[Secure-testing-team] Bug#807110: Missing TLS validation

Moritz Muehlenhoff jmm at debian.org
Sat Dec 5 12:49:21 UTC 2015


Source: shotwell
Severity: important
Tags: security

Please see https://bugzilla.gnome.org/show_bug.cgi?id=754488

CVE assignment pending, see
http://www.openwall.com/lists/oss-security/2015/12/04/4

This doesn't warrant a DSA, but could be fixed in a jessie point
update.

Cheers,
        Moritz



More information about the Secure-testing-team mailing list