Signed-off-by: Rosen Penev <rosenp@gmail.com>

openldap: Backport patch to fix compilation without deprecated APIs

rng-tools: version 6.6 is now available

unbound: Remove deprecated OpenSSL API

Work around automake demanding README with a symlink.
Add new dependency on libsysfs.
Avoid dependency on libxml, curl, openssl by disabling NIST beacon support.
  We also continue to remove gcrypt, and jitterentropy is not packaged.
Remove patch that no longer cleanly applies.
  If newlines in log messages are a problem, we should take it up with
  upstream.

Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>

Fixes: github #7303

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

libevhtp: Fix compilation on OpenSSL 1.0.2 without deprecated APIs

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched URL to a proper one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

Also switched to the proper upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This switches monit to use the THREAD API of OpenSSL 1.0.2. This is gone
in 1.1.0 but will be more stable with 1.0.2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python-gnupg: Use a less braindead URL

Passing --disable-gtk-doc-html should fix building in parallel.

Also added some extra flags to speed up build time.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes at least:

CVE-2017-15710
CVE-2017-15715
CVE-2018-1283
CVE-2018-1312

Added CPE ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched to new upstream at pagure.io.

Refreshed debian patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Simple bump from 4.3 to 4.4

Changelog since 4.3:
netdb not saving to disk (#311)
Fix memory leak when parsing SNMP packet (#313)
Fix several windows build issues (#309)
Certificate fields injection via %D in ERR_SECURE_CONNECT_FAIL (#306)
Allow compilation with minimal OpenSSL (#281)
Fixed %USER_CA_CERT_xx and %USER_CERT_xx crashes (#301)
Improve const correctness for hash_link (#300)
Bug #4893: Malformed %>ru URIs for CONNECT requests (#299)

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

fping: Update to 4.1

stunnel: Update to 5.49

tmux: Update to 2.8

progress: Update to 0.14

nft-qos: add new package

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

golang: Update to 1.11.2, fix build errors

tor-fw-helper: new package

tor-fw-helper is a helper to automatically configuring port forwarding
for tor, using UPnP or NAT-PMP NAT traversal.

This is a tor-fw-helper rewrite in Go that functions as a drop in
replacement for the original C code.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

When installing a newer host Go, be sure to remove the old host Go. Not
doing so causes errors[1] when trying to build target Go.

[1]: https://github.com/openwrt/packages/pull/7194#issuecomment-435948361

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

This is the nftables implementation for qos on OpenWrt,
Currently, it has below features:

* Static QoS : setting limit rate for devices or global network.

* Dynamic/Auto QoS : setting limit rate according to the network
  bandwidth and adjust itself automatically (hotplug event).

* Traffic Priority : this feature is like traffic shaping under tc,
  it uses ingress hook to handle to packets here.

Signed-off-by: Rosy Song <rosysong@rosinson.com>

Switched to codeload for easier package bumping

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove KERNEL_AIO dependency to avoid recursive dependency with libaio in
a future commit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched to codeload for simplicity and easier package bumping.

Rearranged Makefile for consistency with other projects.

All of the patches seem to have been upstreamed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes CVE-2018-18820.

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This will become pointless once OpenSSL 1.1.1 enters the tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libarchive: Update to 3.3.3

django: Update to 1.11.16

libextractor: Update to 1.7

Merged after maintainer timeout. I also successfully compile tested for mxs platform.

Update tmux to 2.8

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update stunnel to 5.49

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Fixed a race condition in QuerySet.update_or_create() that could result in data loss (#29499).

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Update fping to 4.1

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Also remove upstreamed patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

btrfs-progs: Update to 4.19

Signed-off-by: Rosen Penev <rosenp@gmail.com>