Fixes
CVE-2017-8374
CVE-2017-8373
CVE-2017-8372

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

MP3 patents expired in 16 April 2017 and Fraunhoffer IIS has terminated its MP3 licensing program as a result.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Signed-off-by: Ted Hess <thess@kitschensync.net>