CVE-2021-38373
In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.
- Update to 21.12.3-2
Published Updated
PatchFirst · Latest vulnerabilities
ksmtp vulnerabilities
Vulnerabilities published for ksmtp in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2020-15954
KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use.
- Update to 21.12.3-2
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.