Tizen 3.0 Public M4

Release date: Nov. 30, 2017

Tizen 3.0 public M4 has been released, mainly containing security fixes.

Release details

Release notes

Security fixes

  • Fixed 32 CVEs and 15 manually detected security vulnerabilities in 13 modules

    For example,

    • CVE 2015-8659 (Score 10.0) has been fixed. The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.
    • CVE 2017-10989 (Score 9.8) has been fixed. The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.

Tizen 3.0 platform (API) for Tizen Studio 1.3

Release date: Oct. 11, 2017

Tizen Studio 1.3 has Tizen 3.0 Platform updates.

UI framework

New and changed features

  • An API to support the ScreenReader functionality has been added to the wearable profile

  • The elementary API has been added to the wearable profile:

    • The following API allows you to retrieve the window ID:
      • elm_win_window_id_get()
  • The efl-extension APIs have been added to the wearable profile:

    • The following APIs allow you to set and get the mirror mode for a circle object:

      • eext_circle_object_mirrored_set()
      • eext_circle_object_mirrored_get()

      The mirror mode means that circle components are rendered in the opposite direction.

Network and connectivity

New and changed features

  • Data network privileges have been modified:

Security

New and changed features

  • The Libcynara-creds-self package has been added:
    • A credential helper library has been added for self context used in cynara checks.
  • openssl has been upgraded:
    • The openssl version has been upgraded to 1.0.2k to fix the following CVEs:
      • CVE-2017-3731, CVE-2017-3732, CVE-2016-7055, CVE-2017-3733

Web framework

New and changed features

  • The WebWidget API has been added to the wearable profile:
    • The WebWidget API enables Web widgets to communicate with Web applications by providing functionalities to set and get data and receive user content.