python-pyasn1: Update to 0.4.4

python-urllib3: Update to 1.2.3

sudo: Update to 1.8.24

Use a better URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This is more for readability, no functional change

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Also switch to domain download.qemu.org and .xz files

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Changed URLs to HTTPS

Rearranged Makefile for consistency.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_CPE_ID for CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

perl-cgi: Update to 4.40

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

bluelog: Switch to GitHub tarball

alpine: Update to 2.21.9999

tiff: Fix remaining CVEs

monit: Update to 5.25.2

htop: Minor adjustments

Added PKG_BUILD_PARALLEL to speed up compilation times.

Added PKG_CPE_ID for proper CVE tracking.

A few other cosmetic changes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Added PKG_CPE_ID for proper CVE tracking.

Fixed URLs. Changed to HTTPS as well.

Removed autoreconf as there is no patching being done.

PKG_BUILD_PARALLEL was enabled for faster building.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

shairport-sync: Install /etc/config as 600

libxml2: Fix CVE-2018-9251 and CVE-2018-14567

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Also added the CPE ID.

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Taken from Fedora. Reordered them so as to apply properly.

Added a CPE ID.

Added parallel build for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Drop already upstreamed patches.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

btrfs-progs: Update to 4.17.1

scapy: Update to 2.4.0 and change URLs to new

geth: Update to 1.8.13

unbound: drop odhcpd leases with wrong field count

Updates for gitolite package

/etc/config should not be readable by non-root.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

grep: Update to 3.1

samba4: update to 4.8.4

Pr xtables addons rtsp

ddns-scripts: sanitize host charset and shell escape characters

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Cosmetic adjustments

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python-gnupg: Update to 0.4.3

postgresql: security bump to 9.6.10

LVM2: Update to 2.02.80

Shows network/wireless activity on a local website
to increase awareness for privacy and security matters.

Signed-off-by: Moritz Warning <moritzwarning@web.de>

* remove perl, python host depends
* fixes: CVE-2018-1139, CVE-2018-1140, CVE-2018-10858, CVE-2018-10918, CVE-2018-10919
* remove avahi timemachine service file (4.8 handles this automatically via avahi client-lib)
* fix more optional depends

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

This update includes fixes for the following CVEs:

- CVE-2018-1115
- CVE-2018-10925
- CVE-2018-10915

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Octeon: Rename octeonplus to oction+
MIPS 24kf: Inline ASM fails to build (unknown reason)
X86: Configure finds NASM and assumes YASM if name explictly set (wrong switches)

Signed-off-by: Ted Hess <thess@kitschensync.net>

Switch to upstream URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

perl: version modules and non-base packages

libgphoto2: update package 2.5.19

Currently external modules and non-base packages are numbered
from their own internal number space, and even though the Perl
ABI number is embedded into them this isn't externally visible.

For example, perl-html-parser-3.72.1 could be built for ABI
5.26 or for 5.28, we can't easily tell.  This changes all of
that by embedding the ABI number into the filename.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Signed-off-by: Leonardo Medici <leonardo_medici@me.com>