From 68e88f6cf3c417ef6a69d42422dd142f0fa6ccd7 Mon Sep 17 00:00:00 2001 From: Paul Howarth Date: Mon, 12 Dec 2022 12:21:12 +0000 Subject: [PATCH] Update to 2.078 - New upstream release 2.078 - Revert decision from 2014 to not verify hostname by default if hostname is IP address but no explicit verification scheme given (GH#121) --- ...Socket-SSL-2.078-use-system-default-SSL-version.patch | 2 +- perl-IO-Socket-SSL.spec | 9 +++++++-- sources | 2 +- 3 files changed, 9 insertions(+), 4 deletions(-) rename IO-Socket-SSL-2.076-use-system-default-SSL-version.patch => IO-Socket-SSL-2.078-use-system-default-SSL-version.patch (97%) diff --git a/IO-Socket-SSL-2.076-use-system-default-SSL-version.patch b/IO-Socket-SSL-2.078-use-system-default-SSL-version.patch similarity index 97% rename from IO-Socket-SSL-2.076-use-system-default-SSL-version.patch rename to IO-Socket-SSL-2.078-use-system-default-SSL-version.patch index 7133d19..36306b4 100644 --- a/IO-Socket-SSL-2.076-use-system-default-SSL-version.patch +++ b/IO-Socket-SSL-2.078-use-system-default-SSL-version.patch @@ -9,7 +9,7 @@ SSL_verify_callback => undef, SSL_verifycn_scheme => undef, # fallback cn verification SSL_verifycn_publicsuffix => undef, # fallback default list verification -@@ -2395,7 +2395,7 @@ sub new { +@@ -2392,7 +2392,7 @@ sub new { my $ssl_op = $DEFAULT_SSL_OP; diff --git a/perl-IO-Socket-SSL.spec b/perl-IO-Socket-SSL.spec index 3f3732e..1f8f99e 100644 --- a/perl-IO-Socket-SSL.spec +++ b/perl-IO-Socket-SSL.spec @@ -6,14 +6,14 @@ %bcond_without perl_IO_Socket_SSL_test_IO_Socket_INET6 Name: perl-IO-Socket-SSL -Version: 2.077 +Version: 2.078 Release: 1%{?dist} Summary: Perl library for transparent SSL License: (GPL-1.0-or-later OR Artistic-1.0-Perl) AND MPL-2.0 URL: https://metacpan.org/release/IO-Socket-SSL Source0: https://cpan.metacpan.org/modules/by-module/IO/IO-Socket-SSL-%{version}.tar.gz Patch0: IO-Socket-SSL-2.076-use-system-default-cipher-list.patch -Patch1: IO-Socket-SSL-2.076-use-system-default-SSL-version.patch +Patch1: IO-Socket-SSL-2.078-use-system-default-SSL-version.patch # A test for Enable-Post-Handshake-Authentication-TLSv1.3-feature.patch, # bug #1632660, requires openssl tool Patch2: IO-Socket-SSL-2.066-Test-client-performs-Post-Handshake-Authentication.patch @@ -126,6 +126,11 @@ make test %{_mandir}/man3/IO::Socket::SSL::PublicSuffix.3* %changelog +* Mon Dec 12 2022 Paul Howarth - 2.078-1 +- Update to 2.078 + - Revert decision from 2014 to not verify hostname by default if hostname is + IP address but no explicit verification scheme given (GH#121) + * Mon Nov 21 2022 Paul Howarth - 2.077-1 - Update to 2.077 - Fix memory leak in session cache (GH#118) diff --git a/sources b/sources index e794cbd..41c376a 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (IO-Socket-SSL-2.077.tar.gz) = 35cce55adbe9871166e42cc20041a17c7eab9ecfd8232ab80d087177108c67a7c98e381a8446a48a5d36ccf9c49f84a7e451eb0c2897c788645695467705ea53 +SHA512 (IO-Socket-SSL-2.078.tar.gz) = ff801b65c1eaed7570db767f1e3b071c374914230af0bd55cba5869afad14eff03f5bc02181200d742963f1fa7be6dbc21c9861e08b4d382a6a0e79e1e7dadc1