Stay Secure with the Latest Linux Advisories

security advisoryFedoraTLS

Fedora 32: Geary 3.36.3.1 Critical: TLS Certificate Handling Fix

geary 3.36.3.1 release: * Fixed handling of pinned, invalid TLS certificates: CVE-2020-24661 * Build bug fixes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-d445fb484a 2020-09-03 16:38:32.949710 --------------------------------------------------------------------------------Name : geary Product : Fedora 32 Version : 3.36.3.1 Release : 1.fc32 URL : https://wiki.gnome.org/Apps/Geary Summary : A lightweight email program designed around conversations Description : Geary is a new email reader for GNOME designed to let you read your email quickly and effortlessly. Its interface is based on conversations, so you can easily read an entire discussion without having to click from message to message. Geary is still in early development and has limited features today, but we're planning to add drag-and-drop attachments, lightning-fast searching, multiple account support and much more. Eventually we'd like Geary to have an extensible plugin architecture so that developers will be able to add all kinds of nifty features in a modular way. --------------------------------------------------------------------------------Update Information: geary 3.36.3.1 release: * Fixed handling of pinned, invalid TLS certificates: CVE-2020-24661 * Build bug fixes --------------------------------------------------------------------------------ChangeLog: * Thu Aug 27 2020 Kalev Lember - 3.36.3.1-1 - Update to 3.36.3.1 --------------------------------------------------------------------------------References: [ 1 ] Bug #1872968 - CVE-2020-24661 geary: mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates https://bugzilla.redhat.com/show_bug.cgi?id=1872968 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2020-d445fb484a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Geary 3.36.3.1 on Fedora 32 resolves vulnerabilities in TLS certificate management. Upgrade today for improved protection.. geary email client, Fedora security update, TLS certificate fix, geary update notification. . Severity: Critical. LinuxSecurity.com Team

Sep 03, 2020 •Critical Fedora