File libzapojit-skydrive-Guard-against-invalid-SSL-c... of Package libzapojit

Overview Repositories Revisions Requests Users Attributes Meta

File libzapojit-skydrive-Guard-against-invalid-SSL-certificates.patch of Package libzapojit (Revision be428edd6ac7792ff4ffa89ebe7ea2af)

Currently displaying revision be428edd6ac7792ff4ffa89ebe7ea2af , Show latest

From d9e002733fd4402480fa6cc70346de0cac57e820 Mon Sep 17 00:00:00 2001
From: Debarshi Ray <debarshir@gnome.org>
Date: Thu, 14 Oct 2021 16:55:48 +0200
Subject: [PATCH] skydrive: Guard against invalid SSL certificates

Backported to the 0.0.3 release.

Fixes: CVE-2021-39360

https://gitlab.gnome.org/GNOME/libzapojit/-/issues/4
---
 src/zpj-skydrive.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/zpj-skydrive.c b/src/zpj-skydrive.c
index c91b126e192f..1d91d31660e0 100644
--- a/src/zpj-skydrive.c
+++ b/src/zpj-skydrive.c
@@ -415,6 +415,7 @@ zpj_skydrive_delete_entry_id (ZpjSkydrive *self, const gchar *entry_id, GCancell
     goto out;
 
   session = soup_session_sync_new ();
+  g_object_set (session, SOUP_SESSION_SSL_USE_SYSTEM_CA_FILE, TRUE, NULL);
 
   url = g_strconcat (live_endpoint, entry_id, NULL);
   message = soup_message_new ("DELETE", url);
@@ -744,6 +745,7 @@ zpj_skydrive_download_file_id_to_path (ZpjSkydrive *self,
   data.loop = g_main_loop_new (context, FALSE);
 
   session = soup_session_async_new_with_options (SOUP_SESSION_USE_THREAD_CONTEXT, TRUE, NULL);
+  g_object_set (session, SOUP_SESSION_SSL_USE_SYSTEM_CA_FILE, TRUE, NULL);
 
   url = g_strconcat (live_endpoint, file_id, "/content", NULL);
   message = soup_message_new ("GET", url);
@@ -1291,6 +1293,7 @@ zpj_skydrive_upload_path_to_folder_id (ZpjSkydrive *self,
     goto out;
 
   session = soup_session_sync_new ();
+  g_object_set (session, SOUP_SESSION_SSL_USE_SYSTEM_CA_FILE, TRUE, NULL);
 
   url = g_strconcat (live_endpoint, folder_id, "/files", NULL);
   message = soup_message_new ("POST", url);
-- 
2.31.1

Places

File libzapojit-skydrive-Guard-against-invalid-SSL-certificates.patch of Package libzapojit (Revision be428edd6ac7792ff4ffa89ebe7ea2af)

Places