[pkgsrc/trunk]: pkgsrc/security/openssl Upgrade to OpenSSL 1.0.2u

[sevan <sevan%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/0a96147196fb
branches:  trunk
changeset: 407237:0a96147196fb
user:      sevan <sevan%pkgsrc.org@localhost>
date:      Thu Jan 02 20:31:05 2020 +0000

description:
Upgrade to OpenSSL 1.0.2u

Major changes between OpenSSL 1.0.2t and OpenSSL 1.0.2u [20 Dec 2019]

Fixed an an overflow bug in the x64_64 Montgomery squaring procedure used
in exponentiation with 512-bit moduli (CVE-2019-1551)

diffstat:

 security/openssl/Makefile |   4 ++--
 security/openssl/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (30 lines):

diff -r ed3a1a630bd6 -r 0a96147196fb security/openssl/Makefile
--- a/security/openssl/Makefile Thu Jan 02 20:23:10 2020 +0000
+++ b/security/openssl/Makefile Thu Jan 02 20:31:05 2020 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.246 2019/11/26 22:22:45 sevan Exp $
+# $NetBSD: Makefile,v 1.247 2020/01/02 20:31:05 sevan Exp $
 
-DISTNAME=      openssl-1.0.2t
+DISTNAME=      openssl-1.0.2u
 CATEGORIES=    security
 MASTER_SITES=  https://www.openssl.org/source/
 
diff -r ed3a1a630bd6 -r 0a96147196fb security/openssl/distinfo
--- a/security/openssl/distinfo Thu Jan 02 20:23:10 2020 +0000
+++ b/security/openssl/distinfo Thu Jan 02 20:31:05 2020 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.135 2019/11/26 22:22:45 sevan Exp $
+$NetBSD: distinfo,v 1.136 2020/01/02 20:31:05 sevan Exp $
 
-SHA1 (openssl-1.0.2t.tar.gz) = 8ac3fd379cf8c8ef570abb51ec52a88fd526f88a
-RMD160 (openssl-1.0.2t.tar.gz) = 60fa7238a3beefb1e95d76de607d69af7198118b
-SHA512 (openssl-1.0.2t.tar.gz) = 0b88868933f42fab87e8b22449435a1091cc6e75f986aad6c173e01ad123161fcae8c226759073701bc65c9f2f0b6ce6a63a61203008ed873cfb6e484f32bc71
-Size (openssl-1.0.2t.tar.gz) = 5355422 bytes
+SHA1 (openssl-1.0.2u.tar.gz) = 740916d79ab0d209d2775277b1c6c3ec2f6502b2
+RMD160 (openssl-1.0.2u.tar.gz) = b8e7e5df9582e29fdd00bd03d47e980a39ba11ab
+SHA512 (openssl-1.0.2u.tar.gz) = c455bb309e20e2c2d47fdc5619c734d107d5c8c38c1409903ce979acc120b0d5fa0312917c0aa0d630e402d092a703d4249643f36078e8528a3cafc9dac6ab32
+Size (openssl-1.0.2u.tar.gz) = 5355412 bytes
 SHA1 (patch-Configure) = 2d963d781314276a0ee1bc531df6bc50f0f6b32b
 SHA1 (patch-Makefile.org) = d2a9295003a8b88718a328b01ff6bcbbc102ec0b
 SHA1 (patch-Makefile.shared) = 273154600c6cf0cf4de4ae16d56c5555bca5f9ad