summaryrefslogtreecommitdiff
path: root/gnu/packages/patches/libgda-cve-2021-39359.patch
diff options
context:
space:
mode:
authorNicolas Graves <[email protected]>2024-10-27 19:31:31 +0100
committerLudovic Courtès <[email protected]>2024-11-06 22:18:07 +0100
commit87e96479139953363d28e266b630efb37fc8137b (patch)
tree801958988d99f44abd5a2f60f42d5a1f7bf24d23 /gnu/packages/patches/libgda-cve-2021-39359.patch
parentf2ada4d04ed5acb96c770755bdb43b00c80c053f (diff)
gnu: libgda: Rename patch for guix lint.
* gnu/packages/gnome.scm (libgda)[source]<origin>: Rename patch for CVE to be ignored by guix lint. Signed-off-by: Ludovic Courtès <[email protected]>
Diffstat (limited to 'gnu/packages/patches/libgda-cve-2021-39359.patch')
-rw-r--r--gnu/packages/patches/libgda-cve-2021-39359.patch33
1 files changed, 0 insertions, 33 deletions
diff --git a/gnu/packages/patches/libgda-cve-2021-39359.patch b/gnu/packages/patches/libgda-cve-2021-39359.patch
deleted file mode 100644
index 5e14e79393..0000000000
--- a/gnu/packages/patches/libgda-cve-2021-39359.patch
+++ /dev/null
@@ -1,33 +0,0 @@
-From bebdffb4de586fb43fd07ac549121f4b22f6812d Mon Sep 17 00:00:00 2001
-From: "Douglas R. Reno" <[email protected]>
-Date: Mon, 18 Oct 2021 13:18:01 -0500
-Subject: [PATCH] Fix CVE-2021-39359 by forcing TLS certificate validation
-
-This was done by adding "ssl-use-system-ca-file", TRUE to the options
-for each soup_session_new_with_options() call that was made.
-
-Tested on Linux From Scratch 11.0 and Debian 11.
-
-Fixes #249
----
- providers/web/gda-web-provider.c | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/providers/web/gda-web-provider.c b/providers/web/gda-web-provider.c
-index cf8d14dc3..cc818895f 100644
---- a/providers/web/gda-web-provider.c
-+++ b/providers/web/gda-web-provider.c
-@@ -355,8 +355,8 @@ gda_web_provider_open_connection (GdaServerProvider *provider, GdaConnection *cn
- g_rec_mutex_init (& (cdata->mutex));
- cdata->server_id = NULL;
- cdata->forced_closing = FALSE;
-- cdata->worker_session = soup_session_new ();
-- cdata->front_session = soup_session_new_with_options ("max-conns-per-host", 1, NULL);
-+ cdata->worker_session = soup_session_new_with_options ("ssl-use-system-ca-file", TRUE, NULL);
-+ cdata->front_session = soup_session_new_with_options ("max-conns-per-host", 1, "ssl-use-system-ca-file", TRUE, NULL);
- if (use_ssl) {
- server_url = g_string_new ("https://");
- g_print ("USING SSL\n");
---
-GitLab
-