PaulHowarth/Blog/2012-05-07

Monday 7th May 2012

Fedora Project

  • Rebuilt imlib for the new libtiff in Rawhide

Local Packages

  • Updated perl-IO-Socket-SSL to 1.68:

    • Changes for CPAN RT#76929:

      • If no explicit cipher list is given, default to ALL:!LOW instead of the openssl default, which usually includes weak ciphers like DES

      • New config key SSL_honor_cipher_order and document how to use it to fight BEAST attack

      • Fix behaviour for empty cipher list (use default)
  • I had to re-introduce the workaround for failing t/dhe.t with OpenSSL 1.0.1 (CPAN RT#75165, CPAN RT#76929) for this build


Recent