PT-2016-7951 · Gnome+1 · Shotwell+1

Publicado 2016-03-16 · Atualizado 2016-03-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Shotwell (affected versions not specified)

Description The issue arises from Shotwell's use of outdated Webkit library APIs, which are no longer maintained. This has been resolved by updating the shotwell package to utilize the current Webkit API, allowing it to benefit from security fixes in the newer Webkit branch. An additional benefit of this update is the ability for shotwell to validate TLS certificates when connecting to websites.

Recommendations Update the shotwell package to use the current Webkit API, which allows it to benefit from security fixes in the newer Webkit branch.

Identificadores relacionados

MGASA-2016-0111

Produtos afetados

Shotwell

Webkit

Referências · 4

• https://advisories.mageia.org/MGASA-2016-0111.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2016-0111 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=17491 · Nota
• https://lists.fedoraproject.org/pipermail/package-announce/2016-January/175443.html · Aviso do Fabricante