1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 4964-1] grilo security update

    From Salvatore Bonaccorso@21:1/5 to All on Fri Aug 27 21:10:01 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4964-1 security@debian.org https://www.debian.org/security/ Alberto Garcia August 27, 2021 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : grilo
    CVE ID : CVE-2021-39365
    Debian Bug : 992971

    Michael Catanzaro reported a problem in Grilo, a framework for
    discovering and browsing media. TLS certificate verification is not
    enabled on the SoupSessionAsync objects created by Grilo, leaving users vulnerable to network MITM attacks.

    For the oldstable distribution (buster), this problem has been fixed
    in version 0.3.7-1+deb10u1.

    For the stable distribution (bullseye), this problem has been fixed in
    version 0.3.13-1+deb11u1.

    We recommend that you upgrade your grilo packages.

    For the detailed security status of grilo please refer to its security
    tracker page at:
    https://security-tracker.debian.org/tracker/grilo

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmEpNj9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0Sotg//cp/dethDOnU7I/0fcKIvD/CRJnrkDhLE672e3SuFruUysw8al97xAamv X3C6fp00j6l9m+1ezOdo5tcUu+a3t35KBpoE9pYCtNnB9SZA4EAFlD9wPDhjXVPo pYfpKU6v4ai0ggDyE0oGBYBhLE2d4rwHs+tmS8ni7EUPIpyY4Vt9YsChc12LtCwL OO3hjcB5DTzfvfZ/ukr+JJlfzolhgIoJySVSs/gLn/kOakN0McjAjWIuStLy1osu 5EifZcHctwqbry1uWSI8+oEXHJuRLM65vibUzQB/qjGJEKUch3V4Eb1dzvDvQpme bdcl80iU8ktxfSIA4H7tZVf7V+k+escuO9C2qdxhLeRCjbywJjqSMJPN9tNeHPZX 4Jm14enqk6CfsuHb9NxTUx+KJgTs5zfYeVA1esmgdeW69AlyiUmGPIVK2gzAQNIH 9C45rKWiu0RlLTA6bV8j1SI6ITBIHM/0gtcpWki86fMUns/55MpMndMxnTMbIcSm jYZm0XAlnvMeV5BOMHqXg3PgIOnpaGxtj5ovC/qXIANehHArsH1lPaIavwfzWZEh Pb0EeUoikvIvZWPCilj+4uQ5c7CcKlpOzLA1z94yCNrdCwckWljyOWx9zSfcFwyJ 7QN1MMDnNvCU+id39XH8bYv5aWs7AFXx2yTkTj4Fw4YK2F8ZqW0=
    =Bm7g
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)