Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Fixes CVE-2017-7233 and CVE-2017-7234

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

* Update LAME to 3.100

* Switch to shared library instead of static binary as it adds very little
  overhead if you only need LAME binary but saves space if you need both
  library and binary.

  Static / Shared:
  LAME binary: ~252kbyte / ~72kbyte - IPK: ~138kbyte / ~34kbyte
  LAME library: ~216kbyte / ~216kbyte - IPK: ~117kbyte / ~117kbyte

* Drop patch, not needed

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

sudo: update to 1.8.21p2

vim: bump to 8.0.586

at: bump version

Signed-off-by: Phil Eichinger <phil@zankapfel.net>

Update libuv to version 1.15.0

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Upgrade vim to version 8.0.586

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Some users might create a minidlna root with symlinks
to shared locations. While this could potentially create
a vulnerability, the option should be available to allow
users to do this should they choose to.

wide_links=no : (default) no content served + error message
 [timestamp] upnphttp.c:1366: error: Rejecting wide link X

wide_links=yes : content served, no error messages

Signed-off-by: James Christopher Adduono <jc@adduono.com>

Perl move -rdynamic

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

commit gpg keys into the repo (it sometimes timeout)
trust the keys ultimately

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

The standard way to pass -rdynamic (or -Wl,--dynamic-export) is via
the $ccdlflags variable.  Do what is best practice.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Originally as PR #2383 but rewritten.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>

Update libpng to 1.6.32
Add ARM NEON optimization

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

qrencode:  Update to 4.0.0

Adds a minor patch to optionally omit the XML tag when including svg inline.
Singed-off-by: Jonathan Bennett <JBennett@Incomsystems.biz>

wireguard: drop wireguard

Fwknopd: Bump PKG_RELEASE and minor fix

An unneccesary include in the init file was causing problems when using the package builder.
Signed-off-by: Jonathan Bennett <JBennett@incomsystems.biz>

fwknop: Add start-up dependency on network interface for fwknopd.

ibgphoto2 and gphoto2: Update to 2.5.16 and 2.5.15

python-lxml: update to version 4.1.0

tcpreplay: update to version 4.2.5

noddos: noddos v0.5.3

Signed-off-by: Steven Hessing <steven.hessing@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

WireGuard was added to LEDE core. See discussion at
lede-project/source#1409

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

bash: version bump to 4.4.12

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Leonardo Medici <leonardo_medici@me.com>

Signed-off-by: Leonardo Medici <leonardo_medici@me.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

- to fix  #4606 we disable to lua build for haproxy
   depending on CONFIG_mips = y

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

- update lua to 5.3.4

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

- fix CVE-2017-9798
 - fix #4926
  make http2 support configurable, in case of enables libnghttp2
  package dont build http2. instead use CONFIG_APACHE_HTTP2 to
  enable http2 support

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>

minidlna: update to version 1.2.1

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

unbound: update to 1.6.7

btrfs-progs: Update to 4.13.2

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

Tested on mt7621 (ramips).

Signed-off-by: Rosen Penev <rosenp@gmail.com>