1160 matches found
Python < 2.7.9, 3.4.x < 3.4.3 Validate TLS certificate (bpo-22417) - Linux
Python is prone to a man-in-the-middle vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescripti...
MGASA-2021-0472 Updated grilo packages fix security vulnerability
Michael Catanzaro reported a problem in Grilo, a framework for discovering and browsing media. TLS certificate verification is not enabled on the SoupSessionAsync objects created by Grilo, leaving users vulnerable to network MITM attacks...
Updated grilo packages fix security vulnerability
Michael Catanzaro reported a problem in Grilo, a framework for discovering and browsing media. TLS certificate verification is not enabled on the SoupSessionAsync objects created by Grilo, leaving users vulnerable to network MITM attacks...
Denial Of Service (DoS)
squid:sid is vulnerable to denial of service. Lack of secure certificate validation of TLS server certificates allows a remote server to obtain security trust when the trust is not valid. This indication of trust may be passed along to clients allowing access to unsafe or hijacked services...
SUSE SLES15: grilo-devel / libgrilo-0_3-0 / libgrlnet-0_3-0 / libgrlpls-0_3-0 / etc (SUSE-SU-2021:3295-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3295-1 advisory. - CVE-2021-39365: Fixed missing TLS certificate verification bsc1189839. Tenable has extracted the preceding description block directly from...
SUSE: Security Advisory (SUSE-SU-2021:3295-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2021:3295-1 Security update for grilo
This update for grilo fixes the following issues: - CVE-2021-39365: Fixed missing TLS certificate verification bsc1189839...
openSUSE 15 Security Update : grilo (openSUSE-SU-2021:1312-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1312-1 advisory. - In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users...
OPENSUSE-SU-2021:1312-1 Security update for grilo
This update for grilo fixes the following issues: - CVE-2021-39365: Fixed missing TLS certificate verification bsc1189839. This update was imported from the SUSE:SLE-15-SP2:Update update project...
Security update for grilo (important)
openSUSE Security Update: Security update for grilo Announcement ID: openSUSE-SU-2021:1312-1 Rating: important References: 1189839 Cross-References: CVE-2021-39365 CVSS scores: CVE-2021-39365 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.2 An update th...
openSUSE: Security Advisory for grilo (openSUSE-SU-2021:3194-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE 15 Security Update : grilo (openSUSE-SU-2021:3194-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3194-1 advisory. - In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users...
SUSE: Security Advisory (SUSE-SU-2021:3194-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2021:3194-1 Security update for grilo
This update for grilo fixes the following issues: - CVE-2021-39365: Fixed missing TLS certificate verification bsc1189839...
SUSE-SU-2021:3194-1 Security update for grilo
This update for grilo fixes the following issues: - CVE-2021-39365: Fixed missing TLS certificate verification bsc1189839...
Security update for grilo (important)
openSUSE Security Update: Security update for grilo Announcement ID: openSUSE-SU-2021:3194-1 Rating: important References: 1189839 Cross-References: CVE-2021-39365 CVSS scores: CVE-2021-39365 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 An update th...
Debian: Security Advisory (DLA-2762-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2762-1 : grilo - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2762 advisory. - In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerable to network MI...
SUSE SLED12: grilo-devel / grilo-lang / libgrilo-0_3-0 / libgrlnet-0_3-0 / etc (SUSE-SU-2021:3003-1)
The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3003-1 advisory. - CVE-2021-39365: Fixed missing TLS certificate verification bsc1189839. Tenable has extracted the preceding description block...