This bug was fixed in the package gnome-online-accounts - 3.6.2-1ubuntu1
---------------
gnome-online-accounts (3.6.2-1ubuntu1) raring; urgency=low
* SECURITY UPDATE: incorrect ssl cert validation (LP: #1117411)
- debian/patches/CVE-2013-0240.patch: properly validate ssl certs and
fix cancellation in src/goa/goaenums.h, src/goa/goaerror.c,
src/goabackend/goaewsclient.c, src/goabackend/goaewsclient.h,
src/goabackend/goaexchangeprovider.c,
src/goabackend/goagoogleprovider.c,
src/goabackend/goahttpclient.*, src/goabackend/goautils.*,
src/goabackend/goawebview.c.
- debian/libgoa-1.0-0.symbols: updated with new symbol.
- CVE-2013-0240
- CVE-2013-1799
-- Marc Deslauriers <[email protected]> Thu, 21 Mar 2013 13:22:10
-0400
** Changed in: gnome-online-accounts (Ubuntu)
Status: Triaged => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-1799
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1117411
Title:
CVE-2013-0240: fails to verify SSL certificates when creating accounts
To manage notifications about this bug go to:
https://bugs.launchpad.net/gnome-online-accounts/+bug/1117411/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
