Security and bugfix release.  Full release notes available at:
https://mosquitto.org/blog/2018/11/version-154-released/

Security:
* client certificates not validated for websockets listeners.

Bugfixes:
* wills with disconnected clients better handled
* bridge restart_timeout properly observed

Signed-off-by: Karl Palsson <karlp@etactica.com>

Also updated the URL as the SourceForge page is obsolete.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This adds support for digests in openssl 1.1.1.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libs: file: bump version to 5.35

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

net: squid: bump version to 4.4

libs: libuv: bump version to 1.23.2

utils: sysstat: bump version to 12.0.2

utils: jq: bump version to 1.6

netdata: Update to 1.11.0

libndpi: Add PKG_BUILD_DEPENDS to fix compilation

Signed-off-by: Rosen Penev <rosenp@gmail.com>
[correct configure flag from enable-ssl to enable-openssl]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Change to ut0mt8's fork that contains several enhancements
and bugfixes.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update netdata to 1.11.0

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Most interesting: Use newer CPython API on Python 3, resulting in a 1.5x speedup.

Switched to a standard URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

cyrus-sasl: Fix compilation without deprecated APIs on OpenSSL

It's not even used.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openldap: Backport patch to fix compilation without deprecated APIs

rng-tools: version 6.6 is now available

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

This feature is not needed anymore. This feature is replaced by the
change 46ed09408e

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

This is not necessary.

This reverts commit be91e71805.

unbound: Remove deprecated OpenSSL API

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Work around automake demanding README with a symlink.
Add new dependency on libsysfs.
Avoid dependency on libxml, curl, openssl by disabling NIST beacon support.
  We also continue to remove gcrypt, and jitterentropy is not packaged.
Remove patch that no longer cleanly applies.
  If newlines in log messages are a problem, we should take it up with
  upstream.

Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>

Fixes: github #7303

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

libevhtp: Fix compilation on OpenSSL 1.0.2 without deprecated APIs

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched URL to a proper one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

Also switched to the proper upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This switches monit to use the THREAD API of OpenSSL 1.0.2. This is gone
in 1.1.0 but will be more stable with 1.0.2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python-gnupg: Use a less braindead URL

Passing --disable-gtk-doc-html should fix building in parallel.

Also added some extra flags to speed up build time.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched URL to a sensible one.

Some Makefile rearrangements for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes at least:

CVE-2017-15710
CVE-2017-15715
CVE-2018-1283
CVE-2018-1312

Added CPE ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched to new upstream at pagure.io.

Refreshed debian patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Simple bump from 4.3 to 4.4

Changelog since 4.3:
netdb not saving to disk (#311)
Fix memory leak when parsing SNMP packet (#313)
Fix several windows build issues (#309)
Certificate fields injection via %D in ERR_SECURE_CONNECT_FAIL (#306)
Allow compilation with minimal OpenSSL (#281)
Fixed %USER_CA_CERT_xx and %USER_CERT_xx crashes (#301)
Improve const correctness for hash_link (#300)
Bug #4893: Malformed %>ru URIs for CONNECT requests (#299)

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

fping: Update to 4.1

stunnel: Update to 5.49