Comment 5 for bug 1022690

Revision history for this message
Scott Kitterman (kitterman) wrote :

I got more information on this today:

On Thursday, July 12, 2012 02:51:28 PM David Faure <...@kde.org> wrote:
> On Saturday 07 July 2012 11:36:10 Scott Kitterman wrote:
> > Would it be possible to get a sentence or two on what the vulnerability
> > was
> > that this fixed (the commit message isn't particularly helpful)?
>
> We found that javascript and external images were loaded (and interpreted
> (the JS, not the images)) while rendering HTML emails in kmail.
>
> > Is there a CVE number?
>
> No. I sent the patch to <email address hidden>, but I have no idea about the
> process to get a CVE number.
>
> I also don't know how much damage this can really do, in any case.

Based on that, I can verify the fix works correctly for Precise (and since it's the same code, I'm sure it will for oneiric too).