Re: [opensuse-kde] KMAIL allows man in the middle attack - do we get a patch or do we have to discontiue the use of kmail until 4.13.3?.
p, li { white-space: pre-wrap; }> Security Issues will always be resolved as soon as possible. At this moment
the patch has been added to the KDE:Current and KDE:Distro:Factory repositories and should be published soon.
We will make sure that also a maintenance update will be submitted for those users that are using the KDE that was delivered standard with openSUSE 131 (KDE 4.11.5).
Regards
Raymond
Thank you Raymond and to all of you for the effort. Sorry if I was a bit "odd" but you wouldn't belief it, I have now an A4 page of passwords because I had to change everything twice or more during the last events. Sure, better that the bug has been found than not. Maybe astonishingly late and, although I am aware that this is easy to say but hard to be done, for these kind of bugs, isn't there any automated bug research? MIM attacks are quite the first thing that is tried when people want to overcome TLS, https ecc. In fact this should be a further motivation for all that are still using mail without gpg encryption to finally change to safe practice, but even if, provided one has POP on one machine (rightly for not leaving stuff on the server), such an error leaves you always trousers down if you have documents on your mail providers site. (Another argument against whatever cloud service I guess. The cloud is inherently unsafe/insane IMO. YMMV)). Regards and again thank you for the info. P.S. and this is a good time to ask: is smart card support for gpg broken in Kleopatra or maybe simply not implemented? In the second case I will have to file an enhancement upstream I guess. Kleopatra does not see the crypto-stick (opensc based). --- Alle Postfächer an einem Ort. Jetzt wechseln und E-Mail-Adresse mitnehmen! http://email.freenet.de/basic/Informationen -- To unsubscribe, e-mail: opensuse-kde+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-kde+owner@opensuse.org
participants (1)
-
stakanov@freenet.de