Fedora does not have a fix for this but Debian does. Took fix from there.

There are two more CVEs as reported by uscan but I can't seem to find
patches for those.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

CVE-2017-1000231 and CVE-2017-1000232.

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Moritz Warning <moritzwarning@web.de>

ariang: add nginx support

sys/socket already includes the needed socket stuff. Including the second
header causes the build to fail.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This adds nginx support for ariang webui and update it to latest commit.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

This is based on earlier work by Tobias Waldvogel.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

* partly revert 9e79e1b to fix #6861
* simplify CURL_SSL detection
* bump package version in Makefile & script library

Signed-off-by: Dirk Brenken <dev@brenken.org>

error: memset' used with length equal to number of elements without
multiplication by element size

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

- Add new patches (see https://www.haproxy.org/bugs/bugs-1.8.13.html)
- Raise PKG_RELEASE to 2

Signed-off-by: Christian Lachner <gladiac@gmail.com>

The buildbot is failing on applying the patch:

https://downloads.openwrt.org/snapshots/faillogs/mipsel_24kc/packages/bluelog/compile.txt

Locally, this does not happen. I assume the reason is that it has some special handling for
GitHub's tar archives where it extracts it to the name in PKG_SOURCE. So adjust that.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Get rid of autoreconf to speed up build.

Fixed project URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Main URL has changed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libiio: add missing dependency to zlib

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

The following error shows that mysqlnd depends on functions
provided by hash:

root@OpenWrt:/etc/php7# php-cli -m
PHP Warning:  PHP Startup: Unable to load dynamic library
'mysqlnd.so' (tried: /usr/lib/php/mysqlnd.so (Error
relocating /usr/lib/php/mysqlnd.so: PHP_SHA256Final: symbol
not found), /usr/lib/php/mysqlnd.so.so (Error loading shared
library /usr/lib/php/mysqlnd.so.so: No such file or
directory)) in Unknown on line 0

So let's model this dep in package metadata.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Martin Schiller <ms@dev.tdt.de>

freetype: Add PKG_CPE_ID for proper CVE tracking

avahi: Add CPE ID to track CVEs

giflib: Add PKG_CPE_ID for proper CVE tracking

ffmpeg: Add CPE ID for proper CVE tracking

flac: Fix CVE-2017-6888

libxml2: Fix CVE-2018-14404

Change maintainer to Rosen Penev as agreed upon
(https://github.com/openwrt/packages/pull/6778#issuecomment-414479840).

Signed-off-by: Jacob Siverskog <jacob@teenage.engineering>

boost: Package Version Update -> 1.68.0

mariadb: bump to 10.2.17

confuse: Update to 3.2.2

dmapd: update to 0.0.76

libdmapsharing: Update to 3.9.2

ola: Update to 0.10.7 and switch to codeload

shadow: Update to 4.6

grilo: Update to 0.3.6

net/stunnel: Update to 5.48

protobuf-c: Update to 1.3.1

linuxptp: Upgrade to v2.0

libuwsc: Update to 2.0.5

The upstream acme.sh package changed to using socat instead of netcat;
update the dependencies to reflect this, and pass --listen-v6 when running
in standalone mode (since socat only listens on IPv4 by default).

Also add a missing cleanup call when certificate issuance fails.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@neratec.com>

gnutls: Add PKG_CPE_ID for proper CVE tracking

From Release Notes:

 - New variable innodb_log_optimize_ddl for avoiding delay due to page flushing and allowing concurrent backup
 - InnoDB updated to 5.7.23
 - ALTER TABLE fixes:
    MDEV-14637 - Fix hang due to DDL with FOREIGN KEY or persistent statistics
    MDEV-15953 - Alter InnoDB Partitioned Table Moves Files (which were originally not in the datadir) to the datadir
    MDEV-16515 - InnoDB: Failing assertion: ++retries < 10000 in file dict0dict.cc line 2737
    MDEV-16809 - Allow full redo logging for ALTER TABLE
 - Temporary tables: MDEV-16713 - InnoDB hang with repeating log entry
 - indexed virtual columns: MDEV-15855 - Deadlock between purge thread and DDL statement
 - locking: MDEV-16664 - Change the default to innodb_lock_schedule_algorithm=fcfs
 - Galera: MDEV-15822 - WSREP: BF lock wait long for trx
 - Fixes for the following security vulnerabilities:
    CVE-2018-3060
    CVE-2018-3064
    CVE-2018-3063
    CVE-2018-3058
    CVE-2018-3066

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Embarrasingly, I missed this one last time.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>