- run as an unprivileged user by default
- move generated config to /var/run (/tmp/run in fact)
- disable service until it's configured: there is no way to reliably guess
  where files to be shared are located

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

freeradius3: allow build without openssl engines

aria2: Add new options and fix typos

i2pd: Update to 2.23.0, fix #7845 and #8088

jq: compile with _GNU_SOURCE (fixes #7785)

fdm: Update to 2.0

czmq: add new package

ssdeep: add new package

measurement-kit: add new package

aggregate: respect CFLAGS, LDFLAGS

bonnie++: Update to 1.98

moreutils: Update to 0.63

nft qos: fix missing semicolon and document improvement

graphicsmagick: optimize compilation to reduce size

bcrypt: Update to 3.1.6

libinput: Add missing header to fix compilation

Signed-off-by: Rosy Song <rosysong@rosinson.com>

Signed-off-by: Rosy Song <rosysong@rosinson.com>

nft-qos: Update init script

knot: update to 2.8.0

Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>

When the server hostname resolved to both IPv4 and IPv6 addresses,
connecting would fail with nothing in syslog. This corrects that oversight.

Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

travelmate: bugfix 1.4.1

v4l2rtspserver: simplify build using release 0.1.6

git is intollerant when it comes to fuzz. this fixes it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

syslog-ng: superseded current maintainer by me

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Josef Schlehofer <josef.schlehofer@nic.cz>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Xingwang Liao <kuoruan@gmail.com>

This change updates Python to version 2.7.16, which is a bugfix release
in the Python 2.7 series.
This also removes patches back-ported from upstream.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

* use gunicorn instead of Flask for main server threads
 * generate and deploy random database password
 * provide distribution files

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

* fix for #8357
* fix unexpectedy calling option_cb() during wireless config_load
* react immediately when the current active uplink connection
  gets deleted

Signed-off-by: Dirk Brenken <dev@brenken.org>

telldus-core: Add new package.

net/stunnel: Update to 5.50

spoofer: Update to 1.4.3

Signed-off-by: Rosen Penev <rosenp@gmail.com>

attendedsyuspgrade-common: add key and set server

spotted on buildbot trying postgresql/host build:
configure: error: zlib library not found

Fix this by adding zlib/host to HOST_BUILD_DEPENDS.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Update stunnel to 5.50
Remove --disable-fips switch as it's disabled by default

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

In collaboration with @dangowrt the server makes use of `ucert`.  Active
workers sign created firmware and clients check if the signature is
valid. Certs of *hacked* or inactive workers can be revoked.  Private CA
key is **not** stored on the upgrade server.

Only for devices already supporting ucert via firmware metadata.

Signed-off-by: Paul Spooren <mail@aparcar.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Includes removal of patches that are now integrated upstream.
Signed-off-by: Ken Keys <kkeys@caida.org>