All ProjectsArch LinuxCommunity PackagesPacmanRelease Engineering Switch

Show Task #

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Tasklist

FS#48558 - [shotwell] does not verify TLS certificates

Task Type Bug Report Category Security Status Closed Assigned To Sergej Pupykin (sergej) Architecture All Severity High Priority Normal Reported Version Due in Version Undecided Due Date Undecided Percent Complete Votes 0 Private No

Details Currently Shotwell does not verify TLS certificates, which is a security problem. More info: https://blogs.gnome.org/mcatanzaro/2016/03/12/do-you-trust-this-application/ https://mail.gnome.org/archives/distributor-list/2016-January/msg00000.html https://bugzilla.gnome.org/show_bug.cgi?id=754488 https://bugzilla.gnome.org/show_bug.cgi?id=751709 The following upstream patches need to be applied to fix this issue: https://git.gnome.org/browse/shotwell/commit/?id=3ae27fc3f41ceb7820f365244e6ae6a4dc65fcaa https://git.gnome.org/browse/shotwell/commit/?id=a2844fbfeb23a0bf6b2489761ab5f51e15dc4efe https://git.gnome.org/browse/shotwell/commit/?id=f045b7a13cc1efbfa3054338d0edf569df51f4e7 https://git.gnome.org/browse/shotwell/commit/?id=b6aad5eb1af16acbb4ee4984e58dfeb08597923b