Hello community, here is the log from the commit of package openssl for openSUSE:Factory checked in at 2013-12-19 13:34:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openssl (Old) and /work/SRC/openSUSE:Factory/.openssl.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openssl" Changes: -------- --- /work/SRC/openSUSE:Factory/openssl/openssl.changes 2013-12-17 10:02:18.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.openssl.new/openssl.changes 2013-12-19 13:34:53.000000000 +0100 @@ -1,0 +2,8 @@ +Tue Dec 17 13:57:40 UTC 2013 - [email protected] + +- compression_methods_switch.patch: setenv might not be successful + if a surrounding library or application filters it, like e.g. sudo. + As setenv() does not seem to be useful anyway, remove it. + bnc#849377 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ compression_methods_switch.patch ++++++ --- /var/tmp/diff_new_pack.T49vxA/_old 2013-12-19 13:34:54.000000000 +0100 +++ /var/tmp/diff_new_pack.T49vxA/_new 2013-12-19 13:34:54.000000000 +0100 @@ -31,16 +31,21 @@ =================================================================== --- openssl-1.0.1e.orig/ssl/ssl_ciph.c +++ openssl-1.0.1e/ssl/ssl_ciph.c -@@ -455,7 +455,11 @@ static void load_builtin_compressions(vo +@@ -452,10 +452,16 @@ static void load_builtin_compressions(vo + if (ssl_comp_methods == NULL) + { + SSL_COMP *comp = NULL; ++ const char *nodefaultzlib; MemCheck_off(); ssl_comp_methods=sk_SSL_COMP_new(sk_comp_cmp); - if (ssl_comp_methods != NULL) + -+ if( getenv("OPENSSL_NO_DEFAULT_ZLIB") == NULL) -+ setenv("OPENSSL_NO_DEFAULT_ZLIB", "yes", 1); -+ -+ if (ssl_comp_methods != NULL && strncmp( getenv("OPENSSL_NO_DEFAULT_ZLIB"), "no", 2) == 0) ++ /* The default is "no" compression to avoid CRIME/BEAST */ ++ nodefaultzlib = getenv("OPENSSL_NO_DEFAULT_ZLIB"); ++ if ( ssl_comp_methods != NULL && ++ nodefaultzlib && ++ strncmp( nodefaultzlib, "no", 2) == 0) { comp=(SSL_COMP *)OPENSSL_malloc(sizeof(SSL_COMP)); if (comp != NULL) -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
