File python-2.7-CVE-2011-3389-ssl-compat.patch of Package python.openSUSE_12.1_Update

Index: Python-2.7/Modules/_ssl.c
===================================================================
--- Python-2.7.orig/Modules/_ssl.c	2010-06-25 02:03:21.000000000 +0200
+++ Python-2.7/Modules/_ssl.c	2012-03-29 16:25:36.000000000 +0200
@@ -365,7 +365,7 @@
     }
 
     /* ssl compatibility */
-    SSL_CTX_set_options(self->ctx, SSL_OP_ALL);
+    SSL_CTX_set_options(self->ctx, SSL_OP_ALL & ~SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS);
 
     verification_mode = SSL_VERIFY_NONE;
     if (certreq == PY_SSL_CERT_OPTIONAL)
openSUSE Build Service is sponsored by