Ensure the ssl-use-system-ca-file property is set to true on all SoupSessions. (!7) · Merge requests · GNOME / libgrss

Ariadne Conill requested to merge kaniini/libgrss:cve-2016-20011 into master Jun 08, 2021

The default SoupSessionSync and SoupSessionAsync behaviour does not perform any TLS certificate validation, unless the ssl-use-system-ca-file property is set to true.

This mitigates CVE-2016-20011.

Closes #4.

Edited Jun 08, 2021 by Ariadne Conill

Ensure the ssl-use-system-ca-file property is set to true on all SoupSessions.

Merge request reports