Description
kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | kde4libs | 4:4.13.1-0ubuntu0.2 | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kdelibs4 | 4.14.27-1.1 | openSUSE-SU-2024:10011-1 |
Advisories 1
- openSUSE-SU-2024:10011-1 kdelibs4-4.14.27-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026