libgadu before 1.12.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers.
{ "binaries": [ { "binary_name": "libgadu3", "binary_version": "1:1.12.1-2build1" } ] }
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-4488.json"
{ "binaries": [ { "binary_name": "libgadu3", "binary_version": "1:1.12.2-3" } ] }
{ "binaries": [ { "binary_name": "libgadu3", "binary_version": "1:1.12.2-4" } ] }
{ "binaries": [ { "binary_name": "libgadu3", "binary_version": "1:1.12.2-6" } ] }
{ "binaries": [ { "binary_name": "libgadu3t64", "binary_version": "1:1.12.2-6.1build2" } ] }
{ "binaries": [ { "binary_name": "libgadu3t64", "binary_version": "1:1.12.2-6.1build3" } ] }
{ "binaries": [ { "binary_name": "libgadu3t64", "binary_version": "1:1.12.2-7" } ] }