docker-ce: Updated to 19.03.9 and updated relevant dependencies

Update SQLite to version 3.32.1 to mitigate two security vulnerability CVE-s.

This mitigates CVE-s: CVE-2020-13434 and CVE-2020-13435

https://nvd.nist.gov/vuln/detail/CVE-2020-13434
https://nvd.nist.gov/vuln/detail/CVE-2020-13435

Signed-off-by: Robert Marko <robert.marko@sartura.hr>

python3-django-cors-headers: update version to 3.3.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

The existing interface selection/detection code was incomprehensible at
worst and convoluted at best.  The uci config file suggested it
understood an external ipv6 interface but in reality the init script
took no notice.  Re-work it so it is at least comprehendible and takes
notice of ipv6 interface details if specified.

Update the hotplug script to use the same interface selection/detection
code as the init script and take note of ipv6 interface selection, only
restarting miniupnpd on interface up events and only if that interface
isn't already known (for that ip class) by miniupnpd.

For me this has solved numerous 'flaky' startup problems, especially
with regard to ipv6.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

Signed-off-by: Martin Hammer <34623636+hammer-is@users.noreply.github.com>
Signed-off-by: martin <martin@DESKTOP-C822DHJ.lan>

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

Signed-off-by: Martin Hammer <34623636+hammer-is@users.noreply.github.com>
Signed-off-by: martin <martin@DESKTOP-C822DHJ.lan>

giflib: remove host build

modemmanager: set interface MTU based on bearer settings

clamav: update to version 0.102.3 (security fix)

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>

postgresql: fix compilation with GCC4

Using the same method used by other protocol handlers like uqmi.

Fixes https://github.com/openwrt/packages/issues/11383

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>

Fixes:
CVE-2020-3341
CVE-2020-3327

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

libtasn1: fix host build under old GCC

remove upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Update the SDK URL in the README.

protobuf-c: fix host build on GCC4

sqlite3: update to version 3.32.0

Nothing uses this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

It's completely unused and breaks under CentOS7.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

prereq-build.mk says that GCC 4.8 and above is supported. GCC 4.8
defaults to std=gnu89, breaking the build. GCC5 defaults to gnu99.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

prereq-build.mk says that GCC 4.8 and above is supported. GCC 4.8
does not default to gnu++11. This fixes compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

uwsgi: make luci-webui single threaded and log more

msmtp: update to version 1.8.10

nginx: set log level to crit for luci-static

Signed-off-by: Wren Turkal <wt@penguintechs.org>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* limit domain name length to max. 63 chars
  to fix issues with energized sources

Signed-off-by: Dirk Brenken <dev@brenken.org>

Update nano version to 4.9.3
Minor bugfix release.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>

Do not write errors for inexistent files to the system log.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

nginx: do not reduce max processes

The minimum version of GCC according to prereq-build.mk is 4.8 which
defaults to gnu89. This breaks the host build when the host GCC is less
than 5, which defaults to gnu99. Add a simple CFLAG to fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

taglib: update to 1.12-beta-1

It seems 1.11.1 is old and has CVEs.

Removed boost hack since upstream removed boost support.

Removed outdated InstallDev hacks.

Added PKG_CPE_ID.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

taglib: fix taglib-config paths

It seems gerbera uses this instead of pkgconfig.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gerbera: add taglib support

Gives audio info support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

lxc: use -minterlink-mips16 only with USE_MIPS16

The flag is either not supported or not needed unless there's mixed
mips/mips16 code.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

nss: fix build for mips64

* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>