Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP1:Update
python3.35765
CVE-2024-5642-switch-off-NPN.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File CVE-2024-5642-switch-off-NPN.patch of Package python3.35765
--- Modules/_ssl.c | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) --- a/Modules/_ssl.c +++ b/Modules/_ssl.c @@ -148,16 +148,10 @@ struct py_ssl_library_code { * reasons. The check for TLSEXT_TYPE_next_proto_neg works with * OpenSSL 1.0.1+ and LibreSSL. * OpenSSL 1.1.1-pre1 dropped NPN but still has TLSEXT_TYPE_next_proto_neg. + * + * Fix for CVE-2024-5642: we just switch NPN completely */ -#ifdef OPENSSL_NO_NEXTPROTONEG # define HAVE_NPN 0 -#elif (OPENSSL_VERSION_NUMBER >= 0x10101000L) && !defined(LIBRESSL_VERSION_NUMBER) -# define HAVE_NPN 0 -#elif defined(TLSEXT_TYPE_next_proto_neg) -# define HAVE_NPN 1 -#else -# define HAVE_NPN 0 -#endif #ifndef INVALID_SOCKET /* MS defines this */ #define INVALID_SOCKET (-1)
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
