Fixes at least:

CVE-2017-15710
CVE-2017-15715
CVE-2018-1283
CVE-2018-1312

Added CPE ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched to new upstream at pagure.io.

Refreshed debian patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Simple bump from 4.3 to 4.4

Changelog since 4.3:
netdb not saving to disk (#311)
Fix memory leak when parsing SNMP packet (#313)
Fix several windows build issues (#309)
Certificate fields injection via %D in ERR_SECURE_CONNECT_FAIL (#306)
Allow compilation with minimal OpenSSL (#281)
Fixed %USER_CA_CERT_xx and %USER_CERT_xx crashes (#301)
Improve const correctness for hash_link (#300)
Bug #4893: Malformed %>ru URIs for CONNECT requests (#299)

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

fping: Update to 4.1

stunnel: Update to 5.49

tmux: Update to 2.8

progress: Update to 0.14

nft-qos: add new package

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

golang: Update to 1.11.2, fix build errors

tor-fw-helper: new package

tor-fw-helper is a helper to automatically configuring port forwarding
for tor, using UPnP or NAT-PMP NAT traversal.

This is a tor-fw-helper rewrite in Go that functions as a drop in
replacement for the original C code.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

When installing a newer host Go, be sure to remove the old host Go. Not
doing so causes errors[1] when trying to build target Go.

[1]: https://github.com/openwrt/packages/pull/7194#issuecomment-435948361

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

This is the nftables implementation for qos on OpenWrt,
Currently, it has below features:

* Static QoS : setting limit rate for devices or global network.

* Dynamic/Auto QoS : setting limit rate according to the network
  bandwidth and adjust itself automatically (hotplug event).

* Traffic Priority : this feature is like traffic shaping under tc,
  it uses ingress hook to handle to packets here.

Signed-off-by: Rosy Song <rosysong@rosinson.com>

Switched to codeload for easier package bumping

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove KERNEL_AIO dependency to avoid recursive dependency with libaio in
a future commit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched to codeload for simplicity and easier package bumping.

Rearranged Makefile for consistency with other projects.

All of the patches seem to have been upstreamed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes CVE-2018-18820.

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This will become pointless once OpenSSL 1.1.1 enters the tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libarchive: Update to 3.3.3

django: Update to 1.11.16

libextractor: Update to 1.7

Merged after maintainer timeout. I also successfully compile tested for mxs platform.

Update tmux to 2.8

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update stunnel to 5.49

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Fixed a race condition in QuerySet.update_or_create() that could result in data loss (#29499).

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Update fping to 4.1

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Also remove upstreamed patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

btrfs-progs: Update to 4.19

Signed-off-by: Rosen Penev <rosenp@gmail.com>

fio: Update to 3.12

libyang: update to 0.16-r2

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

obfs4proxy: new packages (including dependencies)

Signed-off-by: Peter Wagner <tripolar@gmx.at>

haveged: update to 1.9.4

Version bump to 1.9.4

Development has moved to github.
 * old site: http://www.issihosts.com/haveged
 * new site: https://github.com/jirka-h/haveged

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

stubby: add reload_config to documentation

stubby: fix loading of config file

spi-tools: Update to 0.8.1

moreutils: Update to 0.62 and switch to git tarball

python-attrs: Update to 18.2.0

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>

Tested with OpenSSL 1.0.2 and 1.1.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>
[minor tweak to add #ifdef HAVE_SSL in host2str.c]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

mxml: update to 2.12

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>