author | Rich Burridge <rich.burridge@oracle.com> |
Mon, 16 Nov 2015 16:48:46 -0800 | |
changeset 5091 | 81e5d6b75c3c |
permissions | -rw-r--r-- |
5091
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
1 |
# date:2015-05-19 owner:rohini type:bug bugdb:20231104 |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
2 |
# Bug 20231104 disable SSLv3 in pidgin to avoid "POODLE" vulnerability |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
3 |
# |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
4 |
# These changes should be submitted upstream. |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
5 |
|
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
6 |
--- pidgin-2.10.11/libpurple/plugins/ssl/ssl-gnutls.c.orig 2015-05-19 15:11:42.975647130 +0530 |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
7 |
+++ pidgin-2.10.11/libpurple/plugins/ssl/ssl-gnutls.c 2015-05-19 15:14:12.846033693 +0530 |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
8 |
@@ -166,7 +166,7 @@ |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
9 |
if (gnutls_priority_init(&default_priority, "NORMAL:%SSL3_RECORD_VERSION", NULL)) { |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
10 |
/* See comment above about memory leak */ |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
11 |
gnutls_free(default_priority); |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
12 |
- gnutls_priority_init(&default_priority, "NORMAL", NULL); |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
13 |
+ gnutls_priority_init(&default_priority, "NORMAL:!VERS-SSL3.0:!VERS-TLS1.0", NULL); |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
14 |
} |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
15 |
} |
81e5d6b75c3c
22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff
changeset
|
16 |
#endif /* HAVE_GNUTLS_PRIORITY_FUNCS */ |