File python-2.7-CVE-2011-3389-ssl-compat.patch of Package python.openSUSE_12.1_Update
Index: Python-2.7/Modules/_ssl.c
===================================================================
--- Python-2.7.orig/Modules/_ssl.c 2010-06-25 02:03:21.000000000 +0200
+++ Python-2.7/Modules/_ssl.c 2012-03-29 16:25:36.000000000 +0200
@@ -365,7 +365,7 @@
}
/* ssl compatibility */
- SSL_CTX_set_options(self->ctx, SSL_OP_ALL);
+ SSL_CTX_set_options(self->ctx, SSL_OP_ALL & ~SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS);
verification_mode = SSL_VERIFY_NONE;
if (certreq == PY_SSL_CERT_OPTIONAL)