UbuntuUpdates.org

Package "gir1.2-grilo-0.3"

Name: gir1.2-grilo-0.3

Description:

Framework for discovering and browsing media - GObject introspection data

Latest version: 0.3.4-1ubuntu0.1
Release: bionic (18.04)
Level: security
Repository: main
Head package: grilo
Homepage: https://wiki.gnome.org/Projects/Grilo

Links


Download "gir1.2-grilo-0.3"


Other versions of "gir1.2-grilo-0.3" in Bionic

Repository Area Version
base main 0.3.4-1
updates main 0.3.4-1ubuntu0.1

Changelog

Version: 0.3.4-1ubuntu0.1 2021-08-30 14:06:19 UTC

  grilo (0.3.4-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: MITM attacks
    - debian/patches/CVE-2021-39365.patch: fix TLS cert validation
      not being done for any network in libs/net/grl-net-wc.c.
    - CVE-2021-39365

 -- Leonidas Da Silva Barbosa <email address hidden> Fri, 27 Aug 2021 10:49:01 -0300

CVE-2021-39365 In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vul



About   -   Send Feedback to @ubuntu_updates