diff -Nru xchat-2.8.8/debian/changelog xchat-2.8.8/debian/changelog --- xchat-2.8.8/debian/changelog 2012-02-23 19:27:49.000000000 +0000 +++ xchat-2.8.8/debian/changelog 2014-10-20 15:56:30.000000000 +0000 @@ -1,3 +1,12 @@ +xchat (2.8.8-3ubuntu12.1) precise; urgency=medium + + * Don't force the use of SSLv3 (LP: #1381484) + - debian/patches/dont_force_sslv3.patch: use SSLv23_client_method() + so the best method gets automatically negotiated in + src/common/ssl.c. + + -- Marc Deslauriers Mon, 20 Oct 2014 11:56:17 -0400 + xchat (2.8.8-3ubuntu12) precise; urgency=low * debian/patches/75_apturl-support.dpatch: diff -Nru xchat-2.8.8/debian/patches/dont_force_sslv3.patch xchat-2.8.8/debian/patches/dont_force_sslv3.patch --- xchat-2.8.8/debian/patches/dont_force_sslv3.patch 1970-01-01 00:00:00.000000000 +0000 +++ xchat-2.8.8/debian/patches/dont_force_sslv3.patch 2014-10-20 15:56:13.000000000 +0000 @@ -0,0 +1,32 @@ +Description: Don't force the use of SSLv3 +Author: Marc Deslauriers +Bug: http://sourceforge.net/p/xchat/bugs/1598/ +Bug-Ubuntu: https://bugs.launchpad.net/xchat-gnome/+bug/1381484 +Forwarded: yes + +--- + src/common/ssl.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +Index: b/src/common/ssl.c +=================================================================== +--- a/src/common/ssl.c ++++ b/src/common/ssl.c +@@ -70,7 +70,7 @@ _SSL_context_init (void (*info_cb_func), + + SSLeay_add_ssl_algorithms (); + SSL_load_error_strings (); +- ctx = SSL_CTX_new (server ? SSLv3_server_method() : SSLv3_client_method ()); ++ ctx = SSL_CTX_new (server ? SSLv23_server_method() : SSLv23_client_method ()); + + SSL_CTX_set_session_cache_mode (ctx, SSL_SESS_CACHE_BOTH); + SSL_CTX_set_timeout (ctx, 300); +@@ -281,7 +281,7 @@ _SSL_socket (SSL_CTX *ctx, int sd) + __SSL_critical_error ("SSL_new"); + + SSL_set_fd (ssl, sd); +- if (ctx->method == SSLv3_client_method()) ++ if (ctx->method == SSLv23_client_method()) + SSL_set_connect_state (ssl); + else + SSL_set_accept_state(ssl); diff -Nru xchat-2.8.8/debian/patches/series xchat-2.8.8/debian/patches/series --- xchat-2.8.8/debian/patches/series 2012-02-23 19:25:26.000000000 +0000 +++ xchat-2.8.8/debian/patches/series 2014-10-20 15:56:13.000000000 +0000 @@ -21,3 +21,4 @@ 73_libnotify07.patch 74_xchat_glib_2.31.patch 75_apturl.patch +dont_force_sslv3.patch