EUVD-2013-0292

Malware in sbrugna...

Code injection

An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a system support it...

CVE-2013-0264

CVE-2013-0264 affects Cumin. The issue is an import error introduced during code refactoring (r5310) that causes server certificate validation to be always disabled when connecting to Aviary servers, even if the system packages support it. This creates a potential integrity risk (partial) and, pe...