Shotwell is vulnerable

Shotwell is a Linux-based photo management software for the GNOME desktop environment. A security vulnerability exists in Shotwell version 0.22.0. The program fails to validate TLS and SSL certificates. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack...

CVE-2016-1000033

Shotwell version 0.22.0 and possibly other versions is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks...

CVE-2016-1000033

Shotwell version 0.22.0 and possibly other versions is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks...

DEBIAN-CVE-2016-1000033

Shotwell version 0.22.0 and possibly other versions is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks...

Design/Logic Flaw

Shotwell version 0.22.0 and possibly other versions is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks...

CVE-2016-1000033

Shotwell version 0.22.0 and possibly other versions is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks...

UBUNTU-CVE-2016-1000033

Shotwell version 0.22.0 and possibly other versions is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks...

CVE-2016-1000033

Shotwell version 0.22.0 and possibly other versions is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks...

CVE-2016-1000033

Shotwell version 0.22.0 and possibly other versions is vulnerable to a TLS/SSL certification validation flaw resulting in a potential for man in the middle attacks...

CVE-2016-1000033

CVE-2016-1000033 affects Shotwell 0.22.0 (and possibly other versions) and is described as a TLS/SSL certificate validation flaw that can enable man-in-the-middle attacks. The connected sources corroborate the vulnerability in Shotwell and its impact, but do not provide a vendor patch/version to ...

openSUSE Security Update : shotwell (openSUSE-2016-844)

Shotwell was updated to fix the following issues : - boo958382: Shotwell did not perform TLS certificate verification when publishing photos to external services %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...

openSUSE Security Update : shotwell (openSUSE-2016-845)

Shotwell was updated to fix the following issues : - boo958382: Shotwell did not perform TLS certificate verification when publishing photos to external services Also contains all upstream bug fixes and improvements in the current upstream version. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : 4813 (4813-1) (deprecated)

Shotwell was updated to fix the following issues : - boo958382: Shotwell did not perform TLS certificate verification when publishing photos to external services This plugin has been renamed to openSUSE-2016-844.nasl, plugin ID 90108. %NASLMINLEVEL 999999 C Tenable Network Security, Inc...

openSUSE Security Update : 4816 (4816-1) (deprecated)

Shotwell was updated to fix the following issues : - boo958382: Shotwell did not perform TLS certificate verification when publishing photos to external services Also contains all upstream bug fixes and improvements in the current upstream version. This plugin has been renamed to...

Updated shotwell packages fix security vulnerabilities

Updated shotwell package fixes security vulnerabilities: Shotwell is vulnerable to numerous security vulnerabilities, due to its use of the old APIs of the Webkit library which are no longer maintained the "webkit" package in Mageia. The shotwell package has been updated to use the current Webkit...

MGASA-2016-0111 Updated shotwell packages fix security vulnerabilities

Updated shotwell package fixes security vulnerabilities: Shotwell is vulnerable to numerous security vulnerabilities, due to its use of the old APIs of the Webkit library which are no longer maintained the "webkit" package in Mageia. The shotwell package has been updated to use the current Webkit...

Fedora 23 : shotwell-0.23.0-0.1.20160105gitf2fb1f7.fc23 (2016-902a2b18d8)

Update to git snapshot. Port to WebKit2 and verify TLS certificates. See https://bugzilla.gnome.org/showbug.cgi?id=754488 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 22 : shotwell-0.23.0-0.1.20160105gitf2fb1f7.fc22 (2016-191ff70357)

Update to git snapshot. Port to WebKit2 and verify TLS certificates. See https://bugzilla.gnome.org/showbug.cgi?id=754488 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

FreeBSD : shotwell -- not verifying certificates (448047e9-030e-4ce4-910b-f21a3ad5d9a0)

Michael Catanzaro reports : Shotwell has a serious security issue 'Shotwell does not verify TLS certificates'. Upstream is no longer active and I do not expect any further upstream releases unless someone from the community steps up to maintain it. What is the impact of the issue? If you ever use...

Fedora Update for shotwell FEDORA-2016-191

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...