Mageia 8: MGASA-2021-0530 Moderate: gfbgraph TLS Issue Mitigated
mageia
December 2, 2021
In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MIT...
Summary
In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS
certificate verification on the SoupSessionSync objects it creates,
leaving users vulnerable to network MITM attacks. NOTE: this is similar to
CVE-2016-20011.
References
- https://bugs.mageia.org/show_bug.cgi?id=29577
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UYI47UX6S5PAOWVWQ2KID64MCTXTH7SE/
- https://www.cve.org/CVERecord?id=CVE-2021-39358
Topics Covered
Resolution
SRPMS
- 8/core/gfbgraph-0.2.4-1.1.mga8
PREVIOUS
NEXT
Publication date: 02 Dec 2021
URL: https://advisories.mageia.org/MGASA-2021-0530.html
Type: security
CVE: CVE-2021-39358
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!