Bug#921688: Electrum vulnerable to malware

2019-03-17 Thread Vincas Dargis
Control: severity -1 serious From electrum.org: "Warning: Electrum versions older than 3.3 can no longer connect to public servers, and must be upgraded." Electrum in Debian no longer "syncs", servers does not provide information for this version. It's unusable, unless you install older elec

Bug#921688: Electrum vulnerable to malware

2019-02-20 Thread Vincas Dargis
Shouldn't we mark it as Critical or Grave?

Bug#921688: Electrum vulnerable to malware

2019-02-07 Thread darknetwhiteknight
Package: electrum Version: 3.1.3-1~bpo9+1 When electrum connects to certain malicious servers they issue a warning message telling the user to upgrade by following a phishing link. The link prompts the user to enter their credentials and install malware which results in the loss of all their funds