diff --git a/disable-optimization-for-ripemd.diff b/disable-optimization-for-ripemd.diff
new file mode 100644
index 0000000..2c304c1
--- /dev/null
+++ b/disable-optimization-for-ripemd.diff
@@ -0,0 +1,11 @@
+--- crypto/ripemd/Makefile
++++ crypto/ripemd/Makefile
+@@ -13,7 +13,7 @@
+ 
+ RIP_ASM_OBJ=
+ 
+-CFLAGS= $(INCLUDES) $(CFLAG)
++CFLAGS= $(INCLUDES) $(CFLAG) -O0
+ ASFLAGS= $(INCLUDES) $(ASFLAG)
+ AFLAGS= $(ASFLAGS)
+ 
diff --git a/func-parm-err.patch b/func-parm-err.patch
index ad7bbfb..9d4efa5 100644
--- a/func-parm-err.patch
+++ b/func-parm-err.patch
@@ -1,8 +1,8 @@
 Index: openssl-0.9.8h/crypto/x509/x509_att.c
-===================================================================
---- openssl-0.9.8h.orig/crypto/x509/x509_att.c
+================================================================================
+--- openssl-0.9.8h/crypto/x509/x509_att.c
 +++ openssl-0.9.8h/crypto/x509/x509_att.c
-@@ -305,7 +305,7 @@ int X509_ATTRIBUTE_set1_data(X509_ATTRIB
+@@ -305,7 +305,7 @@
  	if(!(ttmp = ASN1_TYPE_new())) goto err;
  	if (len == -1)
  		{
diff --git a/openssl.changes b/openssl.changes
index d835e82..cc538eb 100644
--- a/openssl.changes
+++ b/openssl.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Nov 10 10:22:04 CET 2008 - xwhu@suse.de
+
+- Disable optimization of ripemd [bnc#442740] 
+
 -------------------------------------------------------------------
 Tue Oct 14 09:08:47 CEST 2008 - xwhu@suse.de
 
diff --git a/openssl.spec b/openssl.spec
index 388e68a..55414f0 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -27,7 +27,7 @@ Group:          Productivity/Networking/Security
 Provides:       ssl
 AutoReqProv:    on
 Version:        0.9.8h
-Release:        27
+Release:        28
 Summary:        Secure Sockets and Transport Layer Security
 Url:            http://www.openssl.org/
 Source:         http://www.%{name}.org/source/%{name}-%{version}.tar.bz2
@@ -43,6 +43,7 @@ Patch5:         openssl-0.9.6g-alpha.diff
 Patch6:         openssl-0.9.8a.ca-app-segfault.bug128655.dif
 Patch7:         bswap.diff
 Patch8:         func-parm-err.patch
+Patch9:         disable-optimization-for-ripemd.diff
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
@@ -169,6 +170,7 @@ Authors:
 %patch6 -p1
 %patch7
 %patch8 -p1
+%patch9 
 cp -p %{S:10} .
 # lib64 installation fixes
 for i in Makefile.org engines/Makefile; do
@@ -380,6 +382,8 @@ if ! test -f /.buildenv; then rm -rf $RPM_BUILD_ROOT; fi
 %{_bindir}/%{name}
 
 %changelog
+* Mon Nov 10 2008 xwhu@suse.de
+- Disable optimization of ripemd [bnc#442740]
 * Tue Oct 14 2008 xwhu@suse.de
 - Passing string as struct cause openssl segment-fault [bnc#430141]
 * Wed Jul 16 2008 mkoenig@suse.de
@@ -761,7 +765,7 @@ if ! test -f /.buildenv; then rm -rf $RPM_BUILD_ROOT; fi
 - remove unneeded PreRequires
 * Tue Nov 18 2003 poeml@suse.de
 - ditch annoying mail to root about moved locations [#31969]
-* Thu Aug 14 2003 poeml@suse.de
+* Wed Aug 13 2003 poeml@suse.de
 - enable profile feedback based optimizations (except AES which
   becomes slower)
 - add -fno-strict-aliasing, due to warnings about code where
@@ -776,9 +780,9 @@ if ! test -f /.buildenv; then rm -rf $RPM_BUILD_ROOT; fi
   keep the stripped information somewhere
 * Tue Jul 15 2003 meissner@suse.de
 - -DMD32_REG_T=int for ppc64 and s390x.
-* Fri Jul 11 2003 poeml@suse.de
+* Thu Jul 10 2003 poeml@suse.de
 - update ibm ICA patch to 20030708 release (libica-1.3)
-* Tue May 13 2003 poeml@suse.de
+* Mon May 12 2003 poeml@suse.de
 - package the openssl.pc file for pkgconfig
 * Wed Apr 16 2003 poeml@suse.de
 - update to 0.9.7b. The most significant changes are:
@@ -873,7 +877,7 @@ if ! test -f /.buildenv; then rm -rf $RPM_BUILD_ROOT; fi
 * Tue Aug 06 2002 draht@suse.de
 - Correction for changes in the ASN1 code, assembled in
   openssl-0.9.6e-cvs-20020802-asn1_lib.diff
-* Thu Aug 01 2002 poeml@suse.de
+* Wed Jul 31 2002 poeml@suse.de
 - update to 0.9.6e. Major changes:
   o Various security fixes (sanity checks to asn1_get_length(),
   various remote buffer overflows)
@@ -920,7 +924,7 @@ if ! test -f /.buildenv; then rm -rf $RPM_BUILD_ROOT; fi
   sparcs (sun4[mdu]) are recognized as linux-sparcv7
 * Wed Feb 06 2002 kukuk@suse.de
 - Remove crypt function from libcrypto.so.0 [Bug #13056]
-* Mon Feb 04 2002 poeml@suse.de
+* Sun Feb 03 2002 poeml@suse.de
 - add settings for mips to build shared objects
 - print out all settings to the build log
 * Tue Jan 29 2002 poeml@suse.de
@@ -962,7 +966,7 @@ if ! test -f /.buildenv; then rm -rf $RPM_BUILD_ROOT; fi
 - Fix ppc and s390 shared library builds
 - resolved conflict in manpage naming:
   rand.3 is now sslrand.3 [BUG#7643]
-* Wed May 02 2001 schwab@suse.de
+* Tue May 01 2001 schwab@suse.de
 - Fix ia64 configuration.
 - Fix link command.
 * Thu Apr 26 2001 bjacke@suse.de
@@ -988,7 +992,7 @@ if ! test -f /.buildenv; then rm -rf $RPM_BUILD_ROOT; fi
 - Make sure that LD_LIBRARY_PATH is passed down to sub-makes.
 * Mon Oct 02 2000 rolf@suse.de
 - update to 0.9.6
-* Tue Apr 11 2000 bk@suse.de
+* Mon Apr 10 2000 bk@suse.de
 - fix support for s390-linux
 * Mon Apr 10 2000 rolf@suse.de
 - new version 0.9.5a