mariadb: bump to 10.2.17

confuse: Update to 3.2.2

dmapd: update to 0.0.76

libdmapsharing: Update to 3.9.2

ola: Update to 0.10.7 and switch to codeload

shadow: Update to 4.6

grilo: Update to 0.3.6

net/stunnel: Update to 5.48

protobuf-c: Update to 1.3.1

linuxptp: Upgrade to v2.0

libuwsc: Update to 2.0.5

The upstream acme.sh package changed to using socat instead of netcat;
update the dependencies to reflect this, and pass --listen-v6 when running
in standalone mode (since socat only listens on IPv4 by default).

Also add a missing cleanup call when certificate issuance fails.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@neratec.com>

gnutls: Add PKG_CPE_ID for proper CVE tracking

From Release Notes:

 - New variable innodb_log_optimize_ddl for avoiding delay due to page flushing and allowing concurrent backup
 - InnoDB updated to 5.7.23
 - ALTER TABLE fixes:
    MDEV-14637 - Fix hang due to DDL with FOREIGN KEY or persistent statistics
    MDEV-15953 - Alter InnoDB Partitioned Table Moves Files (which were originally not in the datadir) to the datadir
    MDEV-16515 - InnoDB: Failing assertion: ++retries < 10000 in file dict0dict.cc line 2737
    MDEV-16809 - Allow full redo logging for ALTER TABLE
 - Temporary tables: MDEV-16713 - InnoDB hang with repeating log entry
 - indexed virtual columns: MDEV-15855 - Deadlock between purge thread and DDL statement
 - locking: MDEV-16664 - Change the default to innodb_lock_schedule_algorithm=fcfs
 - Galera: MDEV-15822 - WSREP: BF lock wait long for trx
 - Fixes for the following security vulnerabilities:
    CVE-2018-3060
    CVE-2018-3064
    CVE-2018-3063
    CVE-2018-3058
    CVE-2018-3066

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

- Rebased the python target/host separation patch
 - Dropped the now-in-upstream openssl-1.1 compat patch
 - Added a patch to disable tests/

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

emailrelay: add some runtime options

Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>

nginx: Add missing WebDAV methods support (PROPFIND & OPTIONS)

Fix for CVE-2018-14447

God rid of pointless autoreconf.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Nginx provide WebDAV methods PUT, DELETE, MKCOL, COPY, and MOVE with
http_dav_module. But most WebDAV clients that require additional WebDAV
methods (PROPFIND & OPTIONS) to operate. Add missing methods support
with Arutyunyan Roman (arutyunyan.roman@gmail.com)'s nginx-dav-ext-module.
(see: http://nginx.org/en/docs/http/ngx_http_dav_module.html
https://github.com/arut/nginx-dav-ext-module)

Example config:
	location / {
		dav_methods PUT DELETE MKCOL COPY MOVE;
		dav_ext_methods PROPFIND OPTIONS;

		root /var/root/;
	}

Signed-off-by: Ruixi Zhou <zhouruixi@gmail.com>

Signed-off-by: Othmar Truniger <github@truniger.ch>

evtest: Switch to tarballs

emailrelay: avoind linking with -lpam

ddns-scripts: Fix problems detecting if curl is SSL capable

Ensure cURL is installed and has SSL support. This fixes
issue 6744.

Signed-off-by: Martin Konrad <info@martin-konrad.net>

uwsgi-cgi: improve luci support

nginx: improve luci config

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

Bugfix release.  Full changelog at:
https://mosquitto.org/blog/2018/08/version-151-released/

Of most interest to OpenWrt:
* Remove use of AI_ADDRCONFIG, which means the broker can be used on systems where only the loopback interface is defined.
* Fix IPv6 addresses not being able to be used as bridge addresses.
* Fix problem opening listeners on Pi caused by unsigned char being default.
* Fix segfault on startup if bridge CA certificates could not be read.
* Fix possible endian issue when reading the memory_limit option.
* library and client bugfixes including: https://github.com/openwrt/packages/issues/6765

Signed-off-by: Karl Palsson <karlp@etactica.com>

rpcbind: update to 1.2.5

python-pyasn1: Update to 0.4.4

python-urllib3: Update to 1.2.3

sudo: Update to 1.8.24

Use a better URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This is more for readability, no functional change

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Also switch to domain download.qemu.org and .xz files

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Changed URLs to HTTPS

Rearranged Makefile for consistency.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_CPE_ID for CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

perl-cgi: Update to 4.40

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

bluelog: Switch to GitHub tarball

alpine: Update to 2.21.9999

tiff: Fix remaining CVEs

monit: Update to 5.25.2

htop: Minor adjustments

* update to 1.2.5
* fix wrong URL
* adapt to bin/sbin from new version

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Added PKG_BUILD_PARALLEL to speed up compilation times.

Added PKG_CPE_ID for proper CVE tracking.

A few other cosmetic changes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>