Fix CVE-2019-11500

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Also the source package contains a LICENSE file, so
we can refer to it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

While at, update the SPDX license id to most recent format.

Compile and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

nss: update to 3.46

Signed-off-by: Rosen Penev <rosenp@gmail.com>

adblock: update 3.8.5

ulogd2: Build IPFIX module

This was implicit with glib2 but got removed with
170ef79393

Fixed license tag to newer SPDX.

Removed PKG_BUILD_DIR as that is now default with upstream's
e545fac8d9

Minor reorganization for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

add ulogd_output_IPFIX.so to ulogd-mod-extra

Signed-off-by: Sebastian Fleer <dev@dwurp.de>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

* use raw procd interface trigger as last resort, if the
  adblock config is not available during startup
* fix selective subdomain whitelisting for dnsmasq
* fix a kresd restart issue with 'DNS File Reset'
* fix a suspend/resume cornercase
* disable the tld compression, if the number of blocked domains
  is greater than 'adb_maxtld' (default: 100000)
* made the fw portlist configurable (default '53 853 5353')
* preliminary support for inotify-like autoload features
  of dns backends like kresd in future Turris OS. If 'adb_dnsinotify'
  is set to 'true', all adblock related restarts and the
  'DNS File Reset' will be disabled

Signed-off-by: Dirk Brenken <dev@brenken.org>

Signed-off-by: Xingwang Liao <kuoruan@gmail.com>

ulogd2: Backport upstream patches

IPFIX support was requested.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

lighttpd: Update to version 1.4.54

libuwifi: fix dev installation

The ccan needs config.h file. This commit fixes the includes
and copies the config.h file to the correct position.

Signed-off-by: Nick Hainke <vincent@systemli.org>

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

samba4: update to version 4.9.13 (security fix)

Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

The double quote thells the shell that the list returned from `pidof` is a
single argument, therefore, `renice` will cry about a malformed input.
With this commit, `renice` will be applied correctly to all the returned PIDs
from `pidof`.

The output of `renice` for the quoted list is as follows:
`renice: invalid number '6592 6587 6586 6574'`
`renice` does not show and does apply the nice value if the list is unquoted.

Signed-off-by: Oever González <notengobattery@gmail.com>
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Disable ASLR PIE in selected packages

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

libmstch: Remove boost dependency

Added patches that convert Boost functionality to C++17.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

forked-daapd: update to 26.5

Fixes compilation without OpenSSL deprecated APIs as well as
-Werror=implicit-function-declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mosh: add package

Voluptuous & Voluptuous Serialize: update to their latest versions

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

python-sqlalchemy: Update to version 1.3.7

python-sentry-sdk: Update to version 0.11.2

zerotier: update to 1.4.4

alsa-utils: Update to 1.1.9

Fixed license information.

Removed older unnecessary stuff.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

measurement-kit: Fix compilation with uClibc-ng

libpbc: Pass CFLAGS properly

v4l2rtspserver: Update to 0.1.8

Also allow path to local.conf to be set and enable linker optimisations
to save a few bytes.

Signed-off-by: Moritz Warning <moritzwarning@web.de>

DockerCE: Fix can't mapping large range ports (too many open files)

youtube-dl: Update to version 2019.9.1

python-slugify: Update to version 3.0.3

syslog-ng: Update to version 3.23.1