USN-1779-1: GNOME Online Accounts vulnerability
25 March 2013
GNOME Online Accounts could be made to expose sensitive information over the network.
Releases
Packages
- gnome-online-accounts - GNOME Online Accounts
Details
It was discovered that GNOME Online Accounts did not properly check SSL
certificates when configuring online accounts. If a remote attacker were
able to perform a machine-in-the-middle attack, this flaw could be exploited to
alter or compromise credentials and confidential information.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 12.10
Ubuntu 12.04
Ubuntu 11.10
In general, a standard system update will make all the necessary changes.