add license tag

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

add license tag

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

perl: when Makefile.PL fails give more feedback

Fixes: CVE-2017-13089, CVE-2017-13090

switch to gz as there is no xz tarball for 1.19.2

Signed-off-by: Peter Wagner <tripolar@gmx.at>

As jool builds a kernel module, a PKG_BUILD_DIR under KERNEL_BUILD_DIR must
be used to avoid reusing build artifacts when switching to a different
target of the same architecture. Otherwise, kernel ABI mismatches may
result, leading to an unusuable module, or build failures like the
following:

    Package kmod-jool is missing dependencies for the following libraries:
    crypto_hash.ko

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Fixes the following CVEs:

CVE-2017-15227
  https://nvd.nist.gov/vuln/detail/CVE-2017-15227

CVE-2017-15228
  https://nvd.nist.gov/vuln/detail/CVE-2017-15228

CVE-2017-15721
  https://nvd.nist.gov/vuln/detail/CVE-2017-15721

CVE-2017-15722
  https://nvd.nist.gov/vuln/detail/CVE-2017-15722

CVE-2017-15723
  https://nvd.nist.gov/vuln/detail/CVE-2017-15723

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

libs/faad2: Update to 2.8.6

Update faad2 to 2.8.6

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update several python packages

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

There are a few packages which mysteriously fail during the configure
stage.  Give us better means of understanding why.

Also, some Makefile.PL's have "use" statements which reference
files which are in or under ".".

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

perl: modules failing due to dot not in @INC

5.26.1 introduced default_inc_excludes_dot which is causing
perl-html-tags and possibly other modules to fail.  Add explict
dot back when invoking module's ./Makefile.PL.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

mii-tool: fix kernel 4.9 compatibility

Signed-off-by: Stijn Segers <francesco.borromini@inventati.org>

ddns-scripts: fix dynv6.com "unchanged" response

squashfs-tools: pull newer version from git repo

squashfs-tools does not provide tar-balls.
It looks like a good time to pull a newer version
that obsoletes a few accepted patches.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

linknx: bump to version 0.0.1.34

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

perl: update to 5.26.1

Signed-off-by: Othmar Truniger <github@truniger.ch>

openvswitch: upgrade to 2.8.1 ; package more stuff from the OVS build

dovecot: update to 2.2.33.2

seafile: upgrade to 6.2.2

nbd: fix gnutls dependency

Get rid of gnutls dependency introduced in 5bca84b. Needs patching
configure script to make gnutls existence test optional.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Libwebsockets 2.4.0 now includes mbedtls as a first class citizen.
Drop the problematic and poorly supported wolf/cyassl variant and add
mbedtls variant instead.

Signed-off-by: Karl Palsson <karlp@etactica.com>

Required changes:

* Add qualifying '.' to scripts or to @INC, as appropriate since we're
  enabling default_inc_excludes_dot;

* Add new platform/library definitions like double-double format and
  locale library functions/headers;

* Delete patch 020 as it's been upstreamed;

Optional changes:

* Instead of using -@rm and having that fail, emit an error message,
  and be ignored, just use @rm -f instead which will always succeed.

Security
[CVE-2017-12837] Heap buffer overflow in regular expression compiler

Compiling certain regular expression patterns with the case-insensitive
modifier could cause a heap buffer overflow and crash perl. This has
now been fixed. [perl #131582]

[CVE-2017-12883] Buffer over-read in regular expression parser

For certain types of syntax error in a regular expression pattern, the
error message could either contain the contents of a random, possibly
large, chunk of memory, or could crash perl. This has now been fixed.
[perl #131598]

[CVE-2017-12814] $ENV{$key} stack buffer overflow on Windows

A possible stack buffer overflow in the %ENV code on Windows has been
fixed by removing the buffer completely since it was superfluous anyway.
[perl #131665]

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

[utils/zoneinfo] Updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>