Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Fixes CVE-2017-9022, CVE-2017-9023.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

openvswitch: fix build for ovs python libs & related packages

python-six: add host-side build

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Dot release, primarily due to CVE-2017-7650 but also rolls up some
earlier patches.

Signed-off-by: Karl Palsson <karlp@etactica.com>

nginx: update to 1.12.0, the latest stable version

Signed-off-by: Ted Hess <thess@kitschensync.net>

ffmpeg: update to 3.2.5

net/dnscrypt-proxy: fix block_ipv6 param in init script

Signed-off-by: Damiano Renfer <damiano.renfer@gmail.com>

Signed-off-by: Ian Leonard <antonlacon@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

netopeer2-keystored: add new dependency

Signed-off-by: Antonio Paunovic <antonio.paunovic@sartura.hr>

Since we're using the kernel's module, this is
un-necessary.
Should speed up the build a bit.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Aria2: Bump version

Signed-off-by: kuoruan <kuoruan@gmail.com>

Signed-off-by: kuoruan <kuoruan@gmail.com>

Signed-off-by: kuoruan <kuoruan@gmail.com>

Admittedly I never used those Python libs.
And the setup I was trying it on, did not have
the Python interpreter packaged, so these build failures
went un-noticed.

That's my fault for not trying it out properly on
a full LEDE repo, with all packages.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

sysrepo update

Needed for Open vSwitch's python libs.
And build.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

This is a straightforward update to the latest stable version.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

unbound: add option for dhcp UCI domain mx srv and cname

utils/gpsd: Set manbuild=no for build (disable building help/html docs)

libndpi: add new package

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Base LEDE/OpenWrt UCI for dnsmasq provides for DNS override in
/etc/config/dhcp. It is desired to be able to use dnsmasq and
Unbound as transparently as possible. Option 'add_extra_dns'
will pull 'domain', 'mxhost', 'srvhost, and 'cname' from base.

netifd/procd have an interaction with DHCPv6/RA on WAN (FS#713).
Minor IP6 parameter updates can cause Unbound reload events every
few minutes. List option 'trigger' selects which interfaces may
cause reload. For example 'lan', 'wan' but not 'wan6'.

Squash other cosmetics.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

avro: Apache Avro C Library 1.8.2

Signed-off-by: John Clark <inindev@gmail.com>
Tested-by: John Clark <inindev@gmail.com>

Below are changes in the packaging method

 - Use tarball provided by the upstream project maintainer instead of
   cloning the whole git-repo
 - Drop openssl variant as it was deprecated then removed by the
   upstream project
 - Add dependency on libev, libsodium, libudns as they are not bundled
   with the source code anymore

Addresses issue #4191

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

net/dnscrypt-proxy: ignore parameters requiring plugins support if no…

Signed-off-by: Damiano Renfer <damiano.renfer@gmail.com>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Fix CVE-2017-8798

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>

isc-dhcp: use procd and generate configuration from UCI

Convert init-script to procd and allow to configure
isc-dhcp-server via UCI. Allow most by-network and by-host options
supported by dnsmasq.
User-defined dhcp-options are not supported yet, neither are tags.

Existing configurations with use-edited /etc/dhcpd.conf are still
respected, hence to enjoy the new features you have to migrate
your configuration to UCI and delete /etc/dhcpd.conf.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>