Most recent entries from all

ALSA-2021:4339 — Moderate: grilo security update

Affected: AlmaLinux:8: grilo, AlmaLinux:8: grilo-devel

Grilo is a framework that provides access to different sources of multimedia content, using a pluggable system. The grilo package contains the core library and elements.

Security Fix(es):

* grilo: missing TLS certificate verification (CVE-2021-39365)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

EUVD-2026-30573

fkie_cve-2021-39365

In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.

GHSA-jvwp-xr6v-4m4f

gsd-2021-39365

OESA-2021-1346 — grilo security update

Affected: openEuler:20.03-LTS-SP1: grilo, openEuler:20.03-LTS-SP2: grilo

Grilo is a framework focused on making media discovery and browsing easy for application developers. Security Fix(es): In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to network MITM attacks. NOTE: this is similar to CVE-2016-20011.(CVE-2021-39365)

openSUSE-SU-2021:1312-1 — Security update for grilo

Security update for grilo

SUSE-SU-2021:3003-1 — Security update for grilo

Security update for grilo

UBUNTU-CVE-2021-39365

Affected: Ubuntu:Pro:16.04:LTS: grilo, Ubuntu:18.04:LTS: grilo, Ubuntu:20.04:LTS: grilo, Ubuntu:22.04:LTS: grilo

WID-SEC-W-2022-1153 — GNOME: Schwachstelle ermöglichen Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in verschiedenen GNOME Modulen ausnutzen, um Sicherheitsvorkehrungen zu umgehen.