From 0011bb51cd78b3c8d59a4607cb3762384440278e Mon Sep 17 00:00:00 2001
From: Rmys <muscnsl@gmail.com>
Date: Sun, 27 Jun 2021 11:32:58 +0300
Subject: [PATCH] grilo rebuild

---
 ...-validation-not-being-done-for-any-n.patch | 33 +++++++++++++++++++
 desktop/gnome/base/grilo/pspec.xml            |  4 +++
 2 files changed, 37 insertions(+)
 create mode 100644 desktop/gnome/base/grilo/files/0002-net-Fix-TLS-cert-validation-not-being-done-for-any-n.patch

diff --git a/desktop/gnome/base/grilo/files/0002-net-Fix-TLS-cert-validation-not-being-done-for-any-n.patch b/desktop/gnome/base/grilo/files/0002-net-Fix-TLS-cert-validation-not-being-done-for-any-n.patch
new file mode 100644
index 0000000000..743d4bc8b8
--- /dev/null
+++ b/desktop/gnome/base/grilo/files/0002-net-Fix-TLS-cert-validation-not-being-done-for-any-n.patch
@@ -0,0 +1,33 @@
+From cd2472e506dafb1bb8ae510e34ad4797f63e263e Mon Sep 17 00:00:00 2001
+From: Bastien Nocera <hadess@hadess.net>
+Date: Mon, 21 Jun 2021 15:00:14 +0200
+Subject: [PATCH 2/2] net: Fix TLS cert validation not being done for any
+ network call
+
+The default SoupSessionAsync behaviour does not perform any TLS certificate
+validation, unless the ssl-use-system-ca-file property is set to true.
+
+See https://blogs.gnome.org/mcatanzaro/2021/05/25/reminder-soupsessionsync-and-soupsessionasync-default-to-no-tls-certificate-verification/
+
+This mitigates CVE-2016-20011.
+
+Closes: #146
+---
+ libs/net/grl-net-wc.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/libs/net/grl-net-wc.c b/libs/net/grl-net-wc.c
+index 5a8e89f..5ff1d17 100644
+--- a/libs/net/grl-net-wc.c
++++ b/libs/net/grl-net-wc.c
+@@ -314,6 +314,7 @@ grl_net_wc_init (GrlNetWc *wc)
+   wc->priv = grl_net_wc_get_instance_private (wc);
+ 
+   wc->priv->session = soup_session_async_new ();
++  g_object_set (G_OBJECT (wc->priv->session), "ssl-use-system-ca-file", TRUE, NULL);
+   wc->priv->pending = g_queue_new ();
+ 
+   set_thread_context (wc);
+-- 
+2.31.1
+
diff --git a/desktop/gnome/base/grilo/pspec.xml b/desktop/gnome/base/grilo/pspec.xml
index e6141d8083..f2fbfd9777 100644
--- a/desktop/gnome/base/grilo/pspec.xml
+++ b/desktop/gnome/base/grilo/pspec.xml
@@ -14,6 +14,7 @@
         <Description>Grilo is a framework for browsing and searching media content from various sources using a single API.</Description>
         <Archive sha1sum="aa5f1fd521727c4aeb02b7c6af46930b12183083">https://download.gnome.org/sources/grilo/0.3/grilo-0.3.13.tar.xz</Archive>
         <BuildDependencies>
+            <Dependency>eudev-devel</Dependency>
             <Dependency>gettext-devel</Dependency>
             <Dependency>glib2-devel</Dependency>
             <Dependency>gobject-introspection-devel</Dependency>
@@ -26,6 +27,9 @@
             <Dependency>meson</Dependency>
             <Dependency>vala-devel</Dependency>
         </BuildDependencies>
+        <Patches>
+            <Patch level="1">0002-net-Fix-TLS-cert-validation-not-being-done-for-any-n.patch</Patch>
+        </Patches>
     </Source>
 
     <Package>