Summary
It was discovered that Shotwell is vulnerable to an information disclosure
in the web publishing plugins resulting in potential password and oauth token
plaintext transmission.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | shotwell | 0.18.0-0ubuntu4.5 |
| Ubuntu · 16.04 LTS 16.04:LTS | shotwell | 0.22.0+git20160108.r1.f2fb1f7-0ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishi…
References
-
report
https://ubuntu.com/security/CVE-2017-1000024