ksmtp

Link package | bugs open | bugs closed | Wiki | GitHub | web search
Description Job-based library to send email through an SMTP server
Version 21.08.3-1 [extra]

Open

Group Affected Fixed Severity Status Ticket
AVG-2274 21.08.3-1 Low Vulnerable
Issue Group Severity Remote Type Description
CVE-2021-38373 AVG-2274 Low Yes Silent downgrade
In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.