Red Hat Security Advisory

RHSA-2021:4339

grilo security update

Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) grilo-devel-0.3.6-3.el8
Red Hat Enterprise Linux AppStream (v. 8) grilo-0.3.6-3.el8

Fixes 1 record

TI-2021-16732 CVE-2021-39365 · GHSA-jvwp-xr6v-4m4f

In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification…

LOW 28

In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to network MITM attacks.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00866 Published 2021-08-22 Partial fix CWE-295