Red Hat Security Advisory

RHSA-2022:1801

gfbgraph security update

Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) gfbgraph-0.2.4-1.el8

Fixes 1 record

TI-2021-16725 CVE-2021-39358 · GHSA-hxcj-gvxh-8944

In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate…

LOW 28

In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00708 Published 2021-08-22 Fixed CWE-295