Fixes all CVEs as well as a few more.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

tcpreplay: bump to version 4.3.0

knot: update to 2.7.4

libpfring: Fix compilation when missing lex

mwan3: remove deprecated options

libsoup: fix intltool host dependency. Cleaup some build args

Run-tested on target brcm2708 [brcm2709 sub-target].
Running on OpenWrt master:
  278e4eba09

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

motion: Update to 4.2

Buildbots are missing lex, which is normally a symlink to flex. This
solution is used elsewhere in the package but missing here.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Ted Hess <thess@kitschensync.net>

mariadb: security bump to 10.2.19

Many, many bug fixes, see release notes for details:
https://mariadb.com/kb/en/library/mariadb-10219-release-notes/

Fixed CVEs:

  CVE-2018-3282
  CVE-2016-9843
  CVE-2018-3174
  CVE-2018-3143
  CVE-2018-3156
  CVE-2018-3251
  CVE-2018-3185
  CVE-2018-3277
  CVE-2018-3162
  CVE-2018-3173
  CVE-2018-3200
  CVE-2018-3284

OpenWrt package changes:

  - include sha256_password in libmariadb package
  - upstream provided new pkgconfig file libmariadb.pc
  - refreshed one patch, dropped two others (included in upstream source
    now)

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

keepalived: add ipvs uci support

clamsmtp: Really fix compilation

ffmpeg: Add choices to libffmpeg-custom to select and build CLI programs

CircleCI: Fix URL references to openwrt.org

Signed-off-by: Ted Hess <thess@kitschensync.net>

Add to ubus the missing output information "policies" which could already
be observed with the command "mwan3 status".

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>

Update nano to version 3.2

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

It seems Linux headers are broken/incompatible with musl for some reason.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

apache: Disable Managed Domain handling

This is a new feature that requires new dependencies. Disable it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

opus-tools: bump to 0.2

Adding new deps libopusfile and libopusenc, provided
by e9bbfacf0a and
a638dfa37b, respectively.

Changing maintainer as accorded with @thess.

Signed-off-by: Eduardo Abinader <eduardoabinader@gmail.com>

sysrepo: update to 0.7.6

nft-qos: replace input chain with prerouting for monitor and dynamic

pillow: Update to 5.3.0

pytz: Update to 2018.7 and add host build

Add uci ipvs support to keepalived.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

new dep on opus-tools a638dfa37b

Signed-off-by: Eduardo Abinader <eduardoabinader@gmail.com>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Samuel Progin <samuel.progin@gmail.com>

Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Rosy Song <rosysong@rosinson.com>

Add postproc to libffmpeg-custom if x264 selected

Signed-off-by: Ted Hess <thess@kitschensync.net>

ffmpeg: Resolve libx264, BUILD_PATENTED anomalies

libx264 will be included in both hard & soft float libffmpeg-full builds if selected
and BUILD_PATENTED=y. Otherwise, it is not included in libffmpeg-full

Signed-off-by: Ted Hess <thess@kitschensync.net>

mc: disable vfs support by default

* disable vfs support by default as long as the underlying
  librpc issus has not been fixed - should fix buildbot compile
  (#7180 #7349)

Signed-off-by: Dirk Brenken <dev@brenken.org>

nginx: Bump to latest release

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

banip: new package to block incoming & outgoing ip addresses

dovecot: update to 2.3.3

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

python-gnupg: Fix build breakage

uw-imap: Fix compilation without deprecated APIs for OpenSSL

dovecot: Fix compilation for OpenSSL without deprecated APIs

Apparently := doesn't work here. Why it doesn't should be investigated but for now fix it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>