[Secure-testing-team] Bug#752052: kde4libs: CVE-2014-3494: POP3 kioslave silently accepted invalid SSL certificates

Salvatore Bonaccorso carnil at debian.org
Thu Jun 19 06:10:42 UTC 2014


Source: kde4libs
Version: 4:4.13.1-1
Severity: grave
Tags: security upstream fixed-upstream
Justification: user security hole

Hi

See http://www.kde.org/info/security/advisory-20140618-1.txt for
further reference.

>From the advisory only 4.10.95 to 4.13.2 are affected.

Regards,
Salvatore



More information about the Secure-testing-team mailing list