Update stunnel to 5.48

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

grep: Update to 3.1

samba4: update to 4.8.4

Pr xtables addons rtsp

ddns-scripts: sanitize host charset and shell escape characters

Signed-off-by: Peter Wagner <tripolar@gmx.at>

python-gnupg: Update to 0.4.3

postgresql: security bump to 9.6.10

LVM2: Update to 2.02.80

Shows network/wireless activity on a local website
to increase awareness for privacy and security matters.

Signed-off-by: Moritz Warning <moritzwarning@web.de>

* remove perl, python host depends
* fixes: CVE-2018-1139, CVE-2018-1140, CVE-2018-10858, CVE-2018-10918, CVE-2018-10919
* remove avahi timemachine service file (4.8 handles this automatically via avahi client-lib)
* fix more optional depends

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

This update includes fixes for the following CVEs:

- CVE-2018-1115
- CVE-2018-10925
- CVE-2018-10915

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Octeon: Rename octeonplus to oction+
MIPS 24kf: Inline ASM fails to build (unknown reason)
X86: Configure finds NASM and assumes YASM if name explictly set (wrong switches)

Signed-off-by: Ted Hess <thess@kitschensync.net>

Switch to upstream URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

perl: version modules and non-base packages

libgphoto2: update package 2.5.19

Currently external modules and non-base packages are numbered
from their own internal number space, and even though the Perl
ABI number is embedded into them this isn't externally visible.

For example, perl-html-parser-3.72.1 could be built for ABI
5.26 or for 5.28, we can't easily tell.  This changes all of
that by embedding the ABI number into the filename.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Signed-off-by: Leonardo Medici <leonardo_medici@me.com>

p11-kit: Update to 0.23.13

ffmpeg: Add cpu_type to configure opts. Upgrade to 3.2.12

intltool: Update to 0.51

ntpclient: Update to 2015_365

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* disable nfsquota for now, since libtirpc misses some headers for it

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

stoken: Update to 0.92 and switch to normal tarball.

nginx: Fix warnings while compile rtmp and ts modules

Signed-off-by: Ruixi Zhou <zhouruixi@gmail.com>

gammu: Update to 1.39.0

Cosmetic makefile changes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libtirpc: enable host build

nfs-kernel-server: fix missing host symbol res_querydomain

travelmate: update 1.2.2

sysrepo: Switch to codeload tarballs

tgt: Switch to codeload

gzip: Update to 1.9

logrotate: Update to 3.14

unbound: log openssl-1.0.2 lacks TLS host verification

* fix restart behaviour after successful connection
* fix labeling of faulty stations
* optimize re-connect behaviour at locations where multiple uplinks with
the same SSID are in range
* use procd pidfile handling
* refine logging
* small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>

ssl_set1_host() is not available without openssl-1.1.0. Unbound can not do
host cert verification. DNS over TLS connects, but hosts are unverified. A
patch for log err is added with a noitce in README.md.
(see: https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=658)

Also, squash some minor robustness and TLS usability fixes.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: Rosen Penev <rosenp@gmail.com>