CVE-2016-20011

CVE-2016-20011 affects libgrss up to version 0.7.0. The issue is that TLS certificate verification is not performed when downloading feeds due to the default behavior of SoupSessionSync, allowing a remote attacker to manipulate feed contents without detection (MITM). The connected Nessus items co...