CVE-2014-3494 on Ubuntu 14.04 LTS (trusty) - medium.
Description:
kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate.