The configure scripts for lvm2 guess defaults for run/lock based on if
/run exists on the build host.  Use explicit values for the defaults
for consistency across build hosts.

Signed-off-by: Jeremiah McConnell <miah@miah.com>

Signed-off-by: Saverio Proto <zioproto@gmail.com>

opensc: Update to 0.18.0

glpk: Update to 4.65

cryptsetup: Update to 2.0.3

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Add HTTPS too.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gawk: Update to 4.2.1

rtty: Update to 5.0.2

libuwsc: update to 2.0.3

rp-pppoe: redo glibc patch

Previous fix broke compilation with kernel < 4.8

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>

Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

EdDSA support is optional and currently defaults to being disabled.

The following security issues are addressed with this update:

  * An error in TSIG handling could permit unauthorized zone transfers
    or zone updates. These flaws are disclosed in CVE-2017-3142 and
    CVE-2017-3143.
  * The BIND installer on Windows used an unquoted service path, which
    can enable privilege escalation. This flaw is disclosed in
    CVE-2017-3141.
  * With certain RPZ configurations, a response with TTL 0 could cause
    named to go into an infinite query loop. This flaw is disclosed in
    CVE-2017-3140.
  * Addresses could be referenced after being freed during resolver
    processing, causing an assertion failure. The chances of this
    happening were remote, but the introduction of a delay in
    resolution increased them. This bug is disclosed in CVE-2017-3145.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

alpine: Update to 2.21.999 and update URLS

erlang: update to version 19.3, add packages

unbound: 1.7.2 and improve local zone evaluation in UCI

libstrophe: Update to 0.9.2

libnetfilter-acct: Update to 1.0.3

New packages:
* erlang-tools: This Erlang/OTP package provides support for misc tools.
* erlang-reltool: This Erlang/OTP package provides support for release management.
* erlang-erl-interface: This Erlang/OTP package provides support for erlang interoperability with other languages.
* erlang-os_mon: This Erlang/OTP package provides the following services:
  - cpu_sup CPU load and utilization supervision
  - disksup Disk supervision
  - memsup Memory supervision
* erlang-xmerl: This Erlang/OTP package provides functions for exporting XML data to an external format

Signed-off-by: Arnaud Sautaux <arnaud.sautaux@infoteam.ch>

file: Disable libseccomp by default

When UCI local zone is private and static, Unbound covered private
addresses with defaults. Optional delegated global IP6 prefix
protection lacked a static zone, but it was prevented from appearing
in global DNS responses. Domain names router-as-TLD, "lan." and
"local." were static, but they lacked default SOA or NS such as
Unbound had assinged to private addresses. Clean up these local
zones UCI evaluation and block global DNS inclusion.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

A few bug fixes but importantly fix a deadlock on
AXFR configuration when notify occurs (auth-zone:)

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

isc-dhcp: write resolv.conf per network & dhcp settings

Fixes the buildbot. libseccomp is not that useful for file.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

The internal nameservers and the DHCP default domain should be
squirted into /tmp/resolv.conf.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

bluez: Disable printing subsystem rule

Update HAProxy to v1.8.9

acpid: remove depends on TARGET_x86 or TARGET_x86_64

nginx: Package bump to 1.14.0

pcre: Update to 8.42

file: Update to 5.33

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

By default bluez allows the printing subsystem to communicate
via dbus. This refers to the group lp which isn't available
on OpenWrt and makes dbus fail to start.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ariang: dep rework

Permit to install a version of ariang with nginx as webserver.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

avahi: Update to 0.7

autossh: Update to 1.4f

pcre2: Update to 10.31

bandwidthd: Update to 2.0.1-35

stm32flash: Update to 0.5

addrwatch: Update to 1.0.1

crconf: switch to git repo and update to more recent code

ulogd: bump to version 2.0.7

python packages batch update

squid: Upgrade to 4.0.24 beta

yara: small fixes and bump to 3.7.1