Merge pull request #5324 from benhsmith/master

Compile tested: brcm47xx, OpenWRT rb8edaf4

Merge pull request #5325 from stangri/simple-adblock

simple-adblock: new boot logic & updated blacklists

nfs-kernel-server: update to 2.3.1

Signed-off-by: Peter Wagner <tripolar@gmx.at>

simple-adblock: new boot logic

Signed-off-by: Stan Grishin <stangri@melmac.net>

netwhere: fix memory corruption problem

Compile tested: brcm47xx, OpenWRT rb8edaf4
Run tested: brcm47xx, ASUS RT-N16, DESIGNATED DRIVER (Bleeding Edge, 5014x5)

Signed-off-by: Ben Smith <le.ben.smith@gmail.com>

Merge pull request #5323 from ejurgensen/libunistring_update_098

libunistring: update to 0.9.8

Merge pull request #5314 from benhsmith/master

libs/libgcrypt: switch PKG_SOURCE_URL to https URI

libunistring: update to 0.9.8

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

Merge pull request #5282 from lucize/nginxup

nginx: update to 1.12.2

reaver: configure with --enable-savetocurrent

It will let reaver to save session file to cwd of the process instead of
/etc/reaver.  This has the same effect as the old patch

  0002-Use-the-current-directory-for-storing-and-loading-se.patch

which was removed in the transition to reaver-wps-t6x-fork

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Merge pull request #5061 from mrkiko/hostside-luarocks

luarocks: Allow building luarocks for the host

Merge pull request #5308 from TimelessNL/add_digitemp

digitemp: reintroduce package

Merge pull request #5316 from luizluca/ruby-2.4.3

ruby: bump to 2.4.3

ruby: bump to 2.4.3

This release includes some bug fixes and a security fix.

CVE-2017-17405: Command injection vulnerability in Net::FTP

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

digitemp: reintroduce package
This reintroduces digitemp from the "old unmaintained" repository: http://git.openwrt.org/?p=packages.git;a=tree;f=utils/digitemp;hb=HEAD
Updated to v3.7.1 and based on github as mentioned here: https://www.digitemp.com/software.shtml
Set myself as maintainer.

Signed-off-by: Jasper Scholte <NightNL@outlook.com>

usbip: fix typo (closes #4994 #5312)

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

libs/libgcrypt: switch PKG_SOURCE_URL to https URI

curl hangs with the ftp URI

Signed-off-by: Ben Smith <le.ben.smith@gmail.com>

Merge pull request #5305 from hbl0307106015/ndpi

libndpi: bump to version 2.2

Merge pull request #5309 from sartura/sysrepo_release_0.7.2

Sysrepo release 0.7.2

Merge pull request #5307 from TimelessNL/add_rtl_433

rtl_433: add package

Merge pull request #5299 from thess/shairport-sync

shairport-sync: Update to 3.1.6

usbip: fix usb.ids download (closes #4994)

Used the same solution as in utils/usbutils/Makefile

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

watchcat: bump release due to 8e1e4d7d2d2bfe88c1b14a8e844222278e12fccc

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

netopeer2: bump to latest version

This patch add's a new cmakefile which builds other cmakefiles and
simplifies the Makefile, also it renames the yang files so
sysrepoctl does not create duplicates.

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

sysrepo: bump to latest version

This patche renames the yang files so sysrepoctl does not create
duplicates.

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

libnetconf2: bump to latest version

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

libyang: bump to latest version

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

rtl_433: add package
This will add the rtl_433 package. The project can be found: https://github.com/merbanan/rtl_433
It is based on a recent trunk since the latest release is negligible.

Signed-off-by: Jasper Scholte <NightNL@outlook.com>

gnunet: update to git snapshot 2017-12-19

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libndpi: bump to version 2.2

Signed-off-by: BangLang Huang <banglang.huang@foxmail.com>

xl2tpd: README.md: add docs on uci options

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

shairport-sync: Update to 3.1.6

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #5286 from pprindeville/lighttd-update-1.4.48

lighttpd: update to 1.4.48

Merge pull request #5298 from wvdakker/master

Fixed double/missing entry in path.

Shorewall6: Fix double/missing entry in path.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: Fix double/missing entry in path.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Merge pull request #5295 from wvdakker/reorder

Shorewall(6)-lite: Reorder install section

Merge pull request #5296 from wvdakker/set-path

Shorewall(6): Set path

Merge pull request #5294 from damianorenfer/master

libs/libsodium: update to 1.0.16

Shorewall6-lite: Reorder package/install section.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-lite: Reorder package/install section.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

xl2tpd: remove demand support from netifd l2tp protocol

This pppd feature does not make sense in L2TP case because the
tunnel is already connected when xl2tpd launch pppd process. If
a dial-on-demand feature is to be implemented, trigger interface
would have to be provided by xl2tpd, not pppd.

Signed-off-by: Alin Nastac <alin.nastac@gmail.com>

Shorewall6: Change path to prevent busybox/ip detection before ip-tiny/full.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: Change path to prevent busybox/ip detection before ip-tiny/full.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

libs/libsodium: update to 1.0.16

Signed-off-by: Damiano Renfer <damiano.renfer@gmail.com>

Merge pull request #5291 from pprindeville/acpica-unix-update-20171215

acpica-unix: update to 20171215

Merge pull request #5290 from brianjmurrell/set-PATH

shorewall-lite: set the $PATH variable

acpica-unix: update to 20171215

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

shorewall6-lite: set the PATH variable

So that it matches LEDE's default PATH value.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

shorewall-lite: set the PATH variable

So that it matches LEDE's default PATH value.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

Merge pull request #5236 from lynxis/rb_perl

perl: remove build timestamp

Merge pull request #5271 from jow-/introduce-setserial

setserial: introduce package

lighttpd: update to 1.4.48

All of the bugs for which we had patches have been fixed upstream
in 1.4.46, so the patches can be dropped.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Revert "python,python3: add zlib/host to HOST_BUILD_DEPENDS"

This reverts commit c764f77dc1a62ce667b38520496ddb9bfaececab.

The commit caused warnings to be displayed at make defconfig etc.
  WARNING: Makefile 'package/feeds/packages/python/python/Makefile'
  has a host build dependency on 'zlib/host' but
  'package/libs/zlib/Makefile' does not implement a 'host' build type

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #5274 from commodo/python-host-zlib

python,python3: add zlib/host to HOST_BUILD_DEPENDS

Merge pull request #5118 from jow-/cgi-io-sha256

cgi-io: support SHA256 checksums for file uploads

Merge pull request #5264 from TDT-AG/pr/20171211-net-stunnel-add-uci-enabled-param

net/stunnel: add enabled config option

Merge pull request #5283 from dibdot/travelmate

travelmate: release 1.0.0

Merge pull request #5237 from lynxis/rb_php7

php7: remove build timestamp

Merge pull request #5280 from bk138/ola-0.10.5-try2

ola: update to 0.10.5, drop obsolete patches

travelmate: release 1.0.0

* limit sta interface selection/handling
  to defined travelmate interface (trm_iface) only
* check eap capabilities and ignore enterprise uplinks
  as long as eap support is not available
* documentation update
* cosmetics
* LuCI: various cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>

ola: update to 0.10.5, drop obsolete patches

This also add a patch fixing builds with newer protobuf versions,
https://github.com/OpenLightingProject/ola/pull/1336.

Signed-off-by: Christian Beier <dontmind@freeshell.org>

nginx: update to 1.12.2

also fixes gcc7.2 compile

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Merge pull request #5279 from mstorchak/lsof

lsof: reproducible build

Merge pull request #5244 from yousong/p11-err.h

openconnect: fix compilation against libp11 >= 0.4.7

lsof: reproducible build

- clear build host and user info
- clear compiler flags
- set date to SOURCE_DATE_EPOCH

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

net/stunnel: add enabled config option

Add an enabled option for the service section, so you could keep your
configuration in place without apply this section on startup or service reload.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

openconnect: fix compilation against libp11 0.4.7

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Merge pull request #5179 from neheb/cifs

cifs-utils: Update to 6.7

php7: remove build timestamp

Build timestamp prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

perl: remove build timestamp

Build timestamp prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

Merge pull request #5276 from thess/fdk-aac

fdk-aac: Update to latest source revision. Add myself as maintainer

Merge pull request #5261 from nxhack/bump_to_60_2

icu: update to 60.2

icu: update to 60.2

Maintainer: me
Compile tested: ar71xx, LEDE trunk r5488-893a1ed
Run tested: NONE

Description:
upstream update to 60.2
note: fix g++-4 issue

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

fdk-aac: Update to latest source revision. Add myself as maintainer

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #5275 from thess/unrar-update

unrar: Update to latest version (5.5.8)

unrar: Update to latest version (5.5.8)

11-Aug-2017 version fixes outstanding CVE's.
CVE-2012-6706, CVE-2017-12942, CVE-2017-12941, CVE-2017-12940 and CVE-2017-12938

Signed-off-by: Ted Hess <thess@kitschensync.net>

python,python3: add zlib/host to HOST_BUILD_DEPENDS

This should fix the zlibmodule build on the host side.

Usually, if zlib is not found, Python/Python3 builds fine
without it, but there are some cases where the Python/Python3
interpreter on the host-side requires zlib to run.

At the moment, zlib does not have a host-build.
This should be available when this PR gets merged:
https://github.com/lede-project/source/pull/1329
[ or a similar one that contains host-build support for zlib ].

In the meantime, this change can go into Python/Python3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

mjpg-streamer: Remove build date-time from image

Remove un-needed uvcvideo.h (use system include)

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #5190 from jow-/iodine-fix-musl-endianess

iodine: properly detect endianess when building against musl libc

iodine: workaround incomplete musl nameser.h header

The arpa/nameser.h header of musl libc indirectly depends on the endian.h
header but fails to explicitely include it to properly define
`__BYTE_ORDER` and `__BIG_ENDIAN` prior to declaring the DNS `HEADER`
structure.

When both the appropriate `__BYTE_ORDER` and `__BIG_ENDIAN` defines are
unset, the `#if __BYTE_ORDER == __BIG_ENDIAN` condition in `nameser.h`
evaluates to true, causing it to declare a bad (big endian) DNS packet
header structure on little endian systems.

Work around this musl bug by forcibly passing `-include endian.h` through
the `osflags` file.

An upstream fix for musl libc has been submitted with
http://www.openwall.com/lists/musl/2017/12/04/3

This should solve iodine packet corruption on little endian musl systems
reported at
http://lists.infradead.org/pipermail/lede-dev/2017-November/010085.html

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

setserial: introduce package

This packages setserial, the standard Linux program for setting serial
device attributes such as baud rate, flow control etc.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

nlbwmon: update to current HEAD

Update to latest Git HEAD in order to solve a number of issues.

 - Improves MAC address lookup reliability
 - Properly counts DNAT-ed connections (e.g. for port forwards)
 - Fixes stack corruption when parsing netlink records
 - Fixes deletion of gzipped databases

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

Merge pull request #5267 from diizzyy/patch-112

utils/gawk: Fix package

Merge pull request #5218 from lynxis/rb_lua-rs232

lua-rs232: remove build timestamp

Merge pull request #5207 from lynxis/rb_libdbd

libdbi-drivers: remove build timestamp

lxc: add lxc-unprivileged helper package for unprivileged containers

LXC requires newuidmap and newguidmap with SUID to run unprivileged
containers. This package should help users make sure they are available.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>

utils/gawk: Fix package

Remove igawk references as it's obsolete and not provided anymore.
Reported here: https://github.com/openwrt/packages/issues/5110
Fix package URL

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Merge pull request #5213 from lynxis/rb_openplc

open-plc-utils: remove build timestamp

Merge pull request #5263 from yangfl/master

i2pd: Update to 2.17.0

Merge pull request #5262 from neheb/patch-1

gnutls: Use HTTP instead of FTP

net/mosquitto: reproducible build patches

Remove build timestamp.  Using currently proposed upstream patch.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Signed-off-by: Karl Palsson <karlp@etactica.com>

net/mosquitto: depend on virtual package instead of select

Can't use DEPENDS:= +libname when libname is now a virtual package.
Switch to plain DEPENDS:= libname.

Fixes Github issue 4751

Signed-off-by: Karl Palsson <karlp@etactica.com>

libwebsockets: remove build hostname

Using the build hostname breaks reproducible builds.
The patch is already merged upstream

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

libwebsockets: bump to version 2.4.1

No changelog entry upstream unfortunately.

Signed-off-by: Karl Palsson <karlp@etactica.com>

i2pd: Update to 2.17.0

Signed-off-by: David Yang <mmyangfl@gmail.com>

gnutls: Use HTTPS instead of FTP

While recently building asterisk, the make system stalled on gnutls. On my install of Ubuntu 16.04 on WSL, it seems curl can't download from ftp and doesn't even time out properly. Easiest solution is to switch the gnutls Makefile to use HTTPS instead.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #5259 from valdi74/update_python-curl

python-curl: update to 7.43.0.1

Merge pull request #5197 from commodo/python-bluez-deps

 python,python3: define config option for bluetooth support

python-curl: update to 7.43.0.1

Signed-off-by: Waldemar Konik <informatyk74@interia.pl>