Candidate: CVE-2017-9604
PublicDate: 2017-06-13 13:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9604
Description:
 KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE
 Applications before 17.04.2, do not ensure that a plugin's sign/encrypt
 action occurs during use of the Send Later feature, which allows remote
 attackers to obtain sensitive information by sniffing the network.
Ubuntu-Description:
Notes:
Bugs:
 https://launchpad.net/bugs/1698180
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N [7.5 HIGH]

Patches_kdepim:
 upstream: https://commits.kde.org/kmail/78c5552be2f00a4ac25bd77ca39386522fca70a8
upstream_kdepim: needed
precise/esm_kdepim: DNE
trusty_kdepim: released (4:4.13.3-0ubuntu0.2)
trusty/esm_kdepim: released (4:4.13.3-0ubuntu0.2)
vivid/stable-phone-overlay_kdepim: DNE
vivid/ubuntu-core_kdepim: DNE
xenial_kdepim: released (4:15.12.3-0ubuntu1.1)
yakkety_kdepim: ignored (reached end-of-life)
zesty_kdepim: ignored (reached end-of-life)
artful_kdepim: DNE
devel_kdepim: DNE

Patches_kf5-messagelib:
 upstream: https://commits.kde.org/messagelib/c54706e990bbd6498e7b1597ec7900bc809e8197
upstream_kf5-messagelib: needed
precise/esm_kf5-messagelib: DNE
trusty_kf5-messagelib: DNE
trusty/esm_kf5-messagelib: DNE
vivid/stable-phone-overlay_kf5-messagelib: DNE
vivid/ubuntu-core_kf5-messagelib: DNE
xenial_kf5-messagelib: DNE
yakkety_kf5-messagelib: ignored (reached end-of-life)
zesty_kf5-messagelib: ignored (reached end-of-life)
artful_kf5-messagelib: released (4:16.12.3-0ubuntu3)
devel_kf5-messagelib: not-affected