Add OpenSSL security fix

Properly initialize a data structure in OpenSSL to
avoid valgrind uninitialized value errors.

was r11627.

chapter01/changelog.xml

@@ -57,6 +57,11 @@
     <listitem>
       <para>2019-06-16</para>
       <itemizedlist>
+        <listitem>
+          <para>[bdubbs] - Properly initialize a data structure in
+          OpenSSL to avoid valgrind uninitialized value errors. Fixes
+          <ulink url="&lfs-ticket-root;4491">#4491</ulink>.</para>
+        </listitem>
         <listitem>
           <para>[bdubbs] - Update to meson-0.51.0. Fixes
           <ulink url="&lfs-ticket-root;4483">#4483</ulink>.</para>

chapter06/openssl.xml

@@ -46,6 +46,11 @@
   <sect2 role="installation">
     <title>安装 OpenSSL</title>
 
+    <para>首先，修复上游发现的一个问题：</para>
+
+<screen><userinput remap="pre">sed -i '/\} data/s/ =.*$/;\n    memset(\&amp;data, 0, sizeof(data));/' \
+  crypto/rand/rand_lib.c</userinput></screen>
+
     <para>准备安装 OpenSSL：</para>
 
 <screen><userinput remap="configure">./config --prefix=/usr         \