Curia)
[2015-12-05] Accepted kdepim 4:15.08.3-1 (source) into experimental (Maximiliano Curia)
[2015-10-29] Accepted kdepim 4:15.08.2-1 (source amd64 all) into experimental, experimental (Maximiliano Curia)
[2015-10-29] Accepted kdepim 4:15.08.1-1 (source amd64 all) into experimental, experimental (Maximiliano Curia)
[2015-10-29] Accepted kdepim 4:15.08.0-1 (source amd64 all) into experimental, experimental (Maximiliano Curia)
[2015-09-06] kdepim 4:4.14.10-2 MIGRATED to testing (Britney)
[2015-09-03] Accepted kdepim 4:4.14.10-2 (source amd64 all) into unstable (Scott Kitterman) (signed by: Donald Scott Kitterman)
[2015-09-01] Accepted kdepim 4:4.14.10-1 (source amd64 all) into unstable (Maximiliano Curia)
[2015-06-09] Accepted kdepim 4:4.14.5-1 (source all amd64) into experimental, experimental (Maximiliano Curia)
[2014-10-22] Accepted kdepim 4:4.14.2-2 (source all amd64) into unstable (Maximiliano Curia)

1
2

bugs [bug history graph]

all: 1
RC: 1
I&N: 0
M&W: 0
F&P: 0
patch: 1

links

homepage
buildd: logs, clang, cross
popcon
browse source code
edit tags
security tracker
screenshots

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing