From 57d5f945ab66ccc72e5b48a40343ff6169b9893d Mon Sep 17 00:00:00 2001
From: J0WI <J0WI@users.noreply.github.com>
Date: Tue, 20 Nov 2018 20:45:54 +0100
Subject: main/openssl: security upgrade to 1.1.1a - CVE-2018-0734 -
 CVE-2018-0735

---
 main/openssl/APKBUILD | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

(limited to 'main/openssl/APKBUILD')

diff --git a/main/openssl/APKBUILD b/main/openssl/APKBUILD
index ec18c5b8067..57af4f3c881 100644
--- a/main/openssl/APKBUILD
+++ b/main/openssl/APKBUILD
@@ -1,8 +1,8 @@
 # Maintainer: Timo Teras <timo.teras@iki.fi>
 pkgname=openssl
-pkgver=1.1.1
+pkgver=1.1.1a
 _abiver=${pkgver%.*}
-pkgrel=5
+pkgrel=0
 pkgdesc="Toolkit for Transport Layer Security (TLS)"
 url="https://www.openssl.org"
 arch="all"
@@ -12,15 +12,18 @@ makedepends_build="perl"
 makedepends_host="linux-headers"
 makedepends="$makedepends_host $makedepends_build"
 subpackages="$pkgname-dbg $pkgname-dev $pkgname-doc libcrypto$_abiver:_libcrypto libssl$_abiver:_libssl"
-source="https://www.openssl.org/source/openssl-$pkgver.tar.gz
-	0001-Use-secure_getenv-3-when-available.patch
-	"
+source="https://www.openssl.org/source/openssl-$pkgver.tar.gz"
 case "$CARCH" in
 s390x) options="$options !check";; # FIXME: test hangs
 esac
 
 builddir="$srcdir/openssl-$pkgver"
 
+# secfixes:
+#   1.1.a-r0:
+#     - CVE-2018-0734
+#     - CVE-2018-0735
+
 build() {
 	local _target _optflags
 	cd "$builddir"
@@ -95,5 +98,4 @@ _libssl() {
 	done
 }
 
-sha512sums="c0284a4fe84bdf765ca5bc5148da4441ffc36392cfecaf9d372af00cf93b6de5681cab1248b6f8246474532155dc205da5ad49549ad7c61c07c917145e7c9c71  openssl-1.1.1.tar.gz
-a4c809c23322fd1f8c40da9ce0c0ed6e1c58e47284087b6994322a7db70bbb2dc1ebed738b69dbebeed1eb6d0afccee12c48df78d0b7aa3f527b0007b624663d  0001-Use-secure_getenv-3-when-available.patch"
+sha512sums="1523985ba90f38aa91aa6c2d57652f4e243cb2a095ce6336bf34b39b5a9b5b876804299a6825c758b65990e57948da532cca761aa12b10958c97478d04dd6d34  openssl-1.1.1a.tar.gz"
-- 
cgit v1.2.3