Skip to content
OpenAdvisories
Medium ELSA-2021-4339 1 CVE

Moderate: grilo security update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Summary

[0.3.6-3]
+ grilo-0.3.6-3
- Fix TLS not being validated correctly
- Resolves: rhbz#1997234

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 grilo 0:0.3.6-3.el8
Oracle Linux · 8 grilo-devel 0:0.3.6-3.el8

Vulnerabilities 1

  • Unscored —

    In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects…