MarkupSafe: Makefile polishing and add src package

zeromq: update to version 4.1.7 (security fix)

expat: update to version 2.2.7 (security fix)

pcre: remove unnecessary dependency on C++ lib

pdns-recursor: bump version to 4.2.0

prometheus: Fix build for mips64/mips64el

kea: remove python3 dependency of kea-admin

python-egenix-mx-base: Makefile polishing

haproxy: Get rid of bashisms from get-latest-patches.sh

Plus some other shellcheck cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Bash is not needed here. These scripts are POSIX compliant.

This was originally added as the configure script looks for /bin/bash
locally. Passing gl_cv_posix_shell overrides this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixed a typo in tcpreplay.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

cifsd

libxslt: patch security issues

Decompression speedup of 7% on average.

Remove upstreamed uClibc-ng patch.

Fixed optimization option to show properly under menuconfig.

Added LTO for smaller size.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes several issues, including a restart bug and compilation on kernel
4.9.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Main warning fixed was about echo -e not being supported by POSIX sh.

Added PKG_BUILD_PARALLEL for slightly faster compilation.

Small whitespace cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

netifyd: Don't build on uClibc-ng

io: Open /dev/mem with O_SYNC for uncached access

Fixes:
CVE-2019-13117
CVE-2019-13118

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Only when /dev/mem is opened with O_SYNC the write and *read* is done
uncached. We saw wrong values read out from the hardware without setting
O_SYNC, the busybox devmem tool showed different values, when O_SYNC is
also set for the io tool, it reads out the same values as devmem.
When looking at the drivers/char/mem.c file in the kernel it is behaving
differently based on the O_DSYNC flag.

Signed-off-by: Hauke Mehrtens <hauke.mehrtens@intel.com>

- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>

This absolutely needs symbols from libresolv, which uClibc-ng does not
support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

fix #9495

Signed-off-by: Rosy Song <rosysong@rosinson.com>

opendkim: Fix compilation with uClibc-ng

Changes:
remove backported patches
add bsdtar libopenssl variant
switch to github codeload
polish tab/spaces

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Maintainer: me

This commit bumps the version of pdns-recursor to the latest 4.2.0. This release brings in mostly minor changes, with the full changelog available at https://doc.powerdns.com/recursor/changelog/4.2.html

Signed-off-by: James Taylor <james@jtaylor.id.au>

Add libpcrecpp to PKG_CONFIG_DEPENDS to properly trigger
reconfiguration, avoiding unnecessary dependency.

This reverts commit 17090fecf1.
This reverts commit ec138f51ab.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>

Small cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python: cachelib package added

Prometheus uses an older version of fsnotify, which uses a system call
(unix.InotifyInit) that is not implemented for mips64/mips64el.

This patches Prometheus to use a newer version of fsnotify that uses a
different system call (unix.InotifyInit1) that should be available on
all Linux systems.

Fixes #9494.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

rtorrent bump

Switch to codeload. A lot simpler.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

No actual difference. Just regenerated documentation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Removed upstreamed patches.

Small change to IPv6 configure flag.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

sqlite3: bump to 3.29.0

softethervpn: Update to rtm version 4.29-9680

python,python3: Fix ctypes.util.find_library()

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

domoticz: Fix compilation without deprecated OpenSSL APIs

apfree-wifidog: Run init script through shellcheck

Python's ctypes.util.find_library() function currently doesn't work for
musl libraries/systems[1].

This adds a patch to fix this function, based on a patch from Alpine
Linux[2].

Fixes #9448.

[1]: https://bugs.python.org/issue21622
[2]: https://git.alpinelinux.org/aports/tree/main/python2/musl-find_library.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

samba4: revert to 4.9.11

* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

No such issue with uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nss: Replace usleep with nanosleep

libreswan: Replace usleep with nanosleep

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>