Package: kmail
Version: 4:4.14.5-1
Severity: important

Dear Maintainer,

I just found out after reading kde-pim upstream mailing list that KMail as
packaged in Debian experimental, I am not sure whether the Sid version is
also affected, contacts gravatar.com to fetch face images of senders of
opened mails by default¹.

This was not the intention of the developer adding gravatar.com support to
it.

I just posted the following information to debian-kde mailing list:

-----------------------------------------------------------------------
If you do not want KMail to connect to gravatar.com to find faces for mail
identities, you can disable it in Configure / Appearance / Message window
(last one roughly translated from german).
-----------------------------------------------------------------------

But as not everyone reads it and this is a privacy leak, it may make sense
to upload a package that changes the default.

As to the thread the "enabled by default" mistake has been fixed in KF5
based kmail which is due to release with KDE Applications 15.08 in August.

Please note it is not my intention to point fingers or such. I assume good
intentions, errors can happen. So this is just about fixing the privacy
leak being enabled by default.


[1] kde-pim mailinglist, Thread "[Kde-pim] how does kmail find face-like
images from mail senders ?" started by Martin Koller, specifically:
Message-ID: <2126112.rfxk9ju...@collossus.ingo-kloecker.de>
Message-ID: <1996527.JvW9aqgcpS@linux-19td>

Mailinglist archive at https://mail.kde.org/pipermail/kde-pim/ is currently
broken.

Thanks,
Martin

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.2.0-rc3-tp520-btrfstrim+ (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages kmail depends on:
ii  kde-runtime                   4:14.12.3-1
ii  kdepim-runtime                4:4.14.6-1
ii  kdepimlibs-kio-plugins        4:4.14.6-1
ii  libakonadi-calendar4          4:4.14.6-1
ii  libakonadi-contact4           4:4.14.6-1
ii  libakonadi-kde4               4:4.14.6-1
ii  libakonadi-kmime4             4:4.14.6-1
ii  libakonadiprotocolinternals1  1.13.0-7
ii  libc6                         2.19-19
ii  libcalendarsupport4           4:4.14.5-1
ii  libfollowupreminder4          4:4.14.5-1
ii  libgcc1                       1:5.1.1-14
ii  libgpgme++2                   4:4.14.6-1
ii  libgrantlee-core0             0.4.0-2
ii  libincidenceeditorsng4        4:4.14.5-1
ii  libkabc4                      4:4.14.6-1
ii  libkalarmcal2                 4:4.14.6-1
ii  libkcalcore4                  4:4.14.6-1
ii  libkcalutils4                 4:4.14.6-1
ii  libkcmutils4                  4:4.14.2-5
ii  libkdecore5                   4:4.14.2-5
ii  libkdepim4                    4:4.14.5-1
ii  libkdeui5                     4:4.14.2-5
ii  libkio5                       4:4.14.2-5
ii  libkleo4                      4:4.14.5-1
ii  libkmanagesieve4              4:4.14.5-1
ii  libkmime4                     4:4.14.6-1
ii  libknotifyconfig4             4:4.14.2-5
ii  libkontactinterface4a         4:4.14.6-1
ii  libkparts4                    4:4.14.2-5
ii  libkpgp4                      4:4.14.5-1
ii  libkpimidentities4            4:4.14.6-1
ii  libkpimtextedit4              4:4.14.6-1
ii  libkpimutils4                 4:4.14.6-1
ii  libkprintutils4               4:4.14.2-5
ii  libksieveui4                  4:4.14.5-1
ii  libmailcommon4                4:4.14.5-1
ii  libmailimporter4              4:4.14.5-1
ii  libmailtransport4             4:4.14.6-1
ii  libmessagecomposer4           4:4.14.5-1
ii  libmessagecore4               4:4.14.5-1
ii  libmessagelist4               4:4.14.5-1
ii  libmessageviewer4             4:4.14.5-1
ii  libpimcommon4                 4:4.14.5-1
ii  libqt4-dbus                   4:4.8.7+dfsg-1
ii  libqt4-network                4:4.8.7+dfsg-1
ii  libqt4-xml                    4:4.8.7+dfsg-1
ii  libqtcore4                    4:4.8.7+dfsg-1
ii  libqtgui4                     4:4.8.7+dfsg-1
ii  libqtwebkit4                  2.3.4.dfsg-3
ii  libsendlater4                 4:4.14.5-1
ii  libsolid4                     4:4.14.2-5
ii  libstdc++6                    5.1.1-14
ii  libtemplateparser4            4:4.14.5-1
ii  perl                          5.20.2-6

Versions of packages kmail recommends:
ii  gnupg-agent                     2.0.28-3
ii  gnupg2                          2.0.28-3
ii  kdepim-doc                      4:4.14.5-1
pn  kdepim-themeditors              <none>
ii  ktnef                           4:4.14.5-1
ii  pinentry-gnome3 [pinentry-x11]  0.9.5-2
ii  pinentry-gtk2 [pinentry-x11]    0.9.5-2
ii  pinentry-qt4 [pinentry-x11]     0.9.5-2

Versions of packages kmail suggests:
ii  bogofilter    1.2.4+dfsg1-3
pn  clamav        <none>
ii  crm114        20100106-6
ii  kaddressbook  4:4.14.5-1
ii  kleopatra     4:4.14.5-1
pn  procmail      <none>

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-qt-kde-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20150724184147.16471.16824.reportbug@merkaba.lichtvoll

Reply via email to