diff options
| author | Leesoo Ahn <lsahn@ooseel.net> | 2021-10-15 12:07:57 +0000 |
|---|---|---|
| committer | Leesoo Ahn <lsahn@ooseel.net> | 2021-10-15 12:07:57 +0000 |
| commit | 51947de3aac99369935d177fce5c94ea18c2225e (patch) | |
| tree | 8f39cfb05629906953543436407ff1693cbe96a3 | |
| parent | f22e9902b5992e0b46c27fb4c11c82e10d3e56cc (diff) | |
| parent | 0ddb634dde56dbd7c589ce1fb7c8871fd183e1e9 (diff) | |
| download | libgfbgraph-master.tar.gz | |
Fix CVE-2021-39358 by forcing TLS certificate validation
Closes #17
See merge request GNOME/libgfbgraph!5
| -rw-r--r-- | gfbgraph/gfbgraph-photo.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/gfbgraph/gfbgraph-photo.c b/gfbgraph/gfbgraph-photo.c index af3cfb6..d865609 100644 --- a/gfbgraph/gfbgraph-photo.c +++ b/gfbgraph/gfbgraph-photo.c @@ -452,6 +452,7 @@ gfbgraph_photo_download_default_size (GFBGraphPhoto *photo, session = soup_session_sync_new (); requester = soup_requester_new (); + g_object_set (G_OBJECT (session), "ssl-use-system-ca-file", TRUE, NULL); soup_session_add_feature (session, SOUP_SESSION_FEATURE (requester)); request = soup_requester_request (requester, priv->source, error); |