From bebdffb4de586fb43fd07ac549121f4b22f6812d Mon Sep 17 00:00:00 2001
From: "Douglas R. Reno" <renodr@linuxfromscratch.org>
Date: Mon, 18 Oct 2021 13:18:01 -0500
Subject: [PATCH] Fix CVE-2021-39359 by forcing TLS certificate validation

This was done by adding "ssl-use-system-ca-file", TRUE to the options
for each soup_session_new_with_options() call that was made.

Tested on Linux From Scratch 11.0 and Debian 11.

Fixes #249
---
 providers/web/gda-web-provider.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/providers/web/gda-web-provider.c b/providers/web/gda-web-provider.c
index cf8d14dc3..cc818895f 100644
--- a/providers/web/gda-web-provider.c
+++ b/providers/web/gda-web-provider.c
@@ -355,8 +355,8 @@ gda_web_provider_open_connection (GdaServerProvider *provider, GdaConnection *cn
 	g_rec_mutex_init (& (cdata->mutex));
 	cdata->server_id = NULL;
 	cdata->forced_closing = FALSE;
-	cdata->worker_session = soup_session_new ();
-	cdata->front_session = soup_session_new_with_options ("max-conns-per-host", 1, NULL);
+	cdata->worker_session = soup_session_new_with_options ("ssl-use-system-ca-file", TRUE, NULL);
+	cdata->front_session = soup_session_new_with_options ("max-conns-per-host", 1, "ssl-use-system-ca-file", TRUE, NULL);
 	if (use_ssl) {
 		server_url = g_string_new ("https://");
 		g_print ("USING SSL\n");
-- 
GitLab

e.po?id=572641103880ce87b631e00e6212787747f694aa'>commit</a><a href='/guix/diff/po/doc/guix-manual.de.po?id=572641103880ce87b631e00e6212787747f694aa'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/po/doc/guix-manual.de.po'>
<input type='hidden' name='id' value='572641103880ce87b631e00e6212787747f694aa'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=572641103880ce87b631e00e6212787747f694aa'>root</a>/<a href='/guix/log/po?id=572641103880ce87b631e00e6212787747f694aa'>po</a>/<a href='/guix/log/po/doc?id=572641103880ce87b631e00e6212787747f694aa'>doc</a>/<a href='/guix/log/po/doc/guix-manual.de.po?id=572641103880ce87b631e00e6212787747f694aa'>guix-manual.de.po</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/po/doc/guix-manual.de.po?id=572641103880ce87b631e00e6212787747f694aa&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2021-11-06 14:06:36 +0100'>2021-11-06</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=85430a9ea6f32aaae3e34741e292a01a2de62ee0'>nls: Update translations.</a><span class='msg-avail'>...<span class='msg-tooltip'>* po/doc/guix-cookbook.es.po: New file.
* po/doc/local.mk: Add 'es' cookbook.
* doc/local.mk: Add 'es' cookbook.
</span></span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2021-10-17 22:10:25 +0200'>2021-10-17</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=15c91189cb61c579f4289047c79530cefe75215f'>nls: Update translations.</a></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2021-09-02 04:06:52 +0200'>2021-09-02</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=1ff2092a39dc5c7c7cd9b4a0ba4b59f92e738efc'>nls: Update translations.</a><span class='msg-avail'>...<span class='msg-tooltip'>* po/packages/it.po: New file.
* po/packages/LINGUAS: Add `it'.
* po/*/*.po: Update translations.
</span></span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2021-08-04 14:49:53 +0200'>2021-08-04</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=6c10c96fedf707d7be059aeb79bd5c8e2d2fa210'>nls: Update translations.</a><span class='msg-avail'>...<span class='msg-tooltip'>* po/doc/guix-cookbook.ru.po: New file.
* po/doc/guix-cookbook.sk.po: New file.
* po/*/*.po: Update translations.
* doc/local.mk (COOKBOOK_LANGUAGES): Add ru and sk.
(info_TEXINFOS): Add Russian and Slovak cookbooks.
* po/doc/local.mk (DOC_COOKBOOK_PO_FILES): Add Russian and Slovak po
files.
</span></span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2021-05-10 22:34:43 -0400'>2021-05-10</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=21fcced608c93e1ac836cdd9ab8c5d200c667e75'>nls: Update translations.</a></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2021-04-18 13:17:37 +0200'>2021-04-18</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=2a18bcbfd3b305cecfeb9a626e5e267fb575e27a'>nls: Update 'de' translations.</a></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2020-11-12 10:12:45 +0100'>2020-11-12</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=7547be7d9989f909f32df01158110aecd18a710e'>nls: Update translations of the manual.</a></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-11-12 09:39:17 +0100'>2020-11-12</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=74fdbbfaadd1a27a3412120b8f117ef59c47b888'>nls: Update translations of the manual.</a></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2020-11-03 13:30:23 +0100'>2020-11-03</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=1aced9aa0c32849939d1facfaa0f3e5f1a6c11e0'>nls: Fix Texinfo typo.</a><span class='msg-avail'>...<span class='msg-tooltip'>* po/doc/guix-manual.de.po: Fix ‘@sasmp{}’ that broke ‘make’.
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2020-11-03 12:47:43 +0100'>2020-11-03</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=595cd9cdb9070ffc6bb8e7b5c7d1285dcb756f8b'>nls: Update translations of the manual.</a></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2020-10-16 15:00:49 +0200'>2020-10-16</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=4dd989708c7ab34df0b60ce9b6c0a8ca5c15e858'>nls: Update manual translations.</a></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-04-12 00:18:05 +0200'>2020-04-12</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=935ef44b398353b5b6af94e185d7b0c3d833db0b'>nls: Update.</a></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-03-23 00:06:58 +0100'>2020-03-23</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=86603d8660e42a3b5d8b407e456a98429943bc7e'>nls: Update.</a></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-02-14 04:45:56 +0100'>2020-02-14</span></td><td><a href='/guix/commit/po/doc/guix-manual.de.po?id=561185d2796acb448deacaefb1098f59d2bf4b2a'>nls: Update 'de' translation of the manual.</a></td><td>Julien Lepiller</td></tr>