From c4b1af9427bcbfee014664631ebb80376cedab12 Mon Sep 17 00:00:00 2001 From: Tatsuya Kinoshita Date: Thu, 7 Nov 2013 23:45:21 +0900 Subject: New patch 260_openssl.patch from openSUSE for OpenSSL issues - Use SSL_OP_NO_COMPRESSION if available due to the "CRIME attack". [CVE-2012-4929] - Use SSL_MODE_RELEASE_BUFFERS if available. --- debian/patches/series | 1 + 1 file changed, 1 insertion(+) (limited to 'debian/patches/series') diff --git a/debian/patches/series b/debian/patches/series index 6003d51..910ff9a 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -24,4 +24,5 @@ 230_cygwin-lang.patch 240_win64gc.patch 250_schemebug.patch +260_openssl.patch 900_ChangeLog.patch -- cgit v1.2.3