Skip to content
OpenAdvisories
Unscored USN-5055-1 1 CVE

grilo vulnerability

Published Aug 30, 2021 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

Michael Catanzaro discovered that grilo incorrectly handled certain TLS
certificate verification. An attacker could possibly use this issue to
MITM attacks.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS grilo 0.3.4-1ubuntu0.1
Ubuntu · 20.04 LTS 20.04:LTS grilo 0.3.12-1ubuntu0.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS grilo 0.2.15-1ubuntu0.1~esm1

Vulnerabilities 1

  • Unscored —
    CVE-2021-39365

    In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects…

    grilo grilo Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2021-39365