net/pagekitec: Update to newest version

Drops a patch, adds support for a status file for health tracking.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

Merge pull request #11647 from jefferyto/byobu-5.133-openwrt-19.07

[openwrt-19.07] byobu: Update to 5.133

Merge pull request #11646 from jefferyto/python-pyasn1-modules-0.2.8-openwrt-19.07

[openwrt-19.07] python-pyasn1-modules: Update to 0.2.8

Merge pull request #11645 from jefferyto/python-idna-2.9-openwrt-19.07

[openwrt-19.07] python-idna: Update to 2.9

Merge pull request #11644 from jefferyto/python-pycparser-2.20-openwrt-19.07

[openwrt-19.07] python-pycparser: Update to 2.20

Merge pull request #11643 from jefferyto/python-enum34-1.1.10-openwrt-19.07

[openwrt-19.07] python-enum34: Update to 1.1.10

Merge pull request #11641 from jefferyto/python-zope-interface-4.7.2-openwrt-19.07

[openwrt-19.07] python-zope-interface: Update to 4.7.2, refresh patch

Merge pull request #11639 from jefferyto/python-twisted-security-fix-openwrt-19.07

[openwrt-19.07] python-twisted: Fix several request smuggling attacks

Merge pull request #11636 from jefferyto/golang-1.13.9-openwrt-19.07

[openwrt-19.07] golang: Update to 1.13.9

byobu: Update to 5.133

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 847d9f18ccfcad3ae4911941488057142f91e852)

python-pyasn1-modules: Update to 0.2.8

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a6f1e7689b806e3a2baf1446cb8cb547cbc03797)

python-idna: Update to 2.9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 111d7ae088545615aeb453cee20cf5e9f91c82c9)

python-pycparser: Update to 2.20

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 931dcfe3aa992a9d23323d749a806d9627e88fa7)

python-enum34: Update to 1.1.10, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 48af5b2abb2bc3fff18aba9951d274252e7d5c19)

python-enum34: Update to 1.1.9, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 87150b43a8c5328edd7c84f2b51f16c18e0c8dde)

python-zope-interface: Update to 4.7.2, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a178662fcef00a1cebbe78253ae28eb1edb418f4)

python-twisted: Fix several request smuggling attacks

This backports a patch[1] to fix several request smuggling attacks.

This includes fixes for:
* CVE-2020-10108
* CVE-2020-10109

[1]: https://github.com/twisted/twisted/commit/4a7d22e490bb8ff836892cc99a1f54b85ccb0281

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

golang: Update to 1.13.9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

libredblack: pass CFLAGS properly

Fixes build with enabled ASLR PIE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a615a821d949f7e12874b1e0e4deb68ec08af104)

Merge pull request #11615 from stangri/19.07-https-dns-proxy

[19.07] https-dns-proxy: support for dnsmasq noresolv option

Merge pull request #11617 from nxhack/19_07_icu_66_1

[openwrt-19.07] icu: update to 66.1 & fix CVE-2020-10531

https-dns-proxy: support for dnsmasq noresolv option

Signed-off-by: Stan Grishin <stangri@melmac.net>

icu: update to 66.1

ICU 66 updates to Unicode 13, including new characters, scripts, emoji, and corresponding API constants. It also updates to CLDR 36.1 with Unicode 13 updates and bug fixes.

Create symbolic link to current version.

FIX CVE-2020-10531
 An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

youtube-dl: update to version 2020.3.8

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5d565db22234f72df7f10c874b033de4a9e6bd96)

haveged: move init script from 13 to 01

This is intended as a match with standard urngd. They serve same purpose
and urngd starts as first with 00. Starting haveged later can create
issues if you replace urngd with it. The example problem is if
uci-defaults script decides to generate certificate. Haveged can supply
entropy but it is started later and to mitigate this urngd would still
have to be installed. This means that haveget can't serve as replacement
without moving it to match start order of urngd.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 1ef38f45d982beb46b2df6d3582ad0bc2b0007ca)

libarchive: update to 3.4.2

Switch to normal tarballs. Remove autoreconf as a result.

Several Makefile cleanups for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c22dd1bf74fa5836a88fa417b467767bcfe8a4ff)

Merge pull request #11566 from BKPepe/python3-update-19.07

[19.07] python3: update to version 3.7.7

openvswitch: fix PIE build against 4.14 kernel

Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/pull/11567
(cherry picked from commit e9d6414437d27803a16b5d96c48b45140e989e5e)

x264: add CONFIGURE_VARS and MAKE_FLAGS when NASM is not selected

- Remove dot in TITLE
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit faac2352e2d3f14de8dfd69f1801e6561ccb156c)

nfs-kernel-server: Fix compile with uClibc-ng

NS_MAXMSG is not defined.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 732b1c4c0e1203cf3f07459694680a6a830a6d71)

xtables-addons: disable ASLR PIE

This package uses ld for linking and therefor does not support the
-specs option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
(cherry picked from commit 3804006e60579ed9f44c5b315d186ed364f04455)

python3: update to version 3.7.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

django: bump to version 1.11.29

Includes several CVE fixes.
- CVE-2020-7471 in 1.11.28
- CVE-2020-9402 in 1.11.29

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #11540 from neheb/softee

[19.07]softethervpn: Update to rtm version 4.29-9680

softethervpn: disable PIC

Compilation is broken on AArch64.

Reordered some things for consistency between packages.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b8b4e7e2694bb9b6e678f1b06bbe793c9bde0535)

softethervpn: Fix openssl header patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 41fe5a8335dee6e59e3053feb3667d718517fb88)

softethervpn: Add missing OpenSSL header

Fixes compilation without OpenSSL deprecated APIs as well as
-Werror=implicit-function-declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b80b614f8f659e352723a49cc4459521049198ab)

softethervpn: Update to rtm version 4.29-9680

Update SoftEther VPN to the latest rtm version 4.29-9680

Compile tested: Atheros AR7xxx/AR9xxx, TP-LINK Archer C7 v2, 18.06.4

Signed-off-by: Philipp Schuster <philippschuster@gmx.com>
(rebased and refreshed patches).
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 34db38520b879ba8dcf637d2f8bdb365e545b5bb)

stubby: fix init script

The configuration file was not being generated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b95699c6475795ae4d500a43a7cd382de655ec3f)

stubby: makefile and init script cleanup

Reordered Makefile according to
https://github.com/openwrt/packages/pull/9399#issuecomment-508727872 .

Added PKG_BUILD_PARALLEL for faster compilation.

Remove duplicated conffiles section.

Install /etc/config/stubby using INSTALL_CONF, as is done elsewhere

Run init script through shellcheck and clean it up.

Added chmod for the stubby config file, to fix a LuCI issue.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eaf522532324f9155d2d038e27006e5caaf9874a)

btrfs-progs: fix check for btrfs in btrfs scan

The previous implementation always succeeded so no scan was performed.
This now fixes that and it correctly scans for BTRFS  devices if BTRFS
support is in kernel.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>

syslog-ng: update to version 3.26.1

- Bump version also in the config file
- Move logread to /sbin location instead of /usr/sbin
Because package logd in OpenWrt's ubox Makefile uses /sbin folder and LuCI has
the same path hardcoded in
modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json and using
different location results that LuCI is not able to load log data as it
is not found.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fe165eeb94d2e7fb35fee93e64336afa024a1283)

Merge pull request #11526 from wvdakker/openwrt-19.07

[Openwrt 19.07] Shorewall: Bump to 5.2.3.7

Merge pull request #11524 from micmac1/1907arc_aio2

[19.07] mariadb: add dependency on libaio for arc as well

Shorewall6: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall6-lite: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-lite: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-core: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

mariadb: add dependency on libaio for arc as well

Now that libaio compiles on arc targets we need to add the dependency to
libaio on these targets as well.

resolves #9298

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

youtube-dl: update to version 2020.3.6

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

youtube-dl: update to version 2020.3.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #11501 from Bloup1net/phantap19.07

phantap: add to 19.07

libuv: update to 1.34.2

https://github.com/openwrt/packages/pull/11320#issuecomment-594032207

luv, libwebsockets, ttyd, netdata are build OK.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

cgi-io: fix compilation against uClibc

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit ed965cf16fd9ee6a798322b7b73f8c509295f19d)

cgi-io: use O_TMPFILE for uploads and attempt to directly link target file

Create an anonymous inode in /tmp using O_TMPFILE and attempt to link the
file in place using linkat(). Only fall back to the old file copy when
linking the tempfile fails.

Avoids double memory use if both the temporary upload file and the
destination file are located in /tmp.

Ref: https://github.com/openwrt/luci/issues/3654
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 4f4a7e9532e55a16336b79b74b5fb0236e365279)

cgi-io: use dynamic memory for post decoding, support proc files

Allocate dynamic buffer memory for decoding post data and allow post
requsts up to 128KB compared to the previos 1KB limit.

Also support downloading /proc and /sys files by falling back to
chunked transfer encoding when the file size cannot be determined.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 39087eba18011ca1e064c8e356ee33533be760db)

Merge pull request #11500 from fantom-x/irqbalance-backport

Irqbalance: backport to 19.07

irqbalance: support reload_config & start later

Added support for reload_config

This service does not need to start so early (even
before the netwrok is up). Start it after
the device is mostly up and operational.

Compile-tested on: ipq806x
Runtime-tested on: ipq806x

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit b6078559cdd47b4def5bb44dd46759a8591f3e4f)

irqbalance: add support of interval and banirq

Added the ability to change sampling interval
and provide a list of IRQ's to ignore
via /etc/config/irqbalance

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit b7a99b2334e6c69615dc34f93015b8c3ace382c2)

irqbalance: upgrade to 1.6.0

Upgraded from 1.2.0 to 1.6.0 to pick up
all the latest fixes and improvements

irqbalance made glib2 mandatory since 1.3.0, but is
using very little of it. glib2 linked statically
to minimize the impact.

1.2.0 size: 33,619
1.6.0 size: 99,539

~# irqbalance --version
irqbalance version 1.6.0

~# ldd /usr/sbin/irqbalance
/lib/ld-musl-armhf.so.1 (0xb6f5f000)
libgcc_s.so.1 => /lib/libgcc_s.so.1 (0xb6f43000)
libc.so => /lib/ld-musl-armhf.so.1 (0xb6f5f000)

~# opkg info irqbalance
Package: irqbalance
Version: 1.6.0-6
Depends: libc
Status: install user installed
Architecture: arm_cortex-a7_neon-vfpv4
Installed-Time: 1582839249

Compile-tested: ipq806x/R7800 & ipq40xx/GL-B1300
Run-tested:     ipq806x/R7800 & ipq40xx/GL-B1300

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit bdcb872a40e4567bc57c45299a0df5efad65207f)

phantap: add to 19.07

Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>

Merge pull request #11482 from BKPepe/libaio_update

[OpenWrt 19.07] libaio: Update to 0.3.112

libaio: Update to 0.3.112

Replace inactive maintainer with myself.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7cd204e99e564ea9c19e2e1b50e7088ffc5252a8)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[compile tested on powerpc_8540]

mosquitto: bump to 1.6.9

Full changelog: https://mosquitto.org/blog/2020/02/version-1-6-9-released/

Nothing of particular relevant to OpenWrt, just general fixes.

Signed-off-by: Karl Palsson <karlp@etactica.com>

syncthing: enable via config, lower priority, cleanup

Added the ability to enable/disable via a config file;
the default is enabled for backwards compatibility.

This is an additional service, so running it the
same priority as dnsmasq, etc does not make sense.

Added USE_PROCD=1

"done" starts at "START=95", so this should start earlier

Added STOP=10 to stop syncthing early

Compile-tested on: ipq806x, ipq40xx
Runtime-tested on: ipq806x, ipq40xx

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit 6f6877460a775a75f16154f2d75944bf91770f0d)

Merge pull request #11472 from fantom-x/syncthing-19.07

syncthing: backport to 19.07

syncthing: bump to 1.3.4

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 7c1d6571ca4a6ca8dd03fb9b3b212a2a78525543)
Tested-By: Marc Benoit <marcb62185@gmail.com> [19.07: R7800/GL-B1300]

syncthing: add package

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 373d3b2420beedb7bfaaaed5e6a3c7072532f278)
Tested-By: Marc Benoit <marcb62185@gmail.com> [19.07: R7800/GL-B1300]

pagekite: add simple websockets and update syntax

Syntax now matches preferred upstream style.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

pagekite: avoid redundant information in syslog

Patch from upstream: https://github.com/pagekite/libpagekite/commit/7b4587818564aa667f868249e9a8f1dc1d095fd3

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

pagekite: bump to v0.91.200218

pings the front ends less aggressively, reducing cpu usage on the host.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

ocserv: updated to 0.12.6

Fixes: #11174
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

gnutls: updated to 3.6.12

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

php7: update to 7.2.28

This fixes:
  - CVE-2020-7062
  - CVE-2020-7063

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

xl2tpd: fix building failure caused by pfc

Fixes openwrt/packages#10270

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 0412c20f1b2d2e1f8b8c7e101aae6f66be50690a)

xl2tpd: bump to version 1.3.15

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/issues/11418
(cherry picked from commit 620ba386b4ffd38911e7ddf0c864979c0f834a11)

zip: remove package

zip has 12 year old source code that would require work to make
the binary actually work.

> root@router1:/# zip
> zip error: Not supported (uzoff_t not same size as zoff_t)

As the binary does not work, lets remove the package to
avoid confusion for the end-users.

Reference to #10985 and #11089 as well as
https://github.com/openwrt/openwrt/commit/ad8c2d6099a7da5192ee6e2c52a8303642271

Adapted from: c1201a999b0

(note: The package was renamed in master from zip to infozip
a few weeks ago due to buildbot's relutance to compile zip in
master and 19.07 ever since host zip was added as a build tool.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

nnn: update to version 3.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2078a7707b730f48fb34bcc50e5cf5037447ecab)

nnn: update to version 2.9

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d511e2d8638e5c7716dddc72cd0e6b94ec95a4dc)

youtube-dl: update to version 2020.2.16

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 983be45ad737a5f5fee44b5333b97c44f68900c5)

youtube-dl: update to version 2020.1.24

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f0390a40b9552de1ec6ec0b88f065803ad7463e7)

youtube-dl: update to version 2020.1.15

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[use pypi.mk]
(cherry picked from commit 588ec4add479607af960f91e5b523c67bf3e294a)

acme: update to 2.8.5

Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
[ fix for 19.07 branch ]
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

Merge pull request #11381 from wvdakker/openwrt-19.07

[Openwrt 19.07] Shorewall: Bump to 5.2.3.6

Shorewall6: Bump to version 5.2.3.6

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: Bump to version 5.2.3.6

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall6-lite: Bump to version 5.2.3.6

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-lite: Bump to version 5.2.3.6

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-core: Bump to version 5.2.3.6

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Merge pull request #11375 from jefferyto/golang-1.13.8-openwrt-19.07

[openwrt-19.07] golang: Update to 1.13.8

golang: Update to 1.13.8

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #11360 from gladiac1337/haproxy-2.0.13-openwrt-19.07

[openwrt-19.07] haproxy: Update HAProxy to v2.0.13

haproxy: Update HAProxy to v2.0.13

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

ffmpeg: disable x86 asm for old CPU types

This is a workaround for NASM being totally broken.

I have two patches, one for master and another for 19.07 that upstream is
not merging.

https://patchwork.ozlabs.org/patch/1221696/
https://patchwork.ozlabs.org/patch/1221697/

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 013162d07968738bf837370a91536d35b8f780e7)

ffmpeg: update to 3.4.7

Signed-off-by: Ian Leonard <antonlacon@gmail.com>
(cherry picked from commit 948c4da0af707f31bded88a1b85b2700377c74b4)

ffmpeg: Fix fdkaac patches

The patch created patch files in the ffmpeg build directory, which did
absolutely nothing. Properly backported them.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9af78c5498a596980ead58059f3d0423ef7bc449)

ffmpeg: Fix pkgconfig files to be more cross compile friendly

Before:

prefix=/usr
exec_prefix=${prefix}
libdir=/usr/lib
includedir=/usr/include

After:

prefix=/usr
exec_prefix=/usr
libdir=${exec_prefix}/lib
includedir=${prefix}/include

Numbered the other patch file.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7477663489a744d449b95ac34ef0db2b02374172)

zabbix: remove configure patch

Allows removing autoreconf.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f846ced1c89ac1a4b3f72b19040c7ef11a0791dd)

zabbix: Fix compilation with uClibc-ng

This is similar to a patch that was previously carried.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8bc32479eac883283486269e700dfe7296e367f6)