Security updates for 2020.04.20

user/re2c/APKBUILD

@@ -2,7 +2,7 @@
 # Maintainer: 
 pkgname=re2c
 pkgver=1.3
-pkgrel=0
+pkgrel=1
 pkgdesc="Fast lexer generator for C and C++"
 url="http://re2c.org/"
 arch="all"
@@ -11,7 +11,13 @@ depends=""
 checkdepends="bash"
 makedepends=""
 subpackages="$pkgname-doc"
-source="https://github.com/skvadrik/re2c/releases/download/$pkgver/$pkgname-$pkgver.tar.xz"
+source="https://github.com/skvadrik/re2c/releases/download/$pkgver/$pkgname-$pkgver.tar.xz
+	CVE-2020-11958.patch
+	"
+
+# secfixes:
+#   1.3-r1:
+#     - CVE-2020-11958
 
 build() {
 	./configure \
@@ -32,4 +38,5 @@ package() {
 	make DESTDIR="$pkgdir" install
 }
 
-sha512sums="c7084ab2399fb6b96cef74c1393715d90830f43b82b96af46feb71ef008c0215381c3dbea0b003ff810d869db6021e28001b9d588ad55c616642244b2da09c0e  re2c-1.3.tar.xz"
+sha512sums="c7084ab2399fb6b96cef74c1393715d90830f43b82b96af46feb71ef008c0215381c3dbea0b003ff810d869db6021e28001b9d588ad55c616642244b2da09c0e  re2c-1.3.tar.xz
+f4376b8e0724d500f665fa60dfd6fb35685a281af50c500d2ff90d781a829fb78f21e8c93c5745a4519acd55a62ec48a570dbfacf0a9ee977502e06f3e2e474a  CVE-2020-11958.patch"