components/desktop/pidgin/patches/pidgin-16-poodle.patch
author Rich Burridge <rich.burridge@oracle.com>
Mon, 16 Nov 2015 16:48:46 -0800
changeset 5091 81e5d6b75c3c
permissions -rw-r--r--
22185024 Move pidgin from Desktop to Userland
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
5091
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
     1
# date:2015-05-19 owner:rohini type:bug bugdb:20231104
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
     2
# Bug 20231104 disable SSLv3 in pidgin to avoid "POODLE" vulnerability
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
     3
#
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
     4
# These changes should be submitted upstream.
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
     5
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
     6
--- pidgin-2.10.11/libpurple/plugins/ssl/ssl-gnutls.c.orig	2015-05-19 15:11:42.975647130 +0530
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
     7
+++ pidgin-2.10.11/libpurple/plugins/ssl/ssl-gnutls.c	2015-05-19 15:14:12.846033693 +0530
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
     8
@@ -166,7 +166,7 @@
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
     9
 		if (gnutls_priority_init(&default_priority, "NORMAL:%SSL3_RECORD_VERSION", NULL)) {
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
    10
 			/* See comment above about memory leak */
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
    11
 			gnutls_free(default_priority);
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
    12
-			gnutls_priority_init(&default_priority, "NORMAL", NULL);
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
    13
+			gnutls_priority_init(&default_priority, "NORMAL:!VERS-SSL3.0:!VERS-TLS1.0", NULL);		  
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
    14
 		}
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
    15
 	}
81e5d6b75c3c 22185024 Move pidgin from Desktop to Userland
Rich Burridge <rich.burridge@oracle.com>
parents:
diff changeset
    16
 #endif /* HAVE_GNUTLS_PRIORITY_FUNCS */