fixes #5191
fixes #6486

ref #5191
ref #6486

Daniel Sabogal authored 8 years ago and Timo Teräs committed 8 years ago

CVE-2016-8674
CVE-2016-6525 (patch removed)
CVE-2016-6265 (patch removed)

Daniel Sabogal authored 8 years ago and Timo Teräs committed 8 years ago

CVE-2016-8568
CVE-2016-8569

Stefan Wagner authored 8 years ago and Jakub Jirutka committed 8 years ago

Last commit didn't bump pkgrel, but package needs rebuild.
Also added missing patch in source.

ref #6484

We want to avoid ca-certificates dependency for openssl tool for
two reasons:
- it is very large to be mandatory dependency
- it disallows user choosing if openssl or libressl package
  should be installed

Neither the openssl c_rehash nor libressl certhash can be any longer
compiled standalone. So include the original c_rehash.c code that
was submitted for openssl inclusion that can be built standalone.

the users of this should be using now libressl's certhash. and
c_rehash is planned to be moved to ca-certificates so it can
avoid dependency on libressl main package.

ref: https://github.com/alpinelinux/aports/pull/506