data/CVE/list

@@ -72291,6 +72291,9 @@ CVE-2017-17689 (The S/MIME specification allows a Cipher Block Chaining (CBC) ..
 	NOTE: https://dot.kde.org/2018/05/15/efail-and-kmail
 	NOTE: protocol vulnerability can't be fixed in implementations but they can prevent exploitation by disabling loading of remote content
 	NOTE: kmail bug is #898634, but src:kmail is not affected, the code in question is in kf5-messagelib
+	NOTE: kf5-messagelib: https://phabricator.kde.org/D12391 (v18.04.1)
+	NOTE: kf5-messagelib: https://phabricator.kde.org/D12393 (v18.04.1)
+	NOTE: kmail: https://phabricator.kde.org/D12394
 CVE-2017-17688 (** DISPUTED ** The OpenPGP specification allows a Cipher Feedback Mode ...)
 	- enigmail 2:2.0.6.1-4 (bug #898630)
 	[jessie] - enigmail <end-of-life> (see https://lists.debian.org/debian-lts-announce/2019/02/msg00002.html)