Change to ut0mt8's fork that contains several enhancements
and bugfixes.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update netdata to 1.11.0

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

cyrus-sasl: Fix compilation without deprecated APIs on OpenSSL

It's not even used.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openldap: Backport patch to fix compilation without deprecated APIs

rng-tools: version 6.6 is now available

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

This feature is not needed anymore. This feature is replaced by the
change 46ed09408e

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

This is not necessary.

This reverts commit be91e71805.

unbound: Remove deprecated OpenSSL API

Work around automake demanding README with a symlink.
Add new dependency on libsysfs.
Avoid dependency on libxml, curl, openssl by disabling NIST beacon support.
  We also continue to remove gcrypt, and jitterentropy is not packaged.
Remove patch that no longer cleanly applies.
  If newlines in log messages are a problem, we should take it up with
  upstream.

Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>

Fixes: github #7303

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

libevhtp: Fix compilation on OpenSSL 1.0.2 without deprecated APIs

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched URL to a proper one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

Also switched to the proper upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This switches monit to use the THREAD API of OpenSSL 1.0.2. This is gone
in 1.1.0 but will be more stable with 1.0.2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python-gnupg: Use a less braindead URL

Passing --disable-gtk-doc-html should fix building in parallel.

Also added some extra flags to speed up build time.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched URL to a sensible one.

Some Makefile rearrangements for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes at least:

CVE-2017-15710
CVE-2017-15715
CVE-2018-1283
CVE-2018-1312

Added CPE ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched to new upstream at pagure.io.

Refreshed debian patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Simple bump from 4.3 to 4.4

Changelog since 4.3:
netdb not saving to disk (#311)
Fix memory leak when parsing SNMP packet (#313)
Fix several windows build issues (#309)
Certificate fields injection via %D in ERR_SECURE_CONNECT_FAIL (#306)
Allow compilation with minimal OpenSSL (#281)
Fixed %USER_CA_CERT_xx and %USER_CERT_xx crashes (#301)
Improve const correctness for hash_link (#300)
Bug #4893: Malformed %>ru URIs for CONNECT requests (#299)

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

fping: Update to 4.1

stunnel: Update to 5.49

tmux: Update to 2.8

progress: Update to 0.14

nft-qos: add new package

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

golang: Update to 1.11.2, fix build errors

tor-fw-helper: new package

tor-fw-helper is a helper to automatically configuring port forwarding
for tor, using UPnP or NAT-PMP NAT traversal.

This is a tor-fw-helper rewrite in Go that functions as a drop in
replacement for the original C code.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

When installing a newer host Go, be sure to remove the old host Go. Not
doing so causes errors[1] when trying to build target Go.

[1]: https://github.com/openwrt/packages/pull/7194#issuecomment-435948361

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

This is the nftables implementation for qos on OpenWrt,
Currently, it has below features:

* Static QoS : setting limit rate for devices or global network.

* Dynamic/Auto QoS : setting limit rate according to the network
  bandwidth and adjust itself automatically (hotplug event).

* Traffic Priority : this feature is like traffic shaping under tc,
  it uses ingress hook to handle to packets here.

Signed-off-by: Rosy Song <rosysong@rosinson.com>

Switched to codeload for easier package bumping

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove KERNEL_AIO dependency to avoid recursive dependency with libaio in
a future commit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched to codeload for simplicity and easier package bumping.

Rearranged Makefile for consistency with other projects.

All of the patches seem to have been upstreamed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes CVE-2018-18820.

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This will become pointless once OpenSSL 1.1.1 enters the tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libarchive: Update to 3.3.3