Fedora 31: FEDORA-2020-95f2c5cc25 Critical: Geary TLS Certificate Handling

Geary is a new email reader for GNOME designed to let you read your

email quickly and effortlessly. Its interface is based on

conversations, so you can easily read an entire discussion without

having to click from message to message. Geary is still in early

development and has limited features today, but we're planning to add

drag-and-drop attachments, lightning-fast searching, multiple account

support and much more. Eventually we'd like Geary to have an

extensible plugin architecture so that developers will be able to add

all kinds of nifty features in a modular way.

Add patch for CVE-2020-24661: Handling of pinned, invalid TLS certificates.

* Sat Aug 29 2020 Thomas Moschny - 3.34.2-2

- Add patch for CVE-2020-24661.

[ 1 ] Bug #1872970 - CVE-2020-24661 geary: mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1872970

su -c 'dnf upgrade --advisory FEDORA-2020-95f2c5cc25' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/