The upstream acme.sh package changed to using socat instead of netcat;
update the dependencies to reflect this, and pass --listen-v6 when running
in standalone mode (since socat only listens on IPv4 by default).

Also add a missing cleanup call when certificate issuance fails.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

gnutls: Add PKG_CPE_ID for proper CVE tracking

Signed-off-by: Rosen Penev <rosenp@gmail.com>

- Rebased the python target/host separation patch
 - Dropped the now-in-upstream openssl-1.1 compat patch
 - Added a patch to disable tests/

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

emailrelay: add some runtime options

nginx: Add missing WebDAV methods support (PROPFIND & OPTIONS)

Nginx provide WebDAV methods PUT, DELETE, MKCOL, COPY, and MOVE with
http_dav_module. But most WebDAV clients that require additional WebDAV
methods (PROPFIND & OPTIONS) to operate. Add missing methods support
with Arutyunyan Roman (arutyunyan.roman@gmail.com)'s nginx-dav-ext-module.
(see: http://nginx.org/en/docs/http/ngx_http_dav_module.html
https://github.com/arut/nginx-dav-ext-module)

Example config:
	location / {
		dav_methods PUT DELETE MKCOL COPY MOVE;
		dav_ext_methods PROPFIND OPTIONS;

		root /var/root/;
	}

Signed-off-by: Ruixi Zhou <zhouruixi@gmail.com>

Signed-off-by: Othmar Truniger <github@truniger.ch>

evtest: Switch to tarballs

emailrelay: avoind linking with -lpam

ddns-scripts: Fix problems detecting if curl is SSL capable

Ensure cURL is installed and has SSL support. This fixes
issue 6744.

Signed-off-by: Martin Konrad <info@martin-konrad.net>

uwsgi-cgi: improve luci support

nginx: improve luci config

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

Bugfix release.  Full changelog at:
https://mosquitto.org/blog/2018/08/version-151-released/

Of most interest to OpenWrt:
* Remove use of AI_ADDRCONFIG, which means the broker can be used on systems where only the loopback interface is defined.
* Fix IPv6 addresses not being able to be used as bridge addresses.
* Fix problem opening listeners on Pi caused by unsigned char being default.
* Fix segfault on startup if bridge CA certificates could not be read.
* Fix possible endian issue when reading the memory_limit option.
* library and client bugfixes including: https://github.com/openwrt/packages/issues/6765

Signed-off-by: Karl Palsson <karlp@etactica.com>

rpcbind: update to 1.2.5

python-pyasn1: Update to 0.4.4

python-urllib3: Update to 1.2.3

sudo: Update to 1.8.24

Use a better URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This is more for readability, no functional change

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Also switch to domain download.qemu.org and .xz files

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Changed URLs to HTTPS

Rearranged Makefile for consistency.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_CPE_ID for CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

perl-cgi: Update to 4.40

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

bluelog: Switch to GitHub tarball

alpine: Update to 2.21.9999

tiff: Fix remaining CVEs

monit: Update to 5.25.2

htop: Minor adjustments

* update to 1.2.5
* fix wrong URL
* adapt to bin/sbin from new version

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Added PKG_BUILD_PARALLEL to speed up compilation times.

Added PKG_CPE_ID for proper CVE tracking.

A few other cosmetic changes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Added PKG_CPE_ID for proper CVE tracking.

Fixed URLs. Changed to HTTPS as well.

Removed autoreconf as there is no patching being done.

PKG_BUILD_PARALLEL was enabled for faster building.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

shairport-sync: Install /etc/config as 600

libxml2: Fix CVE-2018-9251 and CVE-2018-14567

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Also added the CPE ID.

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Taken from Fedora. Reordered them so as to apply properly.

Added a CPE ID.

Added parallel build for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Drop already upstreamed patches.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

btrfs-progs: Update to 4.17.1

scapy: Update to 2.4.0 and change URLs to new

geth: Update to 1.8.13

unbound: drop odhcpd leases with wrong field count

Updates for gitolite package

/etc/config should not be readable by non-root.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>