[Bug 1698180] Re: Send Later with Delay bypasses OpenPGP
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-9604 ** Also affects: kmail (Ubuntu) Importance: Undecided Status: New ** Summary changed: - Send Later with Delay bypasses OpenPGP + [CVE] Send Later with Delay bypasses OpenPGP ** Changed in: kmail (Ubuntu) Assignee: (unassigned) => Simon Quigley (tsimonq2) ** Changed in: kmail (Ubuntu) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698180 Title: [CVE] Send Later with Delay bypasses OpenPGP To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/1698180/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1698180] Re: Send Later with Delay bypasses OpenPGP
** Changed in: kf5-messagelib (Ubuntu) Status: New => In Progress ** Changed in: kf5-messagelib (Ubuntu) Assignee: (unassigned) => Simon Quigley (tsimonq2) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698180 Title: Send Later with Delay bypasses OpenPGP To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/1698180/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1698180] Re: Send Later with Delay bypasses OpenPGP
** Also affects: kf5-messagelib (Ubuntu) Importance: Undecided Status: New ** Changed in: kf5-messagelib (Ubuntu) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698180 Title: Send Later with Delay bypasses OpenPGP To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/1698180/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1698180] Re: Send Later with Delay bypasses OpenPGP
** No longer affects: kmail (Ubuntu) ** No longer affects: kmail (Ubuntu Trusty) ** No longer affects: kmail (Ubuntu Xenial) ** No longer affects: kmail (Ubuntu Zesty) ** No longer affects: kmail (Ubuntu Artful) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698180 Title: Send Later with Delay bypasses OpenPGP To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/1698180/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1698180] Re: Send Later with Delay bypasses OpenPGP
** Also affects: kdepim (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: kmail (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: kdepim (Ubuntu Artful) Importance: High Assignee: Simon Quigley (tsimonq2) Status: In Progress ** Also affects: kmail (Ubuntu Artful) Importance: High Assignee: Simon Quigley (tsimonq2) Status: In Progress ** Also affects: kdepim (Ubuntu Zesty) Importance: Undecided Status: New ** Also affects: kmail (Ubuntu Zesty) Importance: Undecided Status: New ** Also affects: kdepim (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: kmail (Ubuntu Xenial) Importance: Undecided Status: New ** Changed in: kdepim (Ubuntu Trusty) Importance: Undecided => High ** Changed in: kdepim (Ubuntu Xenial) Importance: Undecided => High ** Changed in: kdepim (Ubuntu Zesty) Importance: Undecided => High ** Changed in: kmail (Ubuntu Trusty) Importance: Undecided => High ** Changed in: kmail (Ubuntu Xenial) Importance: Undecided => High ** Changed in: kmail (Ubuntu Zesty) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698180 Title: Send Later with Delay bypasses OpenPGP To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/1698180/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1698180] Re: Send Later with Delay bypasses OpenPGP
** Changed in: kdepim (Ubuntu) Status: Incomplete => In Progress ** Changed in: kdepim (Ubuntu) Assignee: (unassigned) => Simon Quigley (tsimonq2) ** Changed in: kmail (Ubuntu) Status: Incomplete => In Progress ** Changed in: kmail (Ubuntu) Assignee: (unassigned) => Simon Quigley (tsimonq2) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698180 Title: Send Later with Delay bypasses OpenPGP To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/1698180/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1698180] Re: Send Later with Delay bypasses OpenPGP
** Changed in: kdepim (Ubuntu) Importance: Undecided => High ** Changed in: kmail (Ubuntu) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698180 Title: Send Later with Delay bypasses OpenPGP To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/1698180/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1698180] Re: Send Later with Delay bypasses OpenPGP
Luca Beltrame from opensuse & KDE kidly pointed out the following patches that have been applied and backported there for their currently shipped versions. Some may either apply here, or be adaptable if not. For PIM 4.14 https://build.opensuse.org/package/view_file/home:luca_b:422pimfix/kdepim4.openSUSE_Leap_42.2_Update /use-plugin-for-sendlater.patch?expand=1 https://build.opensuse.org/package/view_file/home:luca_b:422pimfix/kdepim4.openSUSE_Leap_42.2_Update /also-encrypt-when-sending-later-cve-2017-9604.patch For 16.08 which we do not have, but may be in whole or part applicable to PIM 16.12 or 16.04 packages. https://build.opensuse.org/package/view_file/home:luca_b:422pimfix/kdepim.openSUSE_Leap_42.2_Update /use-plugin-for-sendlater.patch?expand=1 https://build.opensuse.org/package/view_file/home:luca_b:422pimfix/messagelib.openSUSE_Leap_42.2_Update /also-encrypt-when-sending-later-cve-2017-9604.patch?expand=1 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698180 Title: Send Later with Delay bypasses OpenPGP To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/1698180/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1698180] Re: Send Later with Delay bypasses OpenPGP
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures ** Changed in: kdepim (Ubuntu) Status: New => Incomplete ** Changed in: kmail (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1698180 Title: Send Later with Delay bypasses OpenPGP To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/1698180/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
