CVE-2017-1000024

CVE-2017-1000024 affects Shotwell up to 0.24.4 and 0.25.3 or earlier, with an information disclosure in the web publishing plugins that could leak passwords and OAuth tokens in plaintext. The issue is confirmed across multiple advisories (Mageia/SUSE/openSUSE/Ubuntu) and is addressed by applying ...

CVE-2016-1000033

CVE-2016-1000033 affects Shotwell 0.22.0 (and possibly other versions) and is described as a TLS/SSL certificate validation flaw that can enable man-in-the-middle attacks. The connected sources corroborate the vulnerability in Shotwell and its impact, but do not provide a vendor patch/version to ...