File libgfbgraph-Fix-CVE-2021-39358-by-forcing-TLS-c... of Package gfbgraph

Overview Repositories Revisions Requests Users Attributes Meta

File libgfbgraph-Fix-CVE-2021-39358-by-forcing-TLS-certificate-validation.patch of Package gfbgraph

commit 0ddb634dde56dbd7c589ce1fb7c8871fd183e1e9
Author: Douglas R. Reno <renodr@linuxfromscratch.org>
Date:   Wed Sep 15 17:40:00 2021 +0000

Fix CVE-2021-39358 by forcing TLS certificate validation
    
    This is similar to the fix performed in other packages. See
    https://gitlab.gnome.org/Teams/Releng/security/-/issues/57 for more
    details.
    
    Tested on Linux From Scratch 11.0 and on Debian 11.
    
    Fixes #17

diff --git a/gfbgraph/gfbgraph-photo.c b/gfbgraph/gfbgraph-photo.c
index af3cfb6..d865609 100644
--- a/gfbgraph/gfbgraph-photo.c
+++ b/gfbgraph/gfbgraph-photo.c
@@ -424,6 +424,7 @@ gfbgraph_photo_download_default_size (GFBGraphPhoto *photo, GFBGraphAuthorizer *
 
         session = soup_session_sync_new ();
         requester = soup_requester_new ();
+        g_object_set (G_OBJECT (session), "ssl-use-system-ca-file", TRUE, NULL);
         soup_session_add_feature (session, SOUP_SESSION_FEATURE (requester));
 
         request = soup_requester_request (requester, priv->source, error);

Places

File libgfbgraph-Fix-CVE-2021-39358-by-forcing-TLS-certificate-validation.patch of Package gfbgraph

Places