From eec223036af35046c74baca7b09d6a81aaccbe86 Mon Sep 17 00:00:00 2001
From: Francesco Colista <fcolista@alpinelinux.org>
Date: Tue, 19 Mar 2019 21:45:49 +0000
Subject: main/libssh2: security upgrade to 1.8.1

- CVE-2019-3855
- CVE-2019-3856
- CVE-2019-3857
- CVE-2019-3858
- CVE-2019-3859
- CVE-2019-3860
- CVE-2019-3861
- CVE-2019-3862
- CVE-2019-3863

Fixes #10132
---
 main/libssh2/APKBUILD | 18 +++++++++++++++---
 1 file changed, 15 insertions(+), 3 deletions(-)

diff --git a/main/libssh2/APKBUILD b/main/libssh2/APKBUILD
index 57734b9de4..61f7495736 100644
--- a/main/libssh2/APKBUILD
+++ b/main/libssh2/APKBUILD
@@ -1,8 +1,8 @@
 # Contributor: William Pitcock <nenolod@dereferenced.org>
 # Maintainer: Natanael Copa <ncopa@alpinelinux.org>
 pkgname=libssh2
-pkgver=1.8.0
-pkgrel=1
+pkgver=1.8.1
+pkgrel=0
 pkgdesc="library for accessing ssh1/ssh2 protocol servers"
 url="http://libssh2.org/"
 arch="all"
@@ -13,6 +13,18 @@ subpackages="$pkgname-dbg $pkgname-dev $pkgname-doc"
 source="http://www.libssh2.org/download/libssh2-$pkgver.tar.gz"
 builddir="$srcdir"/libssh2-$pkgver
 
+# security fixes:
+#   1.8.1-r0:
+#     -  CVE-2019-3855
+#     -  CVE-2019-3856
+#     -  CVE-2019-3857
+#     -  CVE-2019-3858
+#     -  CVE-2019-3859
+#     -  CVE-2019-3860
+#     -  CVE-2019-3861
+#     -  CVE-2019-3862
+#     -  CVE-2019-3863
+
 prepare() {
 	cd "$builddir"
 	update_config_sub
@@ -36,4 +48,4 @@ package() {
 	make DESTDIR="$pkgdir" install
 }
 
-sha512sums="289aa45c4f99653bebf5f99565fe9c519abc204feb2084b47b7cc3badc8bf4ecdedd49ea6acdce8eb902b3c00995d5f92a3ca77b2508b92f04ae0e7de7287558  libssh2-1.8.0.tar.gz"
+sha512sums="f09ad9ed04d25305b966e7f8c210082fe06c2b236dcd5018b009bd0bd6aaff123d16559d280892a5060760ed055ffe295bc02dc6e8dd1e7b8383c6c703f09290  libssh2-1.8.1.tar.gz"
-- 
cgit v1.2.3