ksmtp
| Link | package | bugs open | bugs closed | Wiki | GitHub | web search |
| Description | Job-based library to send email through an SMTP server |
| Version | 24.02.2-1 [extra] |
Resolved
| Group | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|
| AVG-2274 | 21.08.3-1 | 21.12.0-1 | Low | Fixed |
| Issue | Group | Severity | Remote | Type | Description |
|---|---|---|---|---|---|
| CVE-2021-38373 | AVG-2274 | Low | Yes | Silent downgrade | In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked. |