Affected: AlmaLinux:8: gfbgraph
GLib/GObject wrapper for the Facebook Graph API that integrates with GNOME Online Accounts.
The following packages have been upgraded to a later upstream version: gfbgraph (0.2.4). (BZ#1997941)
Security Fix(es):
* gfbgraph: missing TLS certificate verification (CVE-2021-39358)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer…
In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.
In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.
Affected: openEuler:20.03-LTS-SP1: gfbgraph, openEuler:20.03-LTS-SP2: gfbgraph
GLib/GObject wrapper for the Facebook Graph API. Security Fix(es): In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.(CVE-2021-39358)
gfbgraph-devel-0.2.5-1.1 on GA media
gfbgraph: missing TLS certificate verification
Security update for gfbgraph
Affected: Ubuntu:16.04:LTS: gfbgraph, Ubuntu:18.04:LTS: gfbgraph, Ubuntu:20.04:LTS: gfbgraph, Ubuntu:22.04:LTS: gfbgraph
In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in verschiedenen GNOME Modulen ausnutzen, um Sicherheitsvorkehrungen zu umgehen.