Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:0642-1

Опубликовано: 09 мар. 2018
Источник: suse-cvrf

Описание

Security update for shotwell

This update for shotwell fixes the following issues:

Security issue fixed:

  • CVE-2017-1000024: Use HTTPS encryption all over the publishing plugins (bsc#1054311).

This update was imported from the SUSE:SLE-12-SP2:Update update project.

Список пакетов

openSUSE Leap 42.3
shotwell-0.22.0+git.20160103-16.1
shotwell-lang-0.22.0+git.20160103-16.1

Ссылки

Описание

Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext transmission

Затронутые продукты
openSUSE Leap 42.3:shotwell-0.22.0+git.20160103-16.1
openSUSE Leap 42.3:shotwell-lang-0.22.0+git.20160103-16.1
Ссылки
Уязвимость openSUSE-SU-2018:0642-1