--- Begin Message ---
Package: kdepimlibs
Version: 4:4.4.5-2
Severity: grave
Tags: security patch upstream
Justification: user security hole
KDE Project Security Advisory
=============================
Title: KMail: HTML injection in plain text viewer
Risk Rating: Important
CVE: CVE-2016-7966
Platforms: All
Versions: kmail >= 4.4.0
Author: Andre Heinecke <aheinecke@intevation.de>
Date: 6 October 2016
Overview
========
Through a malicious URL that contained a quote character it
was possible to inject HTML code in KMail's plain text viewer.
Due to the parser used on the URL it was not possible to include
the equal sign (=) or a space into the injected HTML, which greatly
reduces the available HTML functionality. Although it is possible
to include an HTML comment indicator to hide content.
Impact
======
An unauthenticated attacker can send out mails with malicious content
that breaks KMail's plain text HTML escape logic. Due to the limitations
of the provided HTML in itself it might not be serious. But as a way
to break out of KMail's restricted Plain text mode this might open
the way to the exploitation of other vulnerabilities in the HTML viewer
code, which is disabled by default.
Workaround
==========
None.
Solution
========
For KDE Frameworks based releases of KMail apply the following patch to
kcoreaddons:
https://quickgit.kde.org/?p=kcoreaddons.git&a=commitdiff&h=96e562d9138c100498da38e4c5b4091a226dde12
For kdelibs4 based releases apply the following patch:
https://quickgit.kde.org/?p=kdepimlibs.git&a=commitdiff&h=176fee25ca79145ab5c8e2275d248f1a46a8d8cf
Credits
=======
Thanks to Roland Tapken for reporting this issue, Andre Heinecke from
Intevation GmbH for analysing the problems and Laurent Montel for
fixing this issue.
From: Montel Laurent <montel@kde.org>
Date: Fri, 30 Sep 2016 13:55:35 +0000
Subject: Backport avoid to transform as a url when we have a quote
X-Git-Url: http://quickgit.kde.org/?p=kdepimlibs.git&a=commitdiff&h=176fee25ca79145ab5c8e2275d248f1a46a8d8cf
---
Backport avoid to transform as a url when we have a quote
---
--- a/kpimutils/linklocator.cpp
+++ b/kpimutils/linklocator.cpp
@@ -94,6 +94,12 @@
}
QString LinkLocator::getUrl()
+{
+ return getUrlAndCheckValidHref();
+}
+
+
+QString LinkLocator::getUrlAndCheckValidHref(bool *badurl)
{
QString url;
if ( atUrl() ) {
@@ -129,13 +135,26 @@
url.reserve( maxUrlLen() ); // avoid allocs
int start = mPos;
+ bool previousCharIsADoubleQuote = false;
while ( ( mPos < (int)mText.length() ) &&
( mText[mPos].isPrint() || mText[mPos].isSpace() ) &&
( ( afterUrl.isNull() && !mText[mPos].isSpace() ) ||
( !afterUrl.isNull() && mText[mPos] != afterUrl ) ) ) {
if ( !mText[mPos].isSpace() ) { // skip whitespace
- url.append( mText[mPos] );
- if ( url.length() > maxUrlLen() ) {
+ if (mText[mPos] == QLatin1Char('>') && previousCharIsADoubleQuote) {
+ //it's an invalid url
+ if (badurl) {
+ *badurl = true;
+ }
+ return QString();
+ }
+ if (mText[mPos] == QLatin1Char('"')) {
+ previousCharIsADoubleQuote = true;
+ } else {
+ previousCharIsADoubleQuote = false;
+ }
+ url.append( mText[mPos] );
+ if ( url.length() > maxUrlLen() ) {
break;
}
}
@@ -367,7 +386,12 @@
} else {
const int start = locator.mPos;
if ( !( flags & IgnoreUrls ) ) {
- str = locator.getUrl();
+ bool badUrl = false;
+ str = locator.getUrlAndCheckValidHref(&badUrl);
+ if (badUrl) {
+ return locator.mText;
+ }
+
if ( !str.isEmpty() ) {
QString hyperlink;
if ( str.left( 4 ) == QLatin1String("www.") ) {
--- a/kpimutils/linklocator.h
+++ b/kpimutils/linklocator.h
@@ -107,6 +107,7 @@
@return The URL at the current scan position, or an empty string.
*/
QString getUrl();
+ QString getUrlAndCheckValidHref(bool *badurl = 0);
/**
Attempts to grab an email address. If there is an @ symbol at the
@@ -155,7 +156,7 @@
*/
static QString pngToDataUrl( const QString & iconPath );
- protected:
+protected:
/**
The plaintext string being scanned for URLs and email addresses.
*/
--- End Message ---
--- Begin Message ---
Source: kdepimlibs
Source-Version: 4:4.14.10-6
We believe that the bug you reported is fixed in the latest version of
kdepimlibs, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 840546@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Scott Kitterman <scott@kitterman.com> (supplier of updated kdepimlibs package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 12 Oct 2016 14:41:12 -0400
Source: kdepimlibs
Binary: kdepimlibs5-dev kdepimlibs-kio-plugins libakonadi-contact4 libakonadi-kabc4 libakonadi-kcal4 libakonadi-kde4 libakonadi-kmime4 libakonadi-socialutils4 libakonadi-notes4 libakonadi-xml4 libgpgme++2v5 libkabc4 libkblog4 libkalarmcal2 libkcal4 libkcalcore4 libkcalutils4 libkholidays4 libkimap4 libkldap4 libkmbox4 libakonadi-calendar4 libkmime4 libkontactinterface4a libkpimidentities4 libkpimtextedit4 libkpimutils4 libkresources4 libktnef4 libkxmlrpcclient4 libmailtransport4 libmicroblog4 libqgpgme1 libsyndication4 kdepimlibs-dbg
Architecture: source amd64
Version: 4:4.14.10-6
Distribution: unstable
Urgency: high
Maintainer: Debian/Kubuntu Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Scott Kitterman <scott@kitterman.com>
Description:
kdepimlibs-dbg - debugging symbols for the KDE Development Platform PIM libraries
kdepimlibs-kio-plugins - kio slaves used by KDE PIM applications
kdepimlibs5-dev - development files for the KDE Development Platform PIM libraries
libakonadi-calendar4 - library providing calendar helpers for Akonadi items
libakonadi-contact4 - Akonadi contacts access library
libakonadi-kabc4 - Akonadi address book access library
libakonadi-kcal4 - Akonadi calendar access library
libakonadi-kde4 - library for using the Akonadi PIM data server
libakonadi-kmime4 - Akonadi MIME handling library
libakonadi-notes4 - Akonadi notes access library
libakonadi-socialutils4 - Akonadi resources for handling social feeds
libakonadi-xml4 - Akonadi XML helper library
libgpgme++2v5 - C++ wrapper library for GPGME
libkabc4 - library for handling address book data
libkalarmcal2 - library for handling kalarm calendar data
libkblog4 - client-side support library for web application remote blogging A
libkcal4 - library for handling calendar data
libkcalcore4 - library for handling calendar data
libkcalutils4 - library with utility functions for the handling of calendar data
libkholidays4 - holidays calculation library
libkimap4 - library for handling IMAP data
libkldap4 - library for accessing LDAP
libkmbox4 - library for handling mbox mailboxes
libkmime4 - library for handling MIME data
libkontactinterface4a - Kontact interface library
libkpimidentities4 - library for managing user identities
libkpimtextedit4 - library that provides a textedit with PIM-specific features
libkpimutils4 - library for dealing with email addresses
libkresources4 - KDE Resource framework library
libktnef4 - library for handling TNEF data
libkxmlrpcclient4 - simple XML-RPC client library
libmailtransport4 - mail transport service library
libmicroblog4 - library for using the Microblog Akonadi Resource
libqgpgme1 - library for GpgME++ integration with Qt
libsyndication4 - parser library for RSS and Atom feeds
Closes: 840546
Changes:
kdepimlibs (4:4.14.10-6) unstable; urgency=high
.
* Team upload.
* CVE-2016-7966 KMail: HTML injection in plain text viewer (Closes: #840546)
- Avoid transforming as a url in plain text mode when there is a quote
- Add debian/patches/CVE-2016-7966.diff from upstream
Checksums-Sha1:
7327a1273193bf258af55a3c2f72aff550dc632c 4661 kdepimlibs_4.14.10-6.dsc
e55ebc826da194298e304b0415a0b1d0e1c39756 126668 kdepimlibs_4.14.10-6.debian.tar.xz
af623a03e59e644fda716fa2584766a492ac4e90 60760280 kdepimlibs-dbg_4.14.10-6_amd64.deb
08bb8eaf1a197acce86119c3cf863e0c039434a0 273206 kdepimlibs-kio-plugins_4.14.10-6_amd64.deb
fdade4d370770db2381bf331e20711fddb89f06d 541742 kdepimlibs5-dev_4.14.10-6_amd64.deb
4583edab82d4948aa57080a37c62d92a9e756bd7 266342 libakonadi-calendar4_4.14.10-6_amd64.deb
15fc22874e5034b20b1d2b524d9f53cbf2002890 352334 libakonadi-contact4_4.14.10-6_amd64.deb
a4fafdd28c1fb5392f838791361db3e85429bdfc 27704 libakonadi-kabc4_4.14.10-6_amd64.deb
df61ef181a788640eb8d08528f52afec399c65fb 33738 libakonadi-kcal4_4.14.10-6_amd64.deb
5d9170c84d5b30fe6f520c541aada17f1e8aefdd 896902 libakonadi-kde4_4.14.10-6_amd64.deb
d9e3b7a82d1843c5a5fff97a33980aece9554265 118380 libakonadi-kmime4_4.14.10-6_amd64.deb
fde45879c4fbffd87c20e7d0bcc1b202fd68cd3b 43736 libakonadi-notes4_4.14.10-6_amd64.deb
eb06666c2a7682c5f014266703af8f47c1d17e23 64216 libakonadi-socialutils4_4.14.10-6_amd64.deb
8934ed1a3d466a6428dc5dbdceb18de8a8adc6a9 50006 libakonadi-xml4_4.14.10-6_amd64.deb
61a1a6cdecf2f11555f11da45adbb0fe3406486d 126414 libgpgme++2v5_4.14.10-6_amd64.deb
e0f16989c9046b140580e6a102abb0cfde5258b8 323480 libkabc4_4.14.10-6_amd64.deb
9b77e1f906cb42b65cbee2769c784d6aadebf785 151590 libkalarmcal2_4.14.10-6_amd64.deb
1298b022b40d03f8538052a5128fbc9f4815683b 117520 libkblog4_4.14.10-6_amd64.deb
021b5eb468f6b7c862cf69555a7153d9630fab4b 382286 libkcal4_4.14.10-6_amd64.deb
9545a480cd633928ad67a89f106965998bea56a7 283218 libkcalcore4_4.14.10-6_amd64.deb
70068b9de8e50df7984e7074c9058a710f28f77d 143666 libkcalutils4_4.14.10-6_amd64.deb
7dd183dcc5c5b7f9ba5ddfeab021fa0b84b5b562 157768 libkholidays4_4.14.10-6_amd64.deb
57a39e3e7123cdde34790e1af1072a353672a90a 173356 libkimap4_4.14.10-6_amd64.deb
2d57b33638f8e5b1811c089408606ad11b26e8bd 100776 libkldap4_4.14.10-6_amd64.deb
829913849569a6b32add0c943045056889913cc6 44080 libkmbox4_4.14.10-6_amd64.deb
8ef3a799b813ebff2ed441df721fb5ad5e069152 176622 libkmime4_4.14.10-6_amd64.deb
b9191573cca7f84e649fae598c9dfebd8a99bfa2 53256 libkontactinterface4a_4.14.10-6_amd64.deb
570f277b88aa2e8d19b38577a479ff3e38048738 80854 libkpimidentities4_4.14.10-6_amd64.deb
5508b47629af56128899e7889ba5a2de0da319ab 78094 libkpimtextedit4_4.14.10-6_amd64.deb
4345923f64466716e23e81d527824f4487186c2b 60340 libkpimutils4_4.14.10-6_amd64.deb
0aea32abb47071e364f304f73ebd3ad526d2cbef 87604 libkresources4_4.14.10-6_amd64.deb
7bef6fd1a1673591f7c6c9e90805c24e48a1633b 67892 libktnef4_4.14.10-6_amd64.deb
cf6af223c071ffe8924761a3010ac2c133838ed7 44834 libkxmlrpcclient4_4.14.10-6_amd64.deb
1269b440966f1a4468259f1e19e744947d94631a 168808 libmailtransport4_4.14.10-6_amd64.deb
029c6cd14989255017a2f9fa20af299d6d4ec71b 33252 libmicroblog4_4.14.10-6_amd64.deb
117d27acd12c39bcde779f4e0a9476983825c484 34132 libqgpgme1_4.14.10-6_amd64.deb
0f56fec4fa14b27fcb2ea446bec22747c8576cde 196932 libsyndication4_4.14.10-6_amd64.deb
Checksums-Sha256:
4c1ba88895246cf0b33d4ac72a6bf00d0122977742a5e00d6a8b2a7fdc7b9bb8 4661 kdepimlibs_4.14.10-6.dsc
49d2dfb99b9582d8ffa59ddb1560d9279ef550e2bf92fe335dcd67bec1511646 126668 kdepimlibs_4.14.10-6.debian.tar.xz
3301ecd48a30c87b8fefc44e579f0650d6c349f9812cd2e5cb87ebfd8d304a0a 60760280 kdepimlibs-dbg_4.14.10-6_amd64.deb
9bdff53e29d6a3754952b73b3b620bd8beb577368f70685f768b4e468805407b 273206 kdepimlibs-kio-plugins_4.14.10-6_amd64.deb
030f4d716b92f868931e6ff210a3aa7014b751fdb5e1a6a76b60efeb1d1ec972 541742 kdepimlibs5-dev_4.14.10-6_amd64.deb
e1532bdc240efdf4784b5f5f97e3236118410778a8db9ac313e105651b3d7f7e 266342 libakonadi-calendar4_4.14.10-6_amd64.deb
cf0c31279fd314c40a7c01ae279d506941953c5b047c712a4e041e8a7783e4a4 352334 libakonadi-contact4_4.14.10-6_amd64.deb
9b8a423675c41cf58c3fdb0fdbfb6c85d483d0f5ae8bdf0d2ec4f7e0dc8c149b 27704 libakonadi-kabc4_4.14.10-6_amd64.deb
a181fe8f6450e005df6bfe23a0a582024756d513e750691743d6bbb1956d0c20 33738 libakonadi-kcal4_4.14.10-6_amd64.deb
718b9155e0af23d86ca5fb394ddf66928217f8bf3b78e39c26fb38b0c39abc4c 896902 libakonadi-kde4_4.14.10-6_amd64.deb
4e477f1eff368b6c8bf758b4f7d72dea10809cc1be80a021e916641d74edcd58 118380 libakonadi-kmime4_4.14.10-6_amd64.deb
1cad5f1f2940c177973390767ae07e4a215c5811cbc905cbfcd6dd31aa836d3c 43736 libakonadi-notes4_4.14.10-6_amd64.deb
96c2a74658d210373f7a87b2be4c6bab3f987060f8260b999781cde4d37d583a 64216 libakonadi-socialutils4_4.14.10-6_amd64.deb
62afc980b703405595453a8ff41fece48acf575426fd0968f8b0b5aa844f44e2 50006 libakonadi-xml4_4.14.10-6_amd64.deb
379f8405bd03979d66181dedd1167a30495e29113636a43068f4f3bdd96e747e 126414 libgpgme++2v5_4.14.10-6_amd64.deb
724c560d77707e8a44a8443cdb7190dd0b7ef76d697ec13377e44d10323d9f37 323480 libkabc4_4.14.10-6_amd64.deb
970c018f3f91c48d67139167b32ec3b990e8fc24b50aed361ebfdef4edacb90c 151590 libkalarmcal2_4.14.10-6_amd64.deb
17429e08af23d364494fc4e6601af3db9583237b36f01f2185d0fbaa4028f391 117520 libkblog4_4.14.10-6_amd64.deb
8661de8e47e71c1ab0a285b07374adae10102e81ab9db36fecec7334fa7d4de5 382286 libkcal4_4.14.10-6_amd64.deb
7d0bf60f66a673fe88dab9c2ebd3f166de5b9b68fc340877d80f8dbd7040b45f 283218 libkcalcore4_4.14.10-6_amd64.deb
59c00f07b2ba615188fab77202e71c9cbf95ff0835d7de2c726c6644ebe932eb 143666 libkcalutils4_4.14.10-6_amd64.deb
5327f7352d6ec63685180571291680a6e379a90e52b5580d3e3d269594ecdc14 157768 libkholidays4_4.14.10-6_amd64.deb
3a7ab15f6cb9bda8a6dfed7c0803c387ac9bf3c78a6b25f2e378e39945f15700 173356 libkimap4_4.14.10-6_amd64.deb
3350ee4c6aec18a0eb813a4432384b36b1234b83da5dee859169a1b8bfafdb1e 100776 libkldap4_4.14.10-6_amd64.deb
a02f5724086ecd47f7d594e572e2512e8e0d70937c666bcfc3e1d483fbc2ca9c 44080 libkmbox4_4.14.10-6_amd64.deb
482f40bf194ced8bd083a08703e26deba167528b5a1bdf5fc0ba58c55f4c2ff6 176622 libkmime4_4.14.10-6_amd64.deb
4cf933c07613d7ccf24836b6085b12668619b93dfafce988301eb517d59d425d 53256 libkontactinterface4a_4.14.10-6_amd64.deb
7b9c9c7a8f5bdc2406064a76c3dfbc0858c2b61321843995d6ceecc2ba7b4617 80854 libkpimidentities4_4.14.10-6_amd64.deb
43acb46952218f9c61e0dc43f0b1756c9aa69372019615a785750ec56d260eed 78094 libkpimtextedit4_4.14.10-6_amd64.deb
08a9d6ff3b0dcc3b55ad9e19d269c332eb0cbbd07410344acdbe35c32502beab 60340 libkpimutils4_4.14.10-6_amd64.deb
7a3dc6a10f95623e8480ec5610a99401c5a8ee3a6d08e423d4fcaa61f545d7d6 87604 libkresources4_4.14.10-6_amd64.deb
df6d7fe7f99e397582d1c932ddff1fd61e08da640da11a915bf784d7ffe73c3c 67892 libktnef4_4.14.10-6_amd64.deb
e334e95cfc2320aefdcfe6bf6c297625dad4ebbea94831061c7ff91b19959657 44834 libkxmlrpcclient4_4.14.10-6_amd64.deb
5c5075a054355354b68ffee48cb1fb008a59a955e1356e3a77c6865910e5c740 168808 libmailtransport4_4.14.10-6_amd64.deb
6d96c836a78f128f9feab490d76f93ee0e305f0ced92cb8a11a5310af85190d3 33252 libmicroblog4_4.14.10-6_amd64.deb
1a21192c9c57238931384939dd769ed16c9dc9a4af7e50722d9e9b779ea74831 34132 libqgpgme1_4.14.10-6_amd64.deb
890d225ad2b199e307aad5661c337cf414e4060d1e59cdbec041ce38bc88fa56 196932 libsyndication4_4.14.10-6_amd64.deb
Files:
0e48e200fb52f3da051974a8ef24b25f 4661 libs optional kdepimlibs_4.14.10-6.dsc
effdce1f94d2dcd42e6005495f95fce3 126668 libs optional kdepimlibs_4.14.10-6.debian.tar.xz
62866c92e1086a1b7efc3e246a1064c0 60760280 debug extra kdepimlibs-dbg_4.14.10-6_amd64.deb
b26110985b7f350d557ea5b1892816d6 273206 libs optional kdepimlibs-kio-plugins_4.14.10-6_amd64.deb
481617f6193a7255f02d73238093a23b 541742 libdevel optional kdepimlibs5-dev_4.14.10-6_amd64.deb
633a01f73de4733420c2dc9a01b1fe10 266342 libs optional libakonadi-calendar4_4.14.10-6_amd64.deb
53b975d354cb8c65193dc0b300097982 352334 libs optional libakonadi-contact4_4.14.10-6_amd64.deb
a1e80c9fa92b2e45acc5198e89e7330f 27704 libs optional libakonadi-kabc4_4.14.10-6_amd64.deb
4dd2a13ea0061f1ffbe28e13b9a75bd6 33738 libs optional libakonadi-kcal4_4.14.10-6_amd64.deb
6d474f0469c3147daa0058ee5721d2ab 896902 libs optional libakonadi-kde4_4.14.10-6_amd64.deb
61f6eefe1419765b80ca250b7a484e49 118380 libs optional libakonadi-kmime4_4.14.10-6_amd64.deb
95643d321a3fd358d0f07d593845e92a 43736 libs optional libakonadi-notes4_4.14.10-6_amd64.deb
d1d2e3bc7c4783d3d885531c2336f9f3 64216 libs optional libakonadi-socialutils4_4.14.10-6_amd64.deb
f38dc72289acc40fa627b2f5383bde77 50006 libs optional libakonadi-xml4_4.14.10-6_amd64.deb
a9b16c81fc620e64efcef429d5ea26fa 126414 libs optional libgpgme++2v5_4.14.10-6_amd64.deb
9d2740005c32d51d4648302b6394dac8 323480 libs optional libkabc4_4.14.10-6_amd64.deb
f50f580749ece9b298884bbd86e00373 151590 libs optional libkalarmcal2_4.14.10-6_amd64.deb
6cf32d31268cf95299ed45c14c1b8b5c 117520 libs optional libkblog4_4.14.10-6_amd64.deb
0072f21d5c9cf5976174817641c017b5 382286 libs optional libkcal4_4.14.10-6_amd64.deb
5f3368e6034dd55b811e39fe04a8d8cc 283218 libs optional libkcalcore4_4.14.10-6_amd64.deb
84358444bcd802ce857840e01f4c06d5 143666 libs optional libkcalutils4_4.14.10-6_amd64.deb
1c7164ef457809787fe3cc7cdc36930e 157768 libs optional libkholidays4_4.14.10-6_amd64.deb
e6b834150eae16a64c1ceca227ce6e67 173356 libs optional libkimap4_4.14.10-6_amd64.deb
adf95bfae9895d299d1b2c7c346212d4 100776 libs optional libkldap4_4.14.10-6_amd64.deb
fa942e9cc7d52cfc952ecebce344a3fa 44080 libs optional libkmbox4_4.14.10-6_amd64.deb
b9739472311b2ba02ae15623d482a34d 176622 libs optional libkmime4_4.14.10-6_amd64.deb
4ec969ea0e9c639a622b6f74c34e6be9 53256 libs optional libkontactinterface4a_4.14.10-6_amd64.deb
8246052c93fcf17895d1dbe010677d9f 80854 libs optional libkpimidentities4_4.14.10-6_amd64.deb
60f90a616176147dbd53f807566cc946 78094 libs optional libkpimtextedit4_4.14.10-6_amd64.deb
0b5eb6d52625b4905080c619fec33743 60340 libs optional libkpimutils4_4.14.10-6_amd64.deb
23bf72cf6b16eba325cc712d4b53ff0a 87604 libs optional libkresources4_4.14.10-6_amd64.deb
6ebccf9127416786080f2f03d98e8a11 67892 libs optional libktnef4_4.14.10-6_amd64.deb
87c97f01b343cb3a77c3523202ad9fe6 44834 libs optional libkxmlrpcclient4_4.14.10-6_amd64.deb
5ab419b2ddd4d699f44721ea90b35e86 168808 libs optional libmailtransport4_4.14.10-6_amd64.deb
e13777ec62764a8a0609352c3a2787ef 33252 libs optional libmicroblog4_4.14.10-6_amd64.deb
fad7d0ac905cf1fd885d163c3144de0f 34132 libs optional libqgpgme1_4.14.10-6_amd64.deb
1cf122304e9fb4165bc97cf9552e38ef 196932 libs optional libsyndication4_4.14.10-6_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=z5u1
-----END PGP SIGNATURE-----
--- End Message ---