Skip to content
Commits on Source (2)
......@@ -40984,10 +40984,11 @@ CVE-2017-17689 (The S/MIME specification allows a Cipher Block Chaining (CBC) ..
[stretch] - kf5-messagelib <no-dsa> (Defaults to secure handling, change to disable it entirely can be fixed via spu)
- kdepim <removed> (bug #899128)
[stretch] - kdepim <no-dsa> (Defaults to secure handling, change to disable it entirely can be fixed via spu)
[jessie] - kdepim <no-dsa> (Defaults to secure handling, change to disable it entirely can be fixed via spu)
NOTE: https://efail.de
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=796135
NOTE: https://dot.kde.org/2018/05/15/efail-and-kmail
NOTE: protocol vulnerability can't be fixed in implementations but they can't prevent exploitation by disabling loading of remote content
NOTE: protocol vulnerability can't be fixed in implementations but they can prevent exploitation by disabling loading of remote content
CVE-2017-17688 (** DISPUTED ** The OpenPGP specification allows a Cipher Feedback Mode ...)
- enigmail <unfixed> (bug #898630)
[stretch] - enigmail <ignored> (Package broken in stable, can be fixed along when updated for ESR60)
......@@ -39,8 +39,6 @@ gnutls28
--
imagemagick (Roberto C. Sánchez)
--
kdepim
--
libav (Hugo Lefeuvre)
NOTE: 20180118: Diego Biurrun (from the libav team) was working on patches, but encountered personal issues and had to stop.
NOTE: 20180118: It is unlikely that he will start again in the next weeks.
......