MGASA-2016-0111
Updated shotwell packages fix security vulnerabilities
Updated shotwell package fixes security vulnerabilities:
Shotwell is vulnerable to numerous security vulnerabilities, due to its use of the old APIs of the Webkit library which are no longer maintained (the "webkit" package in Mageia).
The shotwell package has been updated to use the current Webkit API, allowing it to benefit from security fixes in the newer Webkit branch (the "webkit2" package in Mageia). Another benefit of switching to the newer Webkit branch is that it allows shotwell to validate TLS certificates when connecting to websites.
What each source reports
OSV No score
Updated shotwell packages fix security vulnerabilities
Updated shotwell package fixes security vulnerabilities:
Shotwell is vulnerable to numerous security vulnerabilities, due to its use of the old APIs of the Webkit library which are no longer maintained (the "webkit" package in Mageia).
The shotwell package has been updated to use the current Webkit API, allowing it to benefit from security fixes in the newer Webkit branch (the "webkit2" package in Mageia). Another benefit of switching to the newer Webkit branch is that it allows shotwell to validate TLS certificates when connecting to websites.
- Record
MGASA-2016-0111- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
shotwellMageia:5 |
before 0.22.1-0.20160310.1.mga5 | 0.22.1-0.20160310.1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2016-0111 is a vulnerability with no CVSS score yet in shotwell, published March 16, 2016. No source lists public exploit code. Fixed in shotwell 0.22.1-0.20160310.1.mga5.