UbuntuUpdates.org

Package "gir1.2-grilo-0.3"

Name: gir1.2-grilo-0.3

Description:

Framework for discovering and browsing media - GObject introspection data

Latest version: 0.3.12-1ubuntu0.1
Release: focal (20.04)
Level: updates
Repository: main
Head package: grilo
Homepage: https://wiki.gnome.org/Projects/Grilo

Links


Download "gir1.2-grilo-0.3"


Other versions of "gir1.2-grilo-0.3" in Focal

Repository Area Version
base main 0.3.12-1
security main 0.3.12-1ubuntu0.1

Changelog

Version: 0.3.12-1ubuntu0.1 2021-08-30 15:06:26 UTC

  grilo (0.3.12-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: MITM attacks
    - debian/patches/CVE-2021-39365.patch: fix TLS cert validation
      not being done for any network in libs/net/grl-net-wc.c.
    - CVE-2021-39365

 -- Leonidas Da Silva Barbosa <email address hidden> Fri, 27 Aug 2021 11:09:37 -0300

CVE-2021-39365 In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vul



About   -   Send Feedback to @ubuntu_updates