Most recent entries from all

ALSA-2022:1801 — Moderate: gfbgraph security update

Affected: AlmaLinux:8: gfbgraph

GLib/GObject wrapper for the Facebook Graph API that integrates with GNOME Online Accounts.

The following packages have been upgraded to a later upstream version: gfbgraph (0.2.4). (BZ#1997941)

Security Fix(es):

* gfbgraph: missing TLS certificate verification (CVE-2021-39358)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

EUVD-2026-30565

fkie_cve-2021-39358

In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

GHSA-hxcj-gvxh-8944

gsd-2021-39358

OESA-2021-1434 — gfbgraph security update

Affected: openEuler:20.03-LTS-SP1: gfbgraph, openEuler:20.03-LTS-SP2: gfbgraph

GLib/GObject wrapper for the Facebook Graph API. Security Fix(es): In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.(CVE-2021-39358)

openSUSE-SU-2024:11608-1 — gfbgraph-devel-0.2.5-1.1 on GA media

gfbgraph-devel-0.2.5-1.1 on GA media

SUSE-SU-2022:2876-1 — Security update for gfbgraph

Security update for gfbgraph

UBUNTU-CVE-2021-39358

Affected: Ubuntu:16.04:LTS: gfbgraph, Ubuntu:18.04:LTS: gfbgraph, Ubuntu:20.04:LTS: gfbgraph, Ubuntu:22.04:LTS: gfbgraph

WID-SEC-W-2022-1153 — GNOME: Schwachstelle ermöglichen Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in verschiedenen GNOME Modulen ausnutzen, um Sicherheitsvorkehrungen zu umgehen.