Link package | bugs open | bugs closed | Wiki | GitHub | web search
Description Job-based library to send email through an SMTP server
Version 22.12.3-1 [extra]


Group Affected Fixed Severity Status Ticket
AVG-2274 21.08.3-1 21.12.0-1 Low Fixed
Issue Group Severity Remote Type Description
CVE-2021-38373 AVG-2274 Low Yes Silent downgrade
In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authentication" is checked.