mpd: update to 0.21.22

Removed upstreamed patches. Only the first was really needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5e0264be7dc784ca7c697ebb88c741ff1d810dba)

mpd: allow AAC decoding with mini variant

This is possible as libfaad no longer has patented functionality based on
BUILD_PATENTED.

AAC is a very popular format, so it makes sense to have some kind of
version included.

The ffmpeg package does not provide and cannot provide AAC decoding
without BUILD_PATENTED, therefore enabled FAAD for all variants.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c7d98c3626a4282e1b1c0f2b5daa79840613dccd)

mpd: link against libpthread under glibc

Fixes compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2b0b0ab7f5e08209c7d5de362fbdc96c3c1d977f)

mpd: update to 0.21.20

Updated patches to latest patchset and removed upstreamed ones.

Ran init script through shellcheck. Restart using SIGHUP.

Added logging from stderr as any kind of logging is missing in --no-daemon
mode.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3be4778840a809db12e41406b45976ec71d0c3dc)

mpd: fix ffmpeg AIFF and AMR support

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 96521b6a8d9ddcfc2abc4ea875dbb819430535ca)

mpd: replace mpg123 with libmad

libmad is almost half the size of libmpg123. The docoding is done with
integers instead of floats.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5bd4ef4035b0c92705c5e631507d4996a30501c7)

mpd: fix compilation with uClibc-ng

With mpd's build system, it requires either an iconv built into the libc
or icu. Since uClibc-ng as configured by OpenWrt currently has no iconv,
use icu for it to work around the problem. This is the simplest solution.

Added a patch to use boost's rounding functions. They are more appropriate
and work with uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c00f83241bcdf5fdb8422c96bccc739838ccce8e)

mpd: update to 0.21.19

Changed URLs to HTTPS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 41834a33ace168dcb8b92b70bfd6b71f9e4ed752)

mpd: update to v0.21.16 and build with meson

One patch was dropped (probably not required anymore).

Old options have been dropped and new ones added. The order is as found
in meson_options.txt. mpd-mini and mpd-full retained their feature sets.

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 5aaa1e7da49dcac0189a086edd17c4b70b5edfbe)

treewide: Use default PKG_BUILD_DIR when possible

This removes lines that set PKG_BUILD_DIR when the set value is no
different from the default value.

Specifically, the line is removed if the assigned value is:

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)

  The default PKG_BUILD_DIR was updated[1] to incorporate BUILD_VARIANT
  if it is set, so now this is identical to the default value.

* $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR)

  if PKG_SOURCE_SUBDIR is set to $(PKG_NAME)-$(PKG_VERSION), making it
  the same as the previous case

* $(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)

  This is the same as the default PKG_BUILD_DIR when there is no
  BUILD_VARIANT.

* $(BUILD_DIR)/[name]-$(PKG_VERSION)

  where [name] is a string that is identical to PKG_NAME

[1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=e545fac8d968864a965edb9e50c6f90940b0a6c9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 53e1692ae91b1b5fc59a7e8ab7fb98f8775eb4b6)

nsd: Update to 4.2.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6ba95fdac46cd6eae7e92f64b1cb33003bf3c802)

xmlrpc-c: Update to 1.51.03

Small Makefile reorganization.

Switch BUILD_PARALLEL to 1. Seems to work now.

Added nanosleep patch that replaces usleep usage.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 473356a562c60d8bf1600463ce440379f7264abd)

libuwsc: update to 3.3.2

Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>
(cherry picked from commit 46ec912121f2746dcd04a55e853e3c04a4266d57)

monit: update to the latest release

Remove SSL patch that has been made obsolete by upstream updates.

Update monit package to the latest release: v5.26.0. This release
supports TLSv1.3 and fixes a few bugs and vulnerabilities.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
(cherry picked from commit 9980d766ac23d1fb0fd59ada87eef1485872b512)

monit: enable / fix IPv6 detection during build

thanks to @val-kulkov for noticing

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 7cc74e4d8bfcd1af7aaa18ce2f8fd40dc9a14c14)

nlbwmon: update to latest Git HEAD

34a1887 nfnetlink: disable sequence number checking

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 53c48fae1502e7f87fd93ff299db98cd119fa304)

adblock: update 4.0.4

* add 'ca-bundle' dependency
* fix a sort bug in report engine
* fix potential bugs in the f_extconf function

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d6634b611a6c0e823ab8d429638c3a8864477600)

Merge pull request #11820 from stangri/19.07-https-dns-proxy

[19.07] https-dns-proxy: bugfix: memory leak

https-dns-proxy: bugfix: memory leak

Signed-off-by: Stan Grishin <stangri@melmac.net>

nlbwmon: update to latest Git HEAD

e757e06 nfnetlink: allow specifying the socket buffer size
33c77cb nfnetlink: properly handle nl_recvmsgs() failures
95cced5 protocol: Include whitespace when reading names

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit d81d777a0f009fe74d233de307a03f9951d6b960)

nlbwmon: bump to latest git

e921ca0a Add further commonly used protocols to the protocol file.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5e140462e42af3e5cb7680863794339f11ddda7d)

nlbwmon: add procd reload trigger for nlbwmon config

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit d5517583104c8521d978a911bff921588ba0e988)

mosh: use mips16 and remove configure patch

MIPS16 is not needed here.

Removed configure patch and replaced with a configure var.

Removed autoreconf as configure is no longer being patched.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1ead64489b7c18d3c58d7e24da079c405e0eaf50)

mosh: Fix compilation with libcxx

Partial backport of upstream patch.``

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3bfbb7d1dba923ebc3d54431bccf16b3b06ea297)

mosh: Add protobuf host build dependency

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2fcdd1fb577fee099d406b7332236c0b8715c8ab)

mosh: add package

Maintainer: Jakub Tymejczyk <jakub@tymejczyk.pl>
Compile tested: ramips, Xiaomi Router 3G, fc54256
Run tested: ramips, Xiaomi Router 3G, 0f54d96

Description:
Mosh is "Remote terminal application that allows roaming, supports
intermittent connectivity, and provides intelligent local echo and line
editing of user keystrokes".

Project's site: https://mosh.org

Makefile and patch taken from: https://github.com/mchwalisz/mosh-openwrt
updated by me

Signed-off-by: Jakub Tymejczyk <jakub@tymejczyk.pl>
(Makefile cleanup and size optimizations)
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5ac5cf0b98930b6bac9e47581bafccd80478212e)

Merge pull request #11800 from dibdot/adblock-19.07

[19.07] adblock: release 4.0.3

adblock: release 4.0.3

* new package dependencies: coreultis-sort and
  a download util with SSL support
* focus on speed (multicore-support) to handle quite big lists
* include more than 40 pre-configured blocklist sources in a compressed
  json file (/etc/adblock/adblock.sources.gz)
* dynamic SafeSearch support for google, bing, duckduckgo,
  yandex, youtube and pixabay (CNAME (bind) & IP (dnsmaq, unbound))
* DNS backend autodetection
* Download Utility autodetection
* Report Interface autodetection
* Easy cron wrapper to set an adblock related auto-timer for
  automatic blocklist updates
* raw domain/blocklist support (e.g. for dnscrypt support)
* re-add restrictive Jaillist support
* rework online doc
* Complete LuCI rewrite (migrated to client side JS)

Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #11802 from stangri/19.07-simple-adblock

[19.07] simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot

simple-adblock: bugfixes: remove escape chars from log, restore from cache on boot

Signed-off-by: Stan Grishin <stangri@melmac.net>

nano: update to 4.9.2

Update nano editor to version 4.9.2

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit f11833d46cf71be65439397e2a7e03643fc78af2)

graphicsmagic: update to version 1.3.35 (security fix)

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 171993f5a5449462a7b516c4f8824734e9863042)

Merge pull request #11772 from micmac1/19.07-apache-2443

[19.07] apache: security bump to 2.4.43

meson: update to 0.53.2

Switched to PyPI.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ccb70a340769faf1c6e58c11a39e70f1216bf9eb)

meson: update to 0.53.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 66bf801f3a6ff15db31eb689324917ec2cd312ec)

meson: fix building host binaries with ccache

With CONFIG_CCACHE, $HOSTCC is 'ccache gcc' while $TARGET_CC points to a
single wrapper script. Compiling target binaries with ccache works, but
doesn't for host binaries, because we need to supply an argv array for
argc > 1 in the meson cross file.

Always pass an array for the c and c++ compiler, and while at it, do it
for the target as well - just to be on the safe side if that ever
changes.

Fixes #10982.

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit f5c8565d1bbd8f97b1f62319398543a56d591814)

python-requests: update to version 2.23.0

Package python-idna was updated 2 weeks ago in OpenWrt 19.07.
It causes an issue:

pkg_resources.ContextualVersionConflict: (idna 2.9 (/usr/lib/python3.7/site-packages), Requirement.parse('idna<2.9,>=2.5'), {'requests'})

This is fixed in 2.23.0.

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit d62e8b9f3cd3ab9a0df23f721c24f9ef4d16836c)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[add commit message]

dnscrypt-proxy2: update to version 2.0.42

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 296a58491b6830624e580ee2f068d80878abb615)

apache: security bump to 2.4.43

This minor version bump fixes:

CVE-2020-1934
CVE-2020-1927

Upstream added cross-compile compatibility to apxs, so we can drop a sed
script. Upstream also added the OpenWrt layout, so we can drop our local
copy.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

nano: update to 4.9.1

Update nano editor to version 4.9.1

 2020.03.31 - GNU nano 4.9.1 "Sapperdeflap"
 Two bugs introduced in version 4.9 are fixed: the cursor
 getting misplaced when undoing line cuts, and filtering
 of the whole buffer to a new buffer not working.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit f5c47a2606cea00ef70ae696224cd201ca1aceb8)

Merge pull request #11755 from gladiac1337/haproxy-2.0.14-openwrt-19.07

 [openwrt-19.07] haproxy: Update HAProxy to v2.0.14

haproxy: Update HAProxy to v2.0.14

- Update haproxy download URL and hash
- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.14.html)
- This fixes CVE-2020-11100 (http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=b9cac598021e2b0d4ae2cfecf9825a3469328093)

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #11729 from stangri/19.07-vpn-policy-routing

[19.07] vpn-policy-routing: separation between auto/all proto; mwan3 compatibility; README update

vpn-policy-routing: separation between auto/all proto; compatibility with mwan3; README update

Signed-off-by: Stan Grishin <stangri@melmac.net>

gnutls: updated to 3.6.13

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

Merge pull request #11699 from stangri/19.07-simple-adblock

[19.07] simple-adblock: support multiple dnsmasq instances + internal refactoring

simple-adblock: support multiple dnsmasq instances; rework communication between principal package and luci app

Signed-off-by: Stan Grishin <stangri@melmac.net>

avahi: update to 0.8

Clean up Makefile slightly.

Update configure options for the new version.

Remove first patch and update the other one.

Use a different solution for the stack protector on certain platforms.

Run script through shellcheck. Small quote fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9290d4107722146d5c8b6e500eb2c3ce0b0a9e67)

avahi: convert to procd

Add license information.

Small cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f41612bc9c8633f931517c59f145a86f9e09eca3)

avahi: Fix pkgconfig files to be cross compile friendly

libdir should not point to the host.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 736ebb16b68d3708a0071268736e02c6bcfd5a05)

flac: Update to 1.33

Some adjustments to the configure flags.

Removed upstreamed patches.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b82bdd3f0ebd8ee1cb444bd450efce6fe7856b89)

msmtp: remove myself as maintainer

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 842b9f0f4d3f6b6f5d3984c3c998dcc3baaba2e5)

msmtp: Update to 1.8.7

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9a67d3bfb303bc464523fdd5dc4a98bdb27cdbd3)

msmtp: Update to 1.8.6

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 04b9f209a067ad378cfd69f18429db5a570852c2)

mpg123: Update to 1.25.13

Fixed license information.

Small Makefile rearrangements for consistency.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aaca589342d793b37afb922ae06b00316ad9c4c4)

screen: update to 4.8.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 318d2dd74bd231418efaa388f3f428cbedf1e32e)

screen: Update to 4.7.0

Remove all patches. They have all been merged upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 29b39264d618a6b9c90e6e72e69abf51bf21b4cf)

zstd: Fix compilation with uClibc-ng

Upstream backports.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54266c99b2a2e37a4c01b02ae74346874db7003c)

zstd: Update to 1.4.4

More speed improvements.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aaccad695e51bc3b05699fc8f2db70bc7157dd9e)

nano: update to 4.9

Update nano editor to version 4.9

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 09fd4445b3f7c426212ed61b3989e1994255a8aa)

tor: update to version 0.4.2.7 (security fix)

Fixes:
CVE-2020-10592

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

collectd: disable onewire plugin, BROKEN since 2009

Mark the onewire plugin as disabled, as the plugin
has been marked BROKEN since it was introduced in 2009 by
https://git.openwrt.org/?p=openwrt/svn-archive/packages.git;a=commitdiff;h=0de38b88d6ba8c52b8386d3059baba7dca22961f

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 286557e906613757e4b903a8aa4b734682aec85d)

collectd: disable dpdk_telemetry module

Explicitly disable the new dpdk_telemetry module to fix
compilation in buildbot.
(other dpdk modules are aleady disabled)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b936fc4e0da71df1b8ea17ed6ed3f4eedb664106)

collectd: update to 5.11.0

* Update collectd to version 5.11.0
* Refresh patches

Release notes:
https://github.com/collectd/collectd/releases/tag/collectd-5.11.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 1d11a0c892d953d7053b4548d957e3ec6a153b99)

acme: Backport two bug fixes from master

This backports the following bug-fix commits from the master branch:

c6b4d7f367de ("acme: Include empty 'dns' config option by default")
983cc995a3b2 ("acme: Correctly handle domain state dir for ECC certificates")

Fixes #11675.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>

openvswitch: depend on IPV6 for intree kmods

Ref: https://github.com/openwrt/packages/issues/11665
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 88dcd094873dd9d28515cd3408077f4d5574eccb)

openvswitch: rework skipping intree kmod build for unsupported kernels

This is a workaround to prevent the whole build from failing because of
the intree kmods are not supported yet by upstream project.

Root cause is that kernel version should not play a part when making
DEPENDS as the generated kconfig was for all targets that may have
different kernel versions.

One less than ideal effect of this change is that for an unsupported
kernel version, people can still select the intree kmod but it won't be
built.  This may contradict expectation if the warning was not noticed
by them

Resolves openwrt/packages#9274

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a6ec885522ced8185cfe66c0ab467d902f043b65)

fish: update to 3.1.0

Remove upstreamed patches.

Added missing libatomic dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit bee0bfe8621516a776e3e3712348ea0b21cf3dd7)

fish: Fix compilation with libcxx

cxxabi.h is a useless header that libcxx does not include.

Remove indent on postint script. It should be on the same as the above
section.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a135cbb9f1cf568d35e4eb62e154286ab05ccc19)

fish: Convert to CMake

CMake is faster and allows to simplify the Makefile slightly. It also
creates a slightly smaller package for some reason.

Fixed license information.

Ran postinst through shellcheck. It was using bashisms.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from faa89621783bda6bc1128822aac4995be487a39d)

syncthing: configuration cleanup & hardening

Run the service under an unprivileged
user account

The following parameters are now configurable
  niceness
  max concurrency (defaults to number of CPUs)
  user

Added flags "-no-browser"
Disabled in-place upgrades (disabled in the
build already)

Redirected stderr/stdout to syslog

Added support for "reload_config"

Increased "term_timeout" to 15s to give it
plenty of time to shut down gracefully

Properly handled non-existing directories

Removed a softlink that assumes a specific naming
convention in syncthing

Added a comment that using external storage is a
recommend configration

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
[increased package release]
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit a9443eb0eb9f5f8eacdb1daaa0f30f9deec1853d)
Tested-by: Marc Benoit <marcb62185@gmail.com>

syncthing: bump to 1.4.0

Release information:
https://github.com/syncthing/syncthing/releases/tag/v1.4.0

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 3a651638ce9c45b47e821aed5ea3086ce0290d6f)
Tested-by: Marc Benoit <marcb62185@gmail.com>

syncthing: fixup version detection

Since upstream commit dc92994 the LDFLAGS used for settings the version
(and build host and user) changed resulting in "unknown" versions in
syncthing.

Correct version detection is important for syncthing to assure
compatibility with other running instances. The "unknown" version fails
to communicate and sync with correctly compiled instances.

This patch updates the syncthing Makefile to inject the correct
variables and thereby fixes the version detection in syncthing.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b85e387cc2dec49ccaf0063f2b109e5c6151de39)
Tested-by: Marc Benoit <marcb62185@gmail.com>

strongswan: add conffiles for swanctl util

Add a conffiles-section for the /etc/swanctl folder, which is used by the  swanctl util. This will keep the configfiles during an sysupgrade.

Signed-off-by: Sven Roederer <S.Roederer@colvistec.de>
(cherry picked from commit 49f298eb745000c66169cee4791ca6e587a13ce7)

strongswan: quote 'comment' parameter in Config.in

Newer versions of the kconfig generator require quotes.  Prepare the
package for an eventual update.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 404c113bc25ac95bf08ba1b904dbbde8875c00eb)

net/pagekitec: support status reporting json file

Allows luci webapp to report health more dynamically.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

net/pagekitec: Update to newest version

Drops a patch, adds support for a status file for health tracking.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

Merge pull request #11647 from jefferyto/byobu-5.133-openwrt-19.07

[openwrt-19.07] byobu: Update to 5.133

Merge pull request #11646 from jefferyto/python-pyasn1-modules-0.2.8-openwrt-19.07

[openwrt-19.07] python-pyasn1-modules: Update to 0.2.8

Merge pull request #11645 from jefferyto/python-idna-2.9-openwrt-19.07

[openwrt-19.07] python-idna: Update to 2.9

Merge pull request #11644 from jefferyto/python-pycparser-2.20-openwrt-19.07

[openwrt-19.07] python-pycparser: Update to 2.20

Merge pull request #11643 from jefferyto/python-enum34-1.1.10-openwrt-19.07

[openwrt-19.07] python-enum34: Update to 1.1.10

Merge pull request #11641 from jefferyto/python-zope-interface-4.7.2-openwrt-19.07

[openwrt-19.07] python-zope-interface: Update to 4.7.2, refresh patch

Merge pull request #11639 from jefferyto/python-twisted-security-fix-openwrt-19.07

[openwrt-19.07] python-twisted: Fix several request smuggling attacks

Merge pull request #11636 from jefferyto/golang-1.13.9-openwrt-19.07

[openwrt-19.07] golang: Update to 1.13.9

byobu: Update to 5.133

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 847d9f18ccfcad3ae4911941488057142f91e852)

python-pyasn1-modules: Update to 0.2.8

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a6f1e7689b806e3a2baf1446cb8cb547cbc03797)

python-idna: Update to 2.9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 111d7ae088545615aeb453cee20cf5e9f91c82c9)

python-pycparser: Update to 2.20

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 931dcfe3aa992a9d23323d749a806d9627e88fa7)

python-enum34: Update to 1.1.10, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 48af5b2abb2bc3fff18aba9951d274252e7d5c19)

python-enum34: Update to 1.1.9, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 87150b43a8c5328edd7c84f2b51f16c18e0c8dde)

python-zope-interface: Update to 4.7.2, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a178662fcef00a1cebbe78253ae28eb1edb418f4)

python-twisted: Fix several request smuggling attacks

This backports a patch[1] to fix several request smuggling attacks.

This includes fixes for:
* CVE-2020-10108
* CVE-2020-10109

[1]: https://github.com/twisted/twisted/commit/4a7d22e490bb8ff836892cc99a1f54b85ccb0281

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

golang: Update to 1.13.9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

libredblack: pass CFLAGS properly

Fixes build with enabled ASLR PIE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a615a821d949f7e12874b1e0e4deb68ec08af104)

Merge pull request #11615 from stangri/19.07-https-dns-proxy

[19.07] https-dns-proxy: support for dnsmasq noresolv option

Merge pull request #11617 from nxhack/19_07_icu_66_1

[openwrt-19.07] icu: update to 66.1 & fix CVE-2020-10531

https-dns-proxy: support for dnsmasq noresolv option

Signed-off-by: Stan Grishin <stangri@melmac.net>

icu: update to 66.1

ICU 66 updates to Unicode 13, including new characters, scripts, emoji, and corresponding API constants. It also updates to CLDR 36.1 with Unicode 13 updates and bug fixes.

Create symbolic link to current version.

FIX CVE-2020-10531
 An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

youtube-dl: update to version 2020.3.8

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5d565db22234f72df7f10c874b033de4a9e6bd96)