Hello community, here is the log from the commit of package libzypp for openSUSE:Factory checked in at 2015-04-10 09:47:25 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libzypp (Old) and /work/SRC/openSUSE:Factory/.libzypp.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libzypp" Changes: -------- --- /work/SRC/openSUSE:Factory/libzypp/libzypp.changes 2015-04-06 00:24:41.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.libzypp.new/libzypp.changes 2015-04-10 09:47:27.000000000 +0200 @@ -1,0 +2,7 @@ +Thu Apr 2 19:06:56 CEST 2015 - ma@suse.de + +- POODLE: libzypp should only talk TLS (bnc#903405) +- Bump major version for Factory, 14.x is continued on SuSE-SLE-12-Branch +- version 15.0.0 (0) + +------------------------------------------------------------------- Old: ---- libzypp-14.38.1.tar.bz2 New: ---- libzypp-15.0.0.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libzypp.spec ++++++ --- /var/tmp/diff_new_pack.4K9lYQ/_old 2015-04-10 09:47:28.000000000 +0200 +++ /var/tmp/diff_new_pack.4K9lYQ/_new 2015-04-10 09:47:28.000000000 +0200 @@ -19,7 +19,7 @@ %define force_gcc_46 0 Name: libzypp -Version: 14.38.1 +Version: 15.0.0 Release: 0 Url: git://gitorious.org/opensuse/libzypp.git Summary: Package, Patch, Pattern, and Product Management ++++++ libzypp-14.38.1.tar.bz2 -> libzypp-15.0.0.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libzypp-14.38.1/VERSION.cmake new/libzypp-15.0.0/VERSION.cmake --- old/libzypp-14.38.1/VERSION.cmake 2015-04-02 16:03:52.000000000 +0200 +++ new/libzypp-15.0.0/VERSION.cmake 2015-04-02 19:17:12.000000000 +0200 @@ -58,11 +58,11 @@ # - Consider calling ./mkChangelog to assist you. # See './mkChangelog -h' for help. # -SET(LIBZYPP_MAJOR "14") -SET(LIBZYPP_COMPATMINOR "30") -SET(LIBZYPP_MINOR "38") -SET(LIBZYPP_PATCH "1") +SET(LIBZYPP_MAJOR "15") +SET(LIBZYPP_COMPATMINOR "0") +SET(LIBZYPP_MINOR "0") +SET(LIBZYPP_PATCH "0") # -# LAST RELEASED: 14.38.1 (30) +# LAST RELEASED: 15.0.0 (0) # (The number in parenthesis is LIBZYPP_COMPATMINOR) #======= diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libzypp-14.38.1/package/libzypp.changes new/libzypp-15.0.0/package/libzypp.changes --- old/libzypp-14.38.1/package/libzypp.changes 2015-04-02 16:03:52.000000000 +0200 +++ new/libzypp-15.0.0/package/libzypp.changes 2015-04-02 19:17:12.000000000 +0200 @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Thu Apr 2 19:06:56 CEST 2015 - ma@suse.de + +- POODLE: libzypp should only talk TLS (bnc#903405) +- Bump major version for Factory, 14.x is continued on SuSE-SLE-12-Branch +- version 15.0.0 (0) + +------------------------------------------------------------------- Thu Apr 2 16:01:43 CEST 2015 - ma@suse.de - Fixes to build with gcc5 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/libzypp-14.38.1/zypp/media/MediaCurl.cc new/libzypp-15.0.0/zypp/media/MediaCurl.cc --- old/libzypp-14.38.1/zypp/media/MediaCurl.cc 2014-10-20 14:08:41.000000000 +0200 +++ new/libzypp-15.0.0/zypp/media/MediaCurl.cc 2015-04-02 19:17:12.000000000 +0200 @@ -643,6 +643,8 @@ #endif SET_OPTION(CURLOPT_SSL_VERIFYPEER, _settings.verifyPeerEnabled() ? 1L : 0L); SET_OPTION(CURLOPT_SSL_VERIFYHOST, _settings.verifyHostEnabled() ? 2L : 0L); + // bnc#903405 - POODLE: libzypp should only talk TLS + SET_OPTION(CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1); } SET_OPTION(CURLOPT_USERAGENT, _settings.userAgentString().c_str() );