From bebdffb4de586fb43fd07ac549121f4b22f6812d Mon Sep 17 00:00:00 2001
From: "Douglas R. Reno" <renodr@linuxfromscratch.org>
Date: Mon, 18 Oct 2021 13:18:01 -0500
Subject: [PATCH] Fix CVE-2021-39359 by forcing TLS certificate validation

This was done by adding "ssl-use-system-ca-file", TRUE to the options
for each soup_session_new_with_options() call that was made.

Tested on Linux From Scratch 11.0 and Debian 11.

Fixes #249
---
 providers/web/gda-web-provider.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/providers/web/gda-web-provider.c b/providers/web/gda-web-provider.c
index cf8d14dc3..cc818895f 100644
--- a/providers/web/gda-web-provider.c
+++ b/providers/web/gda-web-provider.c
@@ -355,8 +355,8 @@ gda_web_provider_open_connection (GdaServerProvider *provider, GdaConnection *cn
 	g_rec_mutex_init (& (cdata->mutex));
 	cdata->server_id = NULL;
 	cdata->forced_closing = FALSE;
-	cdata->worker_session = soup_session_new ();
-	cdata->front_session = soup_session_new_with_options ("max-conns-per-host", 1, NULL);
+	cdata->worker_session = soup_session_new_with_options ("ssl-use-system-ca-file", TRUE, NULL);
+	cdata->front_session = soup_session_new_with_options ("max-conns-per-host", 1, "ssl-use-system-ca-file", TRUE, NULL);
 	if (use_ssl) {
 		server_url = g_string_new ("https://");
 		g_print ("USING SSL\n");
-- 
GitLab

f59c31deaf44cf487878ae6e6b61026630b616ff'>tree</a><a href='/guix/commit/gnu/packages/patches/ibus-anthy-fix-tests.patch?id=f59c31deaf44cf487878ae6e6b61026630b616ff'>commit</a><a href='/guix/diff/gnu/packages/patches/ibus-anthy-fix-tests.patch?id=f59c31deaf44cf487878ae6e6b61026630b616ff'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/patches/ibus-anthy-fix-tests.patch'>
<input type='hidden' name='id' value='f59c31deaf44cf487878ae6e6b61026630b616ff'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=f59c31deaf44cf487878ae6e6b61026630b616ff'>root</a>/<a href='/guix/log/gnu?id=f59c31deaf44cf487878ae6e6b61026630b616ff'>gnu</a>/<a href='/guix/log/gnu/packages?id=f59c31deaf44cf487878ae6e6b61026630b616ff'>packages</a>/<a href='/guix/log/gnu/packages/patches?id=f59c31deaf44cf487878ae6e6b61026630b616ff'>patches</a>/<a href='/guix/log/gnu/packages/patches/ibus-anthy-fix-tests.patch?id=f59c31deaf44cf487878ae6e6b61026630b616ff'>ibus-anthy-fix-tests.patch</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/patches/ibus-anthy-fix-tests.patch?id=f59c31deaf44cf487878ae6e6b61026630b616ff&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2023-08-22 12:34:20 -0400'>2023-08-22</span></td><td><a href='/guix/commit/gnu/packages/patches/ibus-anthy-fix-tests.patch?id=13425768f7c393cda49302ba2e8705f14ae56f0d'>gnu: ibus-anthy: Update to 1.5.15.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/ibus.scm (ibus-anthy): Update to 1.5.15.
* gnu/packages/patches/ibus-anthy-fix-tests.patch: Update patch.
</span></span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2023-06-14 11:05:30 -0400'>2023-06-14</span></td><td><a href='/guix/commit/gnu/packages/patches/ibus-anthy-fix-tests.patch?id=4e60cbe5bbcf425442952de0e8eb6410e9304d1d'>gnu: ibus-anthy: Prepare for tests.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/patches/ibus-anthy-fix-tests.patch: New patch.
* gnu/packages/ibus.scm (ibus-anthy): Register it.
* gnu/packages/ibus.scm (ibus-anthy) [source]: Apply patch.
[arguments]: Clarify #:tests? comment.  Add a fix-check,
do-not-override-GI_TYPELIB_PATH and prepare-for-tests phases.
[native-inputs]: Add procps, python-pycotap, util-linux and
xorg-server-for-tests.
</span></span></td><td>Maxim Cournoyer</td></tr>