Fixes the following CVEs:

CVE-2017-15227
  https://nvd.nist.gov/vuln/detail/CVE-2017-15227

CVE-2017-15228
  https://nvd.nist.gov/vuln/detail/CVE-2017-15228

CVE-2017-15721
  https://nvd.nist.gov/vuln/detail/CVE-2017-15721

CVE-2017-15722
  https://nvd.nist.gov/vuln/detail/CVE-2017-15722

CVE-2017-15723
  https://nvd.nist.gov/vuln/detail/CVE-2017-15723

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

libs/faad2: Update to 2.8.6

Update faad2 to 2.8.6

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update several python packages

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

perl: modules failing due to dot not in @INC

5.26.1 introduced default_inc_excludes_dot which is causing
perl-html-tags and possibly other modules to fail.  Add explict
dot back when invoking module's ./Makefile.PL.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

mii-tool: fix kernel 4.9 compatibility

Signed-off-by: Stijn Segers <francesco.borromini@inventati.org>

ddns-scripts: fix dynv6.com "unchanged" response

squashfs-tools: pull newer version from git repo

squashfs-tools does not provide tar-balls.
It looks like a good time to pull a newer version
that obsoletes a few accepted patches.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

linknx: bump to version 0.0.1.34

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

perl: update to 5.26.1

Signed-off-by: Othmar Truniger <github@truniger.ch>

openvswitch: upgrade to 2.8.1 ; package more stuff from the OVS build

dovecot: update to 2.2.33.2

seafile: upgrade to 6.2.2

nbd: fix gnutls dependency

Get rid of gnutls dependency introduced in 5bca84b. Needs patching
configure script to make gnutls existence test optional.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Libwebsockets 2.4.0 now includes mbedtls as a first class citizen.
Drop the problematic and poorly supported wolf/cyassl variant and add
mbedtls variant instead.

Signed-off-by: Karl Palsson <karlp@etactica.com>

Required changes:

* Add qualifying '.' to scripts or to @INC, as appropriate since we're
  enabling default_inc_excludes_dot;

* Add new platform/library definitions like double-double format and
  locale library functions/headers;

* Delete patch 020 as it's been upstreamed;

Optional changes:

* Instead of using -@rm and having that fail, emit an error message,
  and be ignored, just use @rm -f instead which will always succeed.

Security
[CVE-2017-12837] Heap buffer overflow in regular expression compiler

Compiling certain regular expression patterns with the case-insensitive
modifier could cause a heap buffer overflow and crash perl. This has
now been fixed. [perl #131582]

[CVE-2017-12883] Buffer over-read in regular expression parser

For certain types of syntax error in a regular expression pattern, the
error message could either contain the contents of a random, possibly
large, chunk of memory, or could crash perl. This has now been fixed.
[perl #131598]

[CVE-2017-12814] $ENV{$key} stack buffer overflow on Windows

A possible stack buffer overflow in the %ENV code on Windows has been
fixed by removing the buffer completely since it was superfluous anyway.
[perl #131665]

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

[utils/zoneinfo] Updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>

I should have packaged the OVN stuff, VTEP and what-not
earlier, but was not inspired to do this earlier.

I made some time now to package those parts.

Disabling flake8 & python3 explicitly.
They might get detected and cause weird build errors.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

http://www.sourcebrella.com/blog/double-free-vulnerability-international-components-unicode-icu/

https://security-tracker.debian.org/tracker/CVE-2017-14952

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

lxc: bump to 2.1.1

zsh: updated to 5.4.2

This is the first bugfix release for LXC 2.1. Full list of changes can
be found here:

https://linuxcontainers.org/lxc/news/

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Signed-off-by: Vadim A. Misbakh-Soloviov <git@mva.name>

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Aria2 Update