File _patchinfo of Package patchinfo.246
<patchinfo> <category>security</category> <rating>low</rating> <packager>draht</packager> <summary>backport of SSLCompression directive, SSLCipherSuite update in template</summary> <description> This low-profile update introduces a backport of the SSLCompression directive (added to /etc/apache2/ssl-global.conf) that helps mitigating the CRIME attack if set to off (default). Also added to /etc/apache2/ssl-global.conf: "SSLHonorCipherOrder on". /etc/apache2/vhosts.d/vhost-ssl.template now contains a new SSLCipherSuite string. Even though GCM mode of AES is not supported in openssl-1.0.0l, the string works well and may be useful elsewhere, too. </description> </patchinfo>