Signed-off-by: Ted Hess <thess@kitschensync.net>

Defaulting to -fPIC is a bad idea, especially for executables (here:
sqlite3-cli). In short, there are certain security implications as well
as overhead/performance penalties. Details see:

https://wiki.gentoo.org/wiki/Project:Hardened/Position_Independent_Code_internals

The configure script is able to detect the need for PIC and adds the
flag when needed anyway (when compiling the library).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

A remote code execution vuln has been found in sqlite. Infos available
here:

https://blade.tencent.com/magellan/index_en.html

sqlite 3.26.0 contains the fix.

This commit also changes source URL to https.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

tinc: Fix compilation without deprecated OpenSSL APIs

softethervpn: cleanup host/build, pass HOST_*FLAGS

logrotate: Update to 3.15.0

python-requests: Update to 2.21.0

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Remove hack to avoid readline host dependency, now that readline is
being host/built.
Pass on HOST_CFLAGS, HOST_CPPFLAGS, & HOST_LDFLAGS, to fix buildbots
host-compile errors about not finding openssl headers.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Security and bug fix.  Full changelog available at: https://mosquitto.org/ChangeLog.txt

Signed-off-by: Karl Palsson <karlp@etactica.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch to standard pythonhosted URL.

Cosmetic Makefile rearrangements for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

sendmail: Add OpenSSL 1.1 support

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

If ld is used directly to link libmilter.so, linking is not done
correctly with glibc, and produces a library that can't be used.
Linking with the bad library produces a strange error:
ld: conftest: hidden symbol `stat' in [...]libc_nonshared.a(stat.oS)
is referenced by DSO

Using ld with musl works fine, but using gcc is a more portable way of
linking the shared library anyway.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

First patch is from Debian and enables OpenSSL 1.1 support.

Second patch is a fix for OpenSSL 1.1 ECC curves.

Third patch allows compilation without deprecated APIs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

xtables-addons: fix compile error on kernel 4.18+

Signed-off-by: Ted Hess <thess@kitschensync.net>

Use `struct nf_nat_range2` for kernel 4.18+

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gammu: Fix build under 64-bit targets.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>

Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Changelog can be found at https://wiki.qemu.org/ChangeLog/3.1

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

prometheus-node-exporter-lua: add lantiq dsl modem collector

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Added PKG_CPE_ID for proper CVE tracking.

Some Makefile rearrangements for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

There's a faulty suffix variable that points to the wrong place.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

a.heider: Address PR comments and clean up.

Signed-off-by: Rene Treffer <treffer+github@measite.de>
Signed-off-by: Andre Heider <a.heider@gmail.com>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

zabbix: update to 4.0 LTS

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

nginx: add stream SSL and stream SSL preread support