--- Begin Message ---
Package: kdepimlibs
Version: 4:4.4.5-2
Severity: grave
Tags: security patch upstream
Justification: user security hole
KDE Project Security Advisory
=============================
Title: KMail: HTML injection in plain text viewer
Risk Rating: Important
CVE: CVE-2016-7966
Platforms: All
Versions: kmail >= 4.4.0
Author: Andre Heinecke <aheinecke@intevation.de>
Date: 6 October 2016
Overview
========
Through a malicious URL that contained a quote character it
was possible to inject HTML code in KMail's plain text viewer.
Due to the parser used on the URL it was not possible to include
the equal sign (=) or a space into the injected HTML, which greatly
reduces the available HTML functionality. Although it is possible
to include an HTML comment indicator to hide content.
Impact
======
An unauthenticated attacker can send out mails with malicious content
that breaks KMail's plain text HTML escape logic. Due to the limitations
of the provided HTML in itself it might not be serious. But as a way
to break out of KMail's restricted Plain text mode this might open
the way to the exploitation of other vulnerabilities in the HTML viewer
code, which is disabled by default.
Workaround
==========
None.
Solution
========
For KDE Frameworks based releases of KMail apply the following patch to
kcoreaddons:
https://quickgit.kde.org/?p=kcoreaddons.git&a=commitdiff&h=96e562d9138c100498da38e4c5b4091a226dde12
For kdelibs4 based releases apply the following patch:
https://quickgit.kde.org/?p=kdepimlibs.git&a=commitdiff&h=176fee25ca79145ab5c8e2275d248f1a46a8d8cf
Credits
=======
Thanks to Roland Tapken for reporting this issue, Andre Heinecke from
Intevation GmbH for analysing the problems and Laurent Montel for
fixing this issue.
From: Montel Laurent <montel@kde.org>
Date: Fri, 30 Sep 2016 13:55:35 +0000
Subject: Backport avoid to transform as a url when we have a quote
X-Git-Url: http://quickgit.kde.org/?p=kdepimlibs.git&a=commitdiff&h=176fee25ca79145ab5c8e2275d248f1a46a8d8cf
---
Backport avoid to transform as a url when we have a quote
---
--- a/kpimutils/linklocator.cpp
+++ b/kpimutils/linklocator.cpp
@@ -94,6 +94,12 @@
}
QString LinkLocator::getUrl()
+{
+ return getUrlAndCheckValidHref();
+}
+
+
+QString LinkLocator::getUrlAndCheckValidHref(bool *badurl)
{
QString url;
if ( atUrl() ) {
@@ -129,13 +135,26 @@
url.reserve( maxUrlLen() ); // avoid allocs
int start = mPos;
+ bool previousCharIsADoubleQuote = false;
while ( ( mPos < (int)mText.length() ) &&
( mText[mPos].isPrint() || mText[mPos].isSpace() ) &&
( ( afterUrl.isNull() && !mText[mPos].isSpace() ) ||
( !afterUrl.isNull() && mText[mPos] != afterUrl ) ) ) {
if ( !mText[mPos].isSpace() ) { // skip whitespace
- url.append( mText[mPos] );
- if ( url.length() > maxUrlLen() ) {
+ if (mText[mPos] == QLatin1Char('>') && previousCharIsADoubleQuote) {
+ //it's an invalid url
+ if (badurl) {
+ *badurl = true;
+ }
+ return QString();
+ }
+ if (mText[mPos] == QLatin1Char('"')) {
+ previousCharIsADoubleQuote = true;
+ } else {
+ previousCharIsADoubleQuote = false;
+ }
+ url.append( mText[mPos] );
+ if ( url.length() > maxUrlLen() ) {
break;
}
}
@@ -367,7 +386,12 @@
} else {
const int start = locator.mPos;
if ( !( flags & IgnoreUrls ) ) {
- str = locator.getUrl();
+ bool badUrl = false;
+ str = locator.getUrlAndCheckValidHref(&badUrl);
+ if (badUrl) {
+ return locator.mText;
+ }
+
if ( !str.isEmpty() ) {
QString hyperlink;
if ( str.left( 4 ) == QLatin1String("www.") ) {
--- a/kpimutils/linklocator.h
+++ b/kpimutils/linklocator.h
@@ -107,6 +107,7 @@
@return The URL at the current scan position, or an empty string.
*/
QString getUrl();
+ QString getUrlAndCheckValidHref(bool *badurl = 0);
/**
Attempts to grab an email address. If there is an @ symbol at the
@@ -155,7 +156,7 @@
*/
static QString pngToDataUrl( const QString & iconPath );
- protected:
+protected:
/**
The plaintext string being scanned for URLs and email addresses.
*/
--- End Message ---
--- Begin Message ---
Source: kdepimlibs
Source-Version: 4:4.14.2-2+deb8u1
We believe that the bug you reported is fixed in the latest version of
kdepimlibs, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 840546@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Scott Kitterman <scott@kitterman.com> (supplier of updated kdepimlibs package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 12 Oct 2016 12:20:26 -0400
Source: kdepimlibs
Binary: kdepimlibs5-dev kdepimlibs-kio-plugins libakonadi-contact4 libakonadi-kabc4 libakonadi-kcal4 libakonadi-kde4 libakonadi-kmime4 libakonadi-socialutils4 libakonadi-notes4 libakonadi-xml4 libgpgme++2 libkabc4 libkblog4 libkalarmcal2 libkcal4 libkcalcore4 libkcalutils4 libkholidays4 libkimap4 libkldap4 libkmbox4 libakonadi-calendar4 libkmime4 libkontactinterface4a libkpimidentities4 libkpimtextedit4 libkpimutils4 libkresources4 libktnef4 libkxmlrpcclient4 libmailtransport4 libmicroblog4 libqgpgme1 libsyndication4 kdepimlibs-dbg
Architecture: source amd64
Version: 4:4.14.2-2+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Scott Kitterman <scott@kitterman.com>
Description:
kdepimlibs-dbg - debugging symbols for the KDE Development Platform PIM libraries
kdepimlibs-kio-plugins - kio slaves used by KDE PIM applications
kdepimlibs5-dev - development files for the KDE Development Platform PIM libraries
libakonadi-calendar4 - library providing calendar helpers for Akonadi items
libakonadi-contact4 - Akonadi contacts access library
libakonadi-kabc4 - Akonadi address book access library
libakonadi-kcal4 - Akonadi calendar access library
libakonadi-kde4 - library for using the Akonadi PIM data server
libakonadi-kmime4 - Akonadi MIME handling library
libakonadi-notes4 - Akonadi notes access library
libakonadi-socialutils4 - Akonadi resources for handling social feeds
libakonadi-xml4 - Akonadi XML helper library
libgpgme++2 - c++ wrapper library for gpgme
libkabc4 - library for handling address book data
libkalarmcal2 - library for handling kalarm calendar data
libkblog4 - client-side support library for web application remote blogging A
libkcal4 - library for handling calendar data
libkcalcore4 - library for handling calendar data
libkcalutils4 - library with utility functions for the handling of calendar data
libkholidays4 - holidays calculation library
libkimap4 - library for handling IMAP data
libkldap4 - library for accessing LDAP
libkmbox4 - library for handling mbox mailboxes
libkmime4 - library for handling MIME data
libkontactinterface4a - Kontact interface library
libkpimidentities4 - library for managing user identities
libkpimtextedit4 - library that provides a textedit with PIM-specific features
libkpimutils4 - library for dealing with email addresses
libkresources4 - KDE Resource framework library
libktnef4 - library for handling TNEF data
libkxmlrpcclient4 - simple XML-RPC client library
libmailtransport4 - mail transport service library
libmicroblog4 - library for using the Microblog Akonadi Resource
libqgpgme1 - library for GpgME++ integration with Qt
libsyndication4 - parser library for RSS and Atom feeds
Closes: 840546
Changes:
kdepimlibs (4:4.14.2-2+deb8u1) jessie-security; urgency=high
.
* Team upload.
* CVE-2016-7966 KMail: HTML injection in plain text viewer (Closes: #840546)
- Avoid transforming as a url in plain text mode when there is a quote
- Add debian/patches/CVE-2016-7966.diff from upstream
Checksums-Sha1:
878f71bbdfa9359b26eb2d9bf35544c4b907dfbe 4636 kdepimlibs_4.14.2-2+deb8u1.dsc
c152380465ed167d41f9ab7a85c9c59a7dc11680 2788976 kdepimlibs_4.14.2.orig.tar.xz
d1db0d1bda2c271091c379512857ba1d55d7e64d 115884 kdepimlibs_4.14.2-2+deb8u1.debian.tar.xz
b3dd7abf2841e601ff29b32f73c20c3c5777b0f1 535704 kdepimlibs5-dev_4.14.2-2+deb8u1_amd64.deb
341fc5b11452a65a56d33420dc511d4e336f30a1 260012 kdepimlibs-kio-plugins_4.14.2-2+deb8u1_amd64.deb
13ce4cb44342231360d7f0b59dd0573312f5fd81 355712 libakonadi-contact4_4.14.2-2+deb8u1_amd64.deb
493df737fa0820bddddcceabc9ed34c5856de4c2 18066 libakonadi-kabc4_4.14.2-2+deb8u1_amd64.deb
e2bf9d4a9bf0ca1bb99a49d36ce6de5ef3eb53a8 24090 libakonadi-kcal4_4.14.2-2+deb8u1_amd64.deb
3f09af545c8c72ccc0a864349e7c8fd36c5f64e7 936006 libakonadi-kde4_4.14.2-2+deb8u1_amd64.deb
5d9331680e7d70dafec58b051ec7c2fc9814b348 114766 libakonadi-kmime4_4.14.2-2+deb8u1_amd64.deb
f00d0f56e94d5846c940427dcf6ca26304e71f3e 61076 libakonadi-socialutils4_4.14.2-2+deb8u1_amd64.deb
89c32c888eb607edfde41e680539acc93e5b43cb 34678 libakonadi-notes4_4.14.2-2+deb8u1_amd64.deb
f74cb48082ede889d9d46bcaabe9f475e24a554b 41884 libakonadi-xml4_4.14.2-2+deb8u1_amd64.deb
7e6af640ee06f18b4afc4801043d098745833c68 130846 libgpgme++2_4.14.2-2+deb8u1_amd64.deb
60a3e6ba2bcbba237f0240ae3c049bd71fb8aaab 301372 libkabc4_4.14.2-2+deb8u1_amd64.deb
a4c6b58179af70125271a4572f894a63b9f79737 107986 libkblog4_4.14.2-2+deb8u1_amd64.deb
8771f59cea63b1f9f1a78c50af738ee246c0a983 146470 libkalarmcal2_4.14.2-2+deb8u1_amd64.deb
f380316080fe41b1e581bdaed68486175b49dd00 369000 libkcal4_4.14.2-2+deb8u1_amd64.deb
6fa38e8134cf1c246f729b28b520009bfbbb5f58 275020 libkcalcore4_4.14.2-2+deb8u1_amd64.deb
b514b5bc4e7cbe26dc1b60095e5d2eeb07832ac3 128400 libkcalutils4_4.14.2-2+deb8u1_amd64.deb
03390fb6a8ba90256413fd4c59003c5a6e238aed 154082 libkholidays4_4.14.2-2+deb8u1_amd64.deb
3ea26d160ac22fd175ec6a8da2c9d083dac0d97e 180200 libkimap4_4.14.2-2+deb8u1_amd64.deb
f03ce008e6d2b079d799f257a66eccddd49454bd 90692 libkldap4_4.14.2-2+deb8u1_amd64.deb
72abca27c8b3de8a6c115d4440b949bf8d081fd0 34080 libkmbox4_4.14.2-2+deb8u1_amd64.deb
b37442b1b85dbedbbcd78260eae6e32fb1f64f8b 275528 libakonadi-calendar4_4.14.2-2+deb8u1_amd64.deb
5532cc45bfdd20c920d053c76094737c289fd569 176942 libkmime4_4.14.2-2+deb8u1_amd64.deb
fa7dc0e09b93e64b8640eb6c02e0bdf7108804bf 43694 libkontactinterface4a_4.14.2-2+deb8u1_amd64.deb
633388de33db94a9012d2387ca34bab35349f200 70140 libkpimidentities4_4.14.2-2+deb8u1_amd64.deb
a84937d835d4aa7140cc00729dd13df480726588 66728 libkpimtextedit4_4.14.2-2+deb8u1_amd64.deb
84a37b3a9d6d7596f485411f1dff4ae925ad583f 50154 libkpimutils4_4.14.2-2+deb8u1_amd64.deb
b887f7560a4d8c84230a0d8d02798f5539e0c504 77264 libkresources4_4.14.2-2+deb8u1_amd64.deb
ba68934dab9a56c2be855aa4ec9bb0c2e49f3f58 57046 libktnef4_4.14.2-2+deb8u1_amd64.deb
e5a5351b01fc83f48a78ecc10adcc7c4e49ef6bd 35728 libkxmlrpcclient4_4.14.2-2+deb8u1_amd64.deb
aa7e52521482971163a30692a8f6a194fc080e90 164040 libmailtransport4_4.14.2-2+deb8u1_amd64.deb
780d6c035c8d03baa7ca352eac2983e82a67ddd9 23444 libmicroblog4_4.14.2-2+deb8u1_amd64.deb
bd2537e0aa27d8aeb797dfc36a4fc0e832bf3271 24578 libqgpgme1_4.14.2-2+deb8u1_amd64.deb
ceaf1aca702498bd7c4c5d64b33c57633a555c57 204896 libsyndication4_4.14.2-2+deb8u1_amd64.deb
547e0373b03c6aaa168d77872035982c78685b00 56155370 kdepimlibs-dbg_4.14.2-2+deb8u1_amd64.deb
Checksums-Sha256:
085a55e82af0e71f90122f9728bfec0b9aeed991eae96c55aa449b778782ccbe 4636 kdepimlibs_4.14.2-2+deb8u1.dsc
d35b6343ffadbfaa561bed3d16fd0a449303c7f4c86366b5428d34a5df7db79d 2788976 kdepimlibs_4.14.2.orig.tar.xz
fd1f776355a3b6327abd478ca418a5f88647424e0012719d713f16bb2495eb01 115884 kdepimlibs_4.14.2-2+deb8u1.debian.tar.xz
88dfc0603f64a7c87017876ab65a752017aee8204ec58d76ec797715e3017d61 535704 kdepimlibs5-dev_4.14.2-2+deb8u1_amd64.deb
0314af094dc01464a0865e753f0acb04a50db497d15fd023d9e01ec453592d0b 260012 kdepimlibs-kio-plugins_4.14.2-2+deb8u1_amd64.deb
25dcc503b46b1a9de4a093d259432d30724f481295299c58efc73b680ecdbb8f 355712 libakonadi-contact4_4.14.2-2+deb8u1_amd64.deb
04b82db8ded5417880907e72b5086dfae0dff565b383e7645db2f71c76de4594 18066 libakonadi-kabc4_4.14.2-2+deb8u1_amd64.deb
a839c62b7eca8aeaa66818fbb21b0a83ab2759075ec9b0686d73110a5c05f37d 24090 libakonadi-kcal4_4.14.2-2+deb8u1_amd64.deb
eec626bace67bc5a3cb9c14676a8b68440287b44f1c8136ce5d7748f2f8260fa 936006 libakonadi-kde4_4.14.2-2+deb8u1_amd64.deb
c3eb1dabae61e22d96261a429200c7a1acb5838b208eebb638e2181c17ee14a0 114766 libakonadi-kmime4_4.14.2-2+deb8u1_amd64.deb
a51d0908c9340594d5828e4f5e8121eaaf71b58ff4b763c0624a92f807ac5432 61076 libakonadi-socialutils4_4.14.2-2+deb8u1_amd64.deb
d21c3f1495ad47edc266b876259d2c264cccca1a3dfc90c63f1222fa7155450c 34678 libakonadi-notes4_4.14.2-2+deb8u1_amd64.deb
e58103d53ae5cae416ebbc134c6ca87eaa255173d8d52f93b7a315f74fa43f49 41884 libakonadi-xml4_4.14.2-2+deb8u1_amd64.deb
ae1af85877eeb55f50a890eac41b9a1f864a01ae23f84dca7c962ac62e118278 130846 libgpgme++2_4.14.2-2+deb8u1_amd64.deb
a0fdd746711023eda2f3b926b94f1ab8ab8241bf640c64376f5550cd001f0de2 301372 libkabc4_4.14.2-2+deb8u1_amd64.deb
a1dac97213db5ed575756efacab8709819987b2e1a7cef3593c3e6d1816aad82 107986 libkblog4_4.14.2-2+deb8u1_amd64.deb
ea23c651d7a9ffbf084fb8233317846aded93e33b4aded17d4be3d264140b47e 146470 libkalarmcal2_4.14.2-2+deb8u1_amd64.deb
bfe180906f4d0a916e7dd449dd9c0f3911108ff6c9cc2ec6c9f71e17caa0c78c 369000 libkcal4_4.14.2-2+deb8u1_amd64.deb
4ee29e8aeaae2eac8fe1b82e5a5d8f2008acbcf19c8ee6ef8488fee551216625 275020 libkcalcore4_4.14.2-2+deb8u1_amd64.deb
0189331e497fa2d80e7fc6f5499c3475191c9573f1bf835d6c2d50d71b1de706 128400 libkcalutils4_4.14.2-2+deb8u1_amd64.deb
ded04b8edb95ea6f3e8aeb82089a0bd36f2051447b307fb91e8907c1175da579 154082 libkholidays4_4.14.2-2+deb8u1_amd64.deb
d20ae94c31cdd79253233cc6573b739bccad7b686046671e4e7e5efa5e7c0b7e 180200 libkimap4_4.14.2-2+deb8u1_amd64.deb
967bf6217da3ec1eb621b3e42f88a56582778c16e6e58589b48f5ee5a426785b 90692 libkldap4_4.14.2-2+deb8u1_amd64.deb
b651a33e1da5c665463af4521e414dd572dff54986ffa605ee143e297be1cd89 34080 libkmbox4_4.14.2-2+deb8u1_amd64.deb
de91caad7fcaacf59424a61327d309ea4403bc8c8a4225c57c796cf4ccd806a2 275528 libakonadi-calendar4_4.14.2-2+deb8u1_amd64.deb
67493e82cde681e923ca848ddb54a1de392ab5c5a57f18d6bea6d7318aae1d00 176942 libkmime4_4.14.2-2+deb8u1_amd64.deb
ac6f58408c54fa1be73d2f5d0b7c4f7a282284b0d6dad0d068aaf4d420ab1baa 43694 libkontactinterface4a_4.14.2-2+deb8u1_amd64.deb
0910848c83e86c68fff801aabdfbb625efdc3f482886a568d0b1cb4b56bba4cd 70140 libkpimidentities4_4.14.2-2+deb8u1_amd64.deb
f2c2260ed7a820b83ce79a60373aa4d4d8a290beb00f53b5d44b81580132259b 66728 libkpimtextedit4_4.14.2-2+deb8u1_amd64.deb
295efaeab423503c9ece19fcf3f04f24b79e78fc5108ed23b960cba489b652db 50154 libkpimutils4_4.14.2-2+deb8u1_amd64.deb
ede246f56ae7669d2cd1701d30277ae9b6c422aa9abb65f6c53cec1c42344830 77264 libkresources4_4.14.2-2+deb8u1_amd64.deb
c867efdbdfa4972917f443b711d19390a91a7408bda03d8075d1c4bce184d194 57046 libktnef4_4.14.2-2+deb8u1_amd64.deb
88be64b9d607d43e9578c3956bad32f92fa385c836f611f73599354aeca92cb1 35728 libkxmlrpcclient4_4.14.2-2+deb8u1_amd64.deb
bfd918dfe0c677ef237b60fea4516a5d1a813914e979d0b70e0b69f1133deb23 164040 libmailtransport4_4.14.2-2+deb8u1_amd64.deb
c720d6928f6de19f43eb3abaad1c44ca7c695c56f635c4b0226cb2a9fbe21cc8 23444 libmicroblog4_4.14.2-2+deb8u1_amd64.deb
bf8f842e05fbe7f646699274f6244efea8edf8582e3be2f45632efc5ad6be0ee 24578 libqgpgme1_4.14.2-2+deb8u1_amd64.deb
025c196ef56b13632faab9bd512e4d2a4a239cc20466f04a8be298492acdc4e8 204896 libsyndication4_4.14.2-2+deb8u1_amd64.deb
d83e389c35adf535ee9959db7a3c7b97401031f8f82ff9d249ca251e22ff7fce 56155370 kdepimlibs-dbg_4.14.2-2+deb8u1_amd64.deb
Files:
17b1ad25440ce1b7ed15454eebe92ef5 4636 libs optional kdepimlibs_4.14.2-2+deb8u1.dsc
f1c8a6f0914706109809d4f27d2835a6 2788976 libs optional kdepimlibs_4.14.2.orig.tar.xz
d83b09cc5a7f7cd217afe4dcb43d1594 115884 libs optional kdepimlibs_4.14.2-2+deb8u1.debian.tar.xz
15d087c2e5110e027f9b589381a77b6b 535704 libdevel optional kdepimlibs5-dev_4.14.2-2+deb8u1_amd64.deb
9e771b37d5d9836a17d0eee2e3b5b623 260012 libs optional kdepimlibs-kio-plugins_4.14.2-2+deb8u1_amd64.deb
facd98ba50a7b259bfe6b0d39ca15b23 355712 libs optional libakonadi-contact4_4.14.2-2+deb8u1_amd64.deb
1bb68f71db16a51750e5599f87ea778e 18066 libs optional libakonadi-kabc4_4.14.2-2+deb8u1_amd64.deb
2ad85d9e6103fd2790597c7916f69d36 24090 libs optional libakonadi-kcal4_4.14.2-2+deb8u1_amd64.deb
a758b41e02bb6ac3aa94994bdfdafff1 936006 libs optional libakonadi-kde4_4.14.2-2+deb8u1_amd64.deb
aa85672c3ec80e7257f84855d6f575cb 114766 libs optional libakonadi-kmime4_4.14.2-2+deb8u1_amd64.deb
e3b2f524e00dee7d32d1751973882bb9 61076 libs optional libakonadi-socialutils4_4.14.2-2+deb8u1_amd64.deb
0f73630c9781138f082a13df5142ed2a 34678 libs optional libakonadi-notes4_4.14.2-2+deb8u1_amd64.deb
ae5ef24f90b89b918744ee9caf16d77a 41884 libs optional libakonadi-xml4_4.14.2-2+deb8u1_amd64.deb
7b0649648ceb03c6b70f76ce8a72b276 130846 libs optional libgpgme++2_4.14.2-2+deb8u1_amd64.deb
3ea55ab853869b8600347e24248b6f6b 301372 libs optional libkabc4_4.14.2-2+deb8u1_amd64.deb
ab81e8d36edd3bcdbd61092f47939b56 107986 libs optional libkblog4_4.14.2-2+deb8u1_amd64.deb
5e9c9fc3fcf2898f785fce5e1d1072d8 146470 libs optional libkalarmcal2_4.14.2-2+deb8u1_amd64.deb
dae70633e0a11674d3f322b24dc57345 369000 libs optional libkcal4_4.14.2-2+deb8u1_amd64.deb
bb48ff23579eadd352d90e9997a896db 275020 libs optional libkcalcore4_4.14.2-2+deb8u1_amd64.deb
f40732aebc59c6ac40694f14b9eb1be5 128400 libs optional libkcalutils4_4.14.2-2+deb8u1_amd64.deb
27f06be40555eb3e180279b573fb748d 154082 libs optional libkholidays4_4.14.2-2+deb8u1_amd64.deb
7f167e9f414beb31320859826769e12d 180200 libs optional libkimap4_4.14.2-2+deb8u1_amd64.deb
b0ae51e05e8aa6e21dcc3b8f7176c3fe 90692 libs optional libkldap4_4.14.2-2+deb8u1_amd64.deb
d7ff4fd63b4d895b45a987af85873688 34080 libs optional libkmbox4_4.14.2-2+deb8u1_amd64.deb
0652a74af3ad2061cf8390551546d579 275528 libs optional libakonadi-calendar4_4.14.2-2+deb8u1_amd64.deb
dbf65c3af838507603d7c5b3bcb21956 176942 libs optional libkmime4_4.14.2-2+deb8u1_amd64.deb
688829d2d3b1eb1fcc9f4923c5020545 43694 libs optional libkontactinterface4a_4.14.2-2+deb8u1_amd64.deb
909fdc51656327c4d16e446005ca2aa8 70140 libs optional libkpimidentities4_4.14.2-2+deb8u1_amd64.deb
ff86e4b3a3fc9e4319214f7eea07e546 66728 libs optional libkpimtextedit4_4.14.2-2+deb8u1_amd64.deb
ec8afcb0f1f14748b0eacedd0fe73c15 50154 libs optional libkpimutils4_4.14.2-2+deb8u1_amd64.deb
aaf987d4a6733d048daf178ba8834016 77264 libs optional libkresources4_4.14.2-2+deb8u1_amd64.deb
6c1ff4952b0fe92dee1875e8b0782ff2 57046 libs optional libktnef4_4.14.2-2+deb8u1_amd64.deb
6fa9ca55f137ac698b82f5e77575deac 35728 libs optional libkxmlrpcclient4_4.14.2-2+deb8u1_amd64.deb
03b3951036d9d79288a06f208a2cb0b9 164040 libs optional libmailtransport4_4.14.2-2+deb8u1_amd64.deb
ab33b6ba046decaa7259e3bb7d2b0252 23444 libs optional libmicroblog4_4.14.2-2+deb8u1_amd64.deb
375cde7c57100abc5ab93591bd0983a6 24578 libs optional libqgpgme1_4.14.2-2+deb8u1_amd64.deb
5634da16677fb3ae3540eb499b534be4 204896 libs optional libsyndication4_4.14.2-2+deb8u1_amd64.deb
9c78faba60dcd8d92c865e6eae435e9f 56155370 debug extra kdepimlibs-dbg_4.14.2-2+deb8u1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=krkP
-----END PGP SIGNATURE-----
--- End Message ---