The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS certificate verification on the SoupSessionSync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gfbgraph | May 13, 2022 | Aug 22, 2021 |
| Centos_linux | — | Upgrade gfbgraphUpgrade gfbgraph-debugsourceUpgrade gfbgraph-debuginfo | May 13, 2022 | Aug 22, 2021 |
| Debian | — | No solution exists | May 15, 2025 | Aug 22, 2021 |
| Oracle_linux | — | Upgrade gfbgraph | May 18, 2022 | Aug 22, 2021 |
| Redhat_linux | — | Upgrade gfbgraph-debugsourceUpgrade gfbgraphUpgrade gfbgraph-debuginfo | May 13, 2022 | Aug 22, 2021 |
| Rocky_linux | — | Upgrade gfbgraphUpgrade gfbgraph-debuginfoUpgrade gfbgraph-debugsource | Mar 5, 2024 | Aug 22, 2021 |
| Suse | — | Upgrade typelib-1_0-gfbgraph-0_2Upgrade gfbgraph-develUpgrade libgfbgraph-0_2-0 | Oct 26, 2022 | Aug 22, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub