From 4bb02b09003b63e5aa9c4d9be68117e15e663c00 Mon Sep 17 00:00:00 2001
From: J0WI <J0WI@users.noreply.github.com>
Date: Wed, 6 Mar 2019 16:48:08 +0100
Subject: main/openssl: security update to patch CVE-2019-1543

---
 main/openssl/APKBUILD | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

(limited to 'main/openssl/APKBUILD')

diff --git a/main/openssl/APKBUILD b/main/openssl/APKBUILD
index c631ed740a3..55958c76783 100644
--- a/main/openssl/APKBUILD
+++ b/main/openssl/APKBUILD
@@ -2,7 +2,7 @@
 pkgname=openssl
 pkgver=1.1.1b
 _abiver=${pkgver%.*}
-pkgrel=0
+pkgrel=1
 pkgdesc="Toolkit for Transport Layer Security (TLS)"
 url="https://www.openssl.org"
 arch="all"
@@ -12,7 +12,8 @@ makedepends_build="perl"
 makedepends_host="linux-headers"
 makedepends="$makedepends_host $makedepends_build"
 subpackages="$pkgname-dbg $pkgname-dev $pkgname-doc libcrypto$_abiver:_libcrypto libssl$_abiver:_libssl"
-source="https://www.openssl.org/source/openssl-$pkgver.tar.gz"
+source="https://www.openssl.org/source/openssl-$pkgver.tar.gz
+	CVE-2019-1543.patch"
 case "$CARCH" in
 s390x) options="$options !check";; # FIXME: test hangs
 esac
@@ -20,6 +21,8 @@ esac
 builddir="$srcdir/openssl-$pkgver"
 
 # secfixes:
+#   1.1.1b-r1:
+#     - CVE-2019-1543
 #   1.1.1a-r0:
 #     - CVE-2018-0734
 #     - CVE-2018-0735
@@ -101,4 +104,5 @@ _libssl() {
 	done
 }
 
-sha512sums="b54025fbb4fe264466f3b0d762aad4be45bd23cd48bdb26d901d4c41a40bfd776177e02230995ab181a695435039dbad313f4b9a563239a70807a2e19ecf045d  openssl-1.1.1b.tar.gz"
+sha512sums="b54025fbb4fe264466f3b0d762aad4be45bd23cd48bdb26d901d4c41a40bfd776177e02230995ab181a695435039dbad313f4b9a563239a70807a2e19ecf045d  openssl-1.1.1b.tar.gz
+f11c7b8e938dca3528eee36ddb64421072e1fdd6d5dfc40452f36e2db954b3e9ae888416bb26dc73068a14c94404eb66352e37a988f04ecc08600554eab16c99  CVE-2019-1543.patch"
-- 
cgit v1.2.3