sispmctl: Change URL to HTTPS

dovecot: explicitly disable use of sodium

uwsgi-cgi: improve uwsgi configuration

Signed-off-by: W. Michael Petullo <mike@flyn.org>

avahi: patch systemd runtime_dir change in 0.7

This fix wrong configuration to the luci uwsgi conf

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

lvm2: use explicit run/lock dir defaults

uwsgi: add luci-support package

nut: Add PKG_FIXUP:=autoreconf

The configure scripts for lvm2 guess defaults for run/lock based on if
/run exists on the build host.  Use explicit values for the defaults
for consistency across build hosts.

Signed-off-by: Jeremiah McConnell <miah@miah.com>

In avahi 0.7 the runtime_dir was updated to be /run instead of /var/run
for better systemd compatibility.  Patch out that change to fix
avahi-daemon.

Signed-off-by: Jeremiah McConnell <miah@miah.com>

Signed-off-by: Saverio Proto <zioproto@gmail.com>

opensc: Update to 0.18.0

glpk: Update to 4.65

cryptsetup: Update to 2.0.3

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Add HTTPS too.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gawk: Update to 4.2.1

rtty: Update to 5.0.2

This adds additional specific files to support luci on the nginx

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

libuwsc: update to 2.0.3

rp-pppoe: redo glibc patch

Previous fix broke compilation with kernel < 4.8

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>

Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

EdDSA support is optional and currently defaults to being disabled.

The following security issues are addressed with this update:

  * An error in TSIG handling could permit unauthorized zone transfers
    or zone updates. These flaws are disclosed in CVE-2017-3142 and
    CVE-2017-3143.
  * The BIND installer on Windows used an unquoted service path, which
    can enable privilege escalation. This flaw is disclosed in
    CVE-2017-3141.
  * With certain RPZ configurations, a response with TTL 0 could cause
    named to go into an infinite query loop. This flaw is disclosed in
    CVE-2017-3140.
  * Addresses could be referenced after being freed during resolver
    processing, causing an assertion failure. The chances of this
    happening were remote, but the introduction of a delay in
    resolution increased them. This bug is disclosed in CVE-2017-3145.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

We need to force this since a *.m4 file is patched.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

alpine: Update to 2.21.999 and update URLS

erlang: update to version 19.3, add packages

unbound: 1.7.2 and improve local zone evaluation in UCI

libstrophe: Update to 0.9.2

libnetfilter-acct: Update to 1.0.3

New packages:
* erlang-tools: This Erlang/OTP package provides support for misc tools.
* erlang-reltool: This Erlang/OTP package provides support for release management.
* erlang-erl-interface: This Erlang/OTP package provides support for erlang interoperability with other languages.
* erlang-os_mon: This Erlang/OTP package provides the following services:
  - cpu_sup CPU load and utilization supervision
  - disksup Disk supervision
  - memsup Memory supervision
* erlang-xmerl: This Erlang/OTP package provides functions for exporting XML data to an external format

Signed-off-by: Arnaud Sautaux <arnaud.sautaux@infoteam.ch>

file: Disable libseccomp by default

When UCI local zone is private and static, Unbound covered private
addresses with defaults. Optional delegated global IP6 prefix
protection lacked a static zone, but it was prevented from appearing
in global DNS responses. Domain names router-as-TLD, "lan." and
"local." were static, but they lacked default SOA or NS such as
Unbound had assinged to private addresses. Clean up these local
zones UCI evaluation and block global DNS inclusion.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

A few bug fixes but importantly fix a deadlock on
AXFR configuration when notify occurs (auth-zone:)

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

isc-dhcp: write resolv.conf per network & dhcp settings

Fixes the buildbot. libseccomp is not that useful for file.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

The internal nameservers and the DHCP default domain should be
squirted into /tmp/resolv.conf.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

bluez: Disable printing subsystem rule

Update HAProxy to v1.8.9

acpid: remove depends on TARGET_x86 or TARGET_x86_64

nginx: Package bump to 1.14.0

pcre: Update to 8.42

file: Update to 5.33

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

By default bluez allows the printing subsystem to communicate
via dbus. This refers to the group lp which isn't available
on OpenWrt and makes dbus fail to start.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ariang: dep rework