Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
172
security advisorythreatUbuntuUbuntu 20.04 KMail Important Email Leak Threat USN-7731-1 CVE-2020-11880
Several security issues were fixed in KMail.. ========================================================================== Ubuntu Security Notice USN-7731-1 September 02, 2025 kmail vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in KMail. Software Description: - kmail: Full featured graphical email client Details: Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that KMail could be made to leak the plaintext of S/MIME encrypted emails when retrieving external content in emails. Under certain configurations, if a user were tricked into opening a specially crafted email, an attacker could possibly use this issue to obtain the plaintext of an encrypted email. This update mitigates the issue by preventing KMail from automatically loading external content. This issue only affected Ubuntu 18.04 LTS. (CVE-2017-17689) It was discovered that KMail could be made to attach files to an email without the user's knowledge. If a user were tricked into sending an email created by a specially crafted "mailto" link, an attacker could possibly use this issue to obtain sensitive files. (CVE-2020-11880) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS kmail 4:19.12.3-0ubuntu1+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS kmail 4:17.12.3-0ubuntu1+esm1 Available with Ubuntu Pro After a standard system update you need to restart KMail to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7731-1 CVE-2017-17689, CVE-2020-11880 . A crucial update for KMail addresses critical email securityflaws within Ubuntu versions 18.04 and 20.04 LTS. Immediate action recommended.. KMail Security Issues, Email Threats, Ubuntu Vulnerability. . Severity: Important. LinuxSecurity.com Team
Sep 03, 2025
•Important
Ubuntu
89
security advisorycriticalFedoraFedora 25: 2017-f68c93aaac Critical: Kmail OpenPGP Bypass Vulnerability
CVE-2017-9604 kmail: Send Later with Delay bypasses OpenPGP. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-f68c93aaac 2017-07-05 20:18:38.453769 --------------------------------------------------------------------------------Name : kmail Product : Fedora 25 Version : 16.12.3 Release : 2.fc25 URL : Summary : Mail client Description : Mail client. --------------------------------------------------------------------------------Update Information: CVE-2017-9604 kmail: Send Later with Delay bypasses OpenPGP --------------------------------------------------------------------------------References: [ 1 ] Bug #1461760 - CVE-2017-9604 kmail: Send Later with Delay bypasses OpenPGP [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1461760 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade kmail' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jul 06, 2017
•Critical
Fedora
89
security advisoryupdatecriticalUbuntu 18.04: 2021-74fdfc9822 High: Evolution Email RCE Vulnerability
CVE-2017-9604 kmail: Send Later with Delay bypasses OpenPGP. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-63fbea2273 2017-06-26 19:08:28.704698 --------------------------------------------------------------------------------Name : kmail Product : Fedora 26 Version : 17.04.1 Release : 3.fc26 URL : Summary : Mail client Description : Mail client. --------------------------------------------------------------------------------Update Information: CVE-2017-9604 kmail: Send Later with Delay bypasses OpenPGP --------------------------------------------------------------------------------References: [ 1 ] Bug #1461760 - CVE-2017-9604 kmail: Send Later with Delay bypasses OpenPGP [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1461760 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade kmail' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jun 26, 2017
Fedora
198
security advisorysecurity updatemedium severityArch Linux: ASA-201706-16 Medium: kmail Information Leak
The package kmail before version 17.04.2-1 is vulnerable to information disclosure. . Arch Linux Security Advisory ASA-201706-16 ========================================= Severity: Medium Date : 2017-06-14 CVE-ID : CVE-2017-9604 Package : kmail Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-299 Summary ====== The package kmail before version 17.04.2-1 is vulnerable to information disclosure. Resolution ========= Upgrade to 17.04.2-1. # pacman -Syu "kmail> =17.04.2-1" The problem has been fixed upstream in version 17.04.2. Workaround ========= None. Description ========== KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/encrypt action occurs during use of the Send Later feature, which allows remote attackers to obtain sensitive information by sniffing the network. Impact ===== A remote attacker who is sniffing the network may be able to obtain sensitive information when an email that should be encrypted is sent via the "Send Later with Delay" function. References ========= https://kde.org/info/security/advisory-20170615-1.txt https://security.archlinux.org/CVE-2017-9604 . The Ubuntu Security Notice USN-2021-25 addresses a vulnerability in Firefox, detailing its potential impacts and outlining necessary mitigation measures.. kmail Security, Arch Linux Vulnerability, Information Exposure. . Severity: Medium. LinuxSecurity.com Team
Jun 15, 2017
•Medium
ArchLinux
172
security advisorymoderateubuntuUbuntu 12.04 LTS USN-3100-1 Moderate HTML Injection In KMail
KMail could be made to run HTML if it opened a specially crafted email.. =========================================================================Ubuntu Security Notice USN-3100-1 October 12, 2016 kdepimlibs vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: KMail could be made to run HTML if it opened a specially crafted email. Software Description: - kdepimlibs: the KDE PIM libraries Details: Roland Tapken discovered that the KDE-PIM Libraries incorrectly filtered URLs. A remote attacker could use this issue to perform an HTML injection attack in the KMail plain text viewer. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: libkpimutils4 4:4.8.5-0ubuntu0.3 After a standard system update you need to restart KMail to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3100-1 CVE-2016-7966 Package Information: https://launchpad.net/ubuntu/+source/kdepimlibs/4:4.8.5-0ubuntu0.3 . KMail may be susceptible to manipulation through specially designed emails that execute HTML injections, impacting Ubuntu 12.04 LTS along with its derivatives.. KMail Attack, HTML Injection, Ubuntu 12.04 LTS, KDE PIM Libraries, Security Update. . LinuxSecurity.com Team
Oct 12, 2016
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!