Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 05 Feb 2013 17:08:06 +0000
From: Simon McVittie <>
Subject: Re: [CVE Assignment Notification] CVE-2013-0240 -
 Gnome Online Accounts (GOA) (previously) failed to verify SSL certificates
 when creating e.g. Windows Live or Facebook accounts

On 05/02/13 16:12, Jan Lieskovsky wrote:
>   it was found that Gnome Online Accounts (GOA)
> did not perform SSL certificate validation, when
> performing Windows Live and Facebook accounts creation.
> The CVE identifier of CVE-2013-0240 has been assigned
> to this issue.

Now that this is public, I've opened GNOME bug to track this bug and
its fixes for the various available branches.


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.