main/openssl: security upgrade to 1.0.2q - CVE-2018-0734 - CVE-2018-5407

main/openssl/APKBUILD

 # Maintainer: Timo Teras <timo.teras@iki.fi>
 pkgname=openssl
-pkgver=1.0.2p
+pkgver=1.0.2q
 pkgrel=0
 pkgdesc="Toolkit for SSL v2/v3 and TLS v1"
-url="http://openssl.org"
+url="https://openssl.org"
 depends=
 makedepends_build="perl"
 makedepends_host="zlib-dev"
@@ -14,7 +14,7 @@ license="openssl"
 
 subpackages="$pkgname-dev $pkgname-doc libcrypto1.0:libcrypto libssl1.0:libssl"
 
-source="http://www.openssl.org/source/${pkgname}-${pkgver}.tar.gz
+source="https://www.openssl.org/source/${pkgname}-${pkgver}.tar.gz
 	0002-busybox-basename.patch
 	0003-use-termios.patch
 	0004-fix-default-ca-path-for-apps.patch
@@ -72,6 +72,9 @@ source="http://www.openssl.org/source/${pkgname}-${pkgver}.tar.gz
 #     - CVE-2018-0732
 #   1.0.2o-r2:
 #     - CVE-2018-0737
+#   1.0.2q-r0:
+#     - CVE-2018-0734
+#     - CVE-2018-5407
 
 _builddir="$srcdir"/$pkgname-$pkgver
 
@@ -157,7 +160,7 @@ libssl() {
 	done
 }
 
-sha512sums="958c5a7c3324bbdc8f07dfb13e11329d9a1b4452c07cf41fbd2d42b5fe29c95679332a3476d24c2dc2b88be16e4a24744aba675a05a388c0905756c77a8a2f16  openssl-1.0.2p.tar.gz
+sha512sums="403e6cad42db3ba860c3fa4fa81c1b7b02f0b873259e5c19a7fc8e42de0854602555f1b1ca74f4e3a7737a4cbd3aac063061e628ec86534586500819fae7fec0  openssl-1.0.2q.tar.gz
 2244f46cb18e6b98f075051dd2446c47f7590abccd108fbab707f168a20cad8d32220d704635973f09e3b2879f523be5160f1ffbc12ab3900f8a8891dc855c5c  0002-busybox-basename.patch
 58e42058a0c8086c49d681b1e226da39a8cf8cb88c51cf739dec2ff12e1bb5d7208ac5033264b186d58e9bdfe992fe9ddb95701d01caf1824396b2cefe30c0a4  0003-use-termios.patch
 c67472879a31b5dbdd313892df6d37e7c93e8c0237d406c30d50b1016c2618ead3c13277f5dc723ef1ceed092d36e3c15a9777daa844f59b9fa2b0a4f04fd9ae  0004-fix-default-ca-path-for-apps.patch