[USN-3100-1] KDE-PIM Libraries vulnerability
marc.deslauriers at canonical.com
Wed Oct 12 12:11:08 UTC 2016
Ubuntu Security Notice USN-3100-1
October 12, 2016
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
KMail could be made to run HTML if it opened a specially crafted email.
- kdepimlibs: the KDE PIM libraries
Roland Tapken discovered that the KDE-PIM Libraries incorrectly filtered
URLs. A remote attacker could use this issue to perform an HTML injection
attack in the KMail plain text viewer.
The problem can be corrected by updating your system to the following
Ubuntu 12.04 LTS:
After a standard system update you need to restart KMail to make all the
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the ubuntu-security-announce