Advisories » MGASA-2014-0500

Updated geary package fixes security vulnerability

Publication date: 29 Nov 2014
Modification date: 29 Nov 2014
Type: security
Affected Mageia releases : 4
CVE: CVE-2014-5444

Description

Geary before 0.6.3 does not present the user with a warning when a TLS
certificate error is detected, which makes it easier for remote attackers to
conduct man-in-the-middle attacks via a crafted certificate (CVE-2014-5444).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14199
• http://lists.opensuse.org/opensuse-updates/2014-09/msg00035.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5444

SRPMS

4/core

• geary-0.6.3-1.mga4