Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Fedora 20: libinfinity Security Update Critical Certificate Check Issues

fedora
Calendar Grey June 1, 2015
Scroller Fedora
Essential security patch for libinfinity in Fedora 20 aimed at enhancing certificate checks, addressing significant security flaws.
Security update to make libinfinity properly check certificates: https://github.com/gobby/gobby/issues/61

Summary

libinfinity is an implementation of the Infinote protocol written in GObject-based C.

Update Information:

Security update to make libinfinity properly check certificates: https://github.com/gobby/gobby/issues/61

Topics%20covered

Topics Covered

security advisory security update fedora critical software fix certificate check libinfinity

Change Log

* Fri May 15 2015 Till Maas - 0.6.6-1 - Update to new release, fixes security issue: https://github.com/gobby/gobby/issues/61, #1221266 * Sun Nov 9 2014 Till Maas - 0.6.4-1 - Update to new release * Tue Oct 21 2014 Till Maas - 0.6.3-1 - Update to new release * Sat Sep 20 2014 Till Maas - 0.6.2-1 - Update to new release * Fri Aug 29 2014 Till Maas - 0.6.1-1 - Update to new release * Sun Aug 17 2014 Fedora Release Engineering - 0.5.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering - 0.5.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Mon Jan 13 2014 Till Maas - 0.5.5-1 - Update to new release

References


[ 1 ] Bug #1221266 - libinfinity: incorrect validation of certificates https://bugzilla.redhat.com/show_bug.cgi?id=1221266

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libinfinity' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libinfinity
Product: Fedora 20
Version: 0.6.6
Release: 1.fc20
URL: https://gobby.github.io
Summary: Library implementing the infinote protocol

Topics%20covered

Topics Covered

security advisory security update fedora critical software fix certificate check libinfinity

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.