gfbgraph-0.2.4-1.el8.ML.1

GLib/GObject wrapper for the Facebook Graph API that integrates with GNOME
Online Accounts.

The following packages have been upgraded to a later upstream version: gfbgraph
(0.2.4). (BZ#1997941)

Security Fix(es):

* gfbgraph: missing TLS certificate verification (CVE-2021-39358)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise
Linux 8.6 Release Notes linked from the References section.

CVE-2021-39358
In GNOME libgfbgraph through 0.2.4, gfbgraph-photo.c does not enable TLS
certificate verification on the SoupSessionSync objects it creates, leaving
users vulnerable to network MITM attacks. NOTE: this is similar to
CVE-2016-20011.