CVE-2020-13645: Improper Certificate Validation

In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate...

PT-2020-5628

Name of the Vulnerable Software and Affected Versions glib-networking versions 2.64.2 and earlier Balsa versions prior to 2.5.11 and 2.6.x prior to 2.6.1 Description The implementation of GTlsClientConnection in glib-networking skips hostname verification of the server's TLS certificate if the...