CVE-2018-11712 – webkitgtk: Improper TLS certificate verification for WebSocket connections

https://notcve.org/view.php?id=CVE-2018-11712

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections. WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp en el backend de red de WebKit, tal y como se emplea en WebKitGTK+ 2.20.0 y 2.20.1, no pudo realizar la verificación de certificados TLS para las conexiones WebSocket. • https://bugs.webkit.org/show_bug.cgi?id=184804 https://security.gentoo.org/glsa/201808-04 https://trac.webkit.org/changeset/230886/webkit https://access.redhat.com/security/cve/CVE-2018-11712 https://bugzilla.redhat.com/show_bug.cgi?id=1588742 • CWE-295: Improper Certificate Validation •