Merge pull request #12070 from stangri/19.07-vpn-policy-routing

[19.07] vpn-policy-routing: bugfix: remove non-ASCII from log; update README

Merge pull request #12057 from stangri/19.07-vpnbypass

[19.07] vpnbypass: bugfix: remove non-ASCII from system log; update README

vpn-policy-routing: bugfix: remove non-ASCII from log; update README

Signed-off-by: Stan Grishin <stangri@melmac.net>

vpnbypass: bugfix: remove non-ASCII from system log; update README

Signed-off-by: Stan Grishin <stangri@melmac.net>

openconnect: updated to 8.09

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

ocserv: updated to 1.0.1

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

youtube-dl: update to version 2020.3.24

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0085b928f7aeb41252f440124cbaeb6ba28b2d21)

Merge pull request #11999 from jefferyto/bash-import-patches-openwrt-19.07

[openwrt-19.07] bash: Import upstream patches

travelmate: fix captive portal detection

* made captive portal detection more bullet proof, fixes #11990

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1aa4518dfc57e7cee0bac0b8dadaf7718ab4a6e9)

bash: Import upstream patches

Source:
https://ftp.gnu.org/gnu/bash/bash-5.0-patches/
(bash50-003 to bash50-017)

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dc5f2df6a4d2a1a0ca1a25f105609fd801035963)

Merge pull request #11992 from Robby-/openwrt-19.07-freeradius3_update_3_0_21

[19.07] freeradius3: Update to 3.0.21

Merge pull request #11994 from jefferyto/python-2.7.18-openwrt-19.07

[openwrt-19.07] python: Update to 2.7.18, refresh patches

expat: Update to version 2.2.9

Fixes CVE-2019-15903

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 71814007a6b631ac85f5cc9db4522014bd809f17)

python: Update to 2.7.18, refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

freeradius3: Update to 3.0.21

Latest stable release.

Signed-off-by: Robby K <robbyke@gmail.com>

freeradius3: Updated patches/004-fix-target-python-header-detection.patch to remove the rlm_python3 specific changes as it is no longer needed to compile and updated the Makefile to reflect this due to the following change/commit in freeradius:
https://github.com/FreeRADIUS/freeradius-server/commit/307678b268cf8898a65632147ecc40d37ea3f9d3

This is in preparation for the 3.0.21 update.

Signed-off-by: Robby K <robbyke@gmail.com>

freeradius3: Refreshed patches/002-disable-session-cache-CVE-2017-9148.patch in preparation for the 3.0.21 update.

Signed-off-by: Robby K <robbyke@gmail.com>

freeradius3: Fix the ordering in the Makefile.

Signed-off-by: Robby K <robbyke@gmail.com>

mwan3: fix whitespace issue

fixes #11965

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3c34b151f649d243126240298d4f51c7e2dd7939)

mwan3: Ping IPv6 hosts using address not interface

Pinging IPv6 hosts using an interface as a source specifier seems
troublesome.  See https://bugs.openwrt.org/index.php?do=details&task_id=2897
for more detail.

Use the desired source interface's IP address instead.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
(cherry picked from commit 6721587e8b491f1a539cdcc507b0f4811ff2b448)

mwan3: change license to SPDX compatible identifier

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 6d638c3e23f66850cc8bd272b9fe5b9f11bec784)

mwan3: update version to 2.8.2

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 14dd084662ae9f92091c34a177ef0e9a3c2913c8)

mwan3: add httping_ssl option

Till now we could only ping http targets on port 80. With this change by
adding the config boolean config option httping_ssl we could also ping
https ping targets on port 443.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a689e168aaa9c9850e35c5ff3f2f0745d04d5006)

mwan3: fix variable naming

The variable IPT is not valid at this point. Set the variable usage to IPT4
fixes this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 581d7df844f47e5284245db47b36e21138d2653e)

Merge pull request #11986 from jefferyto/python-target-build-tools-openwrt-19.07

[openwrt-19.07] python,python3: Fix host build tool names recorded in target files

python: Fix host build tool names recorded in target files

Python will record the values of CC, CXX, AR, and RANLIB (and other
configure options) used during compilation. pip will use these programs
when asked to compile extension modules on the target device.

* If ccache is used during build, CC and CXX will be ccache_cc and
  ccache_cxx, respectively, which are not available on-device (#11912).

* If an external toolchain is used during build, the values of these
  variables will contain the external toolchain prefix, which may not be
  available on target.

* If the normal toolchain is used during build, AR and RANLIB will
  contain the toolchain prefix, but the names of ar and ranlib on-device
  do not contain the prefix; they are named "ar" and "ranlib".

This changes the values of these variables in Python's files to match
the names available on-device, and without any toolchain prefix.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3: Fix host build tool names recorded in target files

Python will record the values of CC, CXX, AR, and READELF (and other
configure options) used during compilation. pip will use these programs
when asked to compile extension modules on the target device.

* If ccache is used during build, CC and CXX will be ccache_cc and
  ccache_cxx, respectively, which are not available on-device (#11912).

* If an external toolchain is used during build, the values of these
  variables will contain the external toolchain prefix, which may not be
  available on target.

* If the normal toolchain is used during build, AR and READELF will
  contain the toolchain prefix, but the names of ar and readelf
  on-device do not contain the prefix; they are named "ar" and
  "readelf".

This changes the values of these variables in Python's files to match
the names available on-device, and without any toolchain prefix.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9f81ab895eca0709d1a7b4804b36a5cd00b4f368)

Merge pull request #11976 from br101/pingcheck-update

pingcheck: Update and add script directories

pingcheck: Update and add script directories

- Update to version with longer interface names.

- Add /etc/pingcheck/(on|off)line.d/ directories with an example
  script. Closes #11263

Signed-off-by: Bruno Randolf <br1@einfach.org>

mpd: update to 0.21.23

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 332e6d4e26763e398a59362f1590bf0bbe6c967a)

Merge branch 'BKPepe-19.07-php7' into openwrt-19.07 (fixes #11923)

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge branch '19.07-php7' of https://github.com/BKPepe/packages into
a local branch for conflict resolving.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7: fix dependencies for mysqlnd (fixes #11113)

When during the build the openssl extension is also selected, then
the mysqlnd extension depends on it, too.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 50b1cd3757497a569538d751f4681a40df1b1202)

Merge pull request #11948 from dvtirol/rlm_rest-19.07

OpenWrt 19: freeradius3: Support building freeradius3-mod-rest

freeradius3: Support building freeradius3-mod-rest

Signed-off-by: Tobias Girstmair <tobias.girstmair@tirol.gv.at>

Merge pull request #11946 from jefferyto/python-pip-pep517-pyc-fix-openwrt-19.07

[openwrt-19.07] python-pip,python3-pip: Fix error when installing packages that require compilation

python-pip: Fix error when installing packages that require compilation

This addresses one of the issues raised in #11912.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3-pip: Fix error when installing packages that require compilation

This addresses one of the issues raised in #11912.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 11bc05763d6cb351842a7bd55e736b601656a41a)

travelmate: refine logical interface selection

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 9eebb43159f0946f9efef41bbbd14361df60afa7)

less: add ALTERNATIVES

This package can not be installed if you have installed less from
busybox.

Collected errors:
 * check_data_file_clashes: Package less wants to install file /bin/less
        But that file is already provided by package  * busybox
 * opkg_install_cmd: Cannot install package less.

To avoid this error, I moved it from /bin/less to /usr/bin/less.

If you install it now, it changes symlink from busybox to /usr/bin/less
/bin/less -> busybox*
/bin/less -> /usr/bin/less*

When you remove it, it changes symlink back to busybox.

That's why postint and postrm scripts are no longer needed.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0ae161ecb6928f87103921237ce28a54cdfd6061)

Merge pull request #11938 from aleksander0m/aleksander/modem-updates-19.07

libqmi and MM updates for stable 19.07

modemmanager: release 1.12.8

https://lists.freedesktop.org/archives/modemmanager-devel/2020-March/007729.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 052d9274eff6accf383ea3e416bc95465e1f3268)

modemmanager: release 1.12.6

https://lists.freedesktop.org/archives/modemmanager-devel/2020-February/007713.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit d121e270e88f0015589b5c00f563c767ac145b09)

libqmi: update version to 1.24.10

https://lists.freedesktop.org/archives/libqmi-devel/2020-April/003275.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 5f995ccb47006dfc096b68b84ac1885d7ef9d32a)

libqmi: update to version 1.24.8

https://lists.freedesktop.org/archives/libqmi-devel/2020-March/003248.html

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit b3fe4254ab4549d88ea32be3faa9636338d7d179)

libqmi: bump libqmi version

Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
(cherry picked from commit e9813262f93b65420134655651f9d842e06b4829)

Merge pull request #11928 from jefferyto/golang-1.13.10-openwrt-19.07

[openwrt-19.07] golang: Update to 1.13.10

travelmate: release 1.5.4

* add 'status_service' as workaround to init for 19.07
* fix 'wifionice' auto-login script
* fix autologin script matching
* change wifi scanning to logical interface name,
  no longer use the radio device

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 59cca01a23e654a5002058a402f4e6966b129b41)

golang: Update to 1.13.10

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #11925 from stangri/19.07-simple-adblock

[19.07] simple-adblock: bugfix: start downloads on cold boot/fresh install

simple-adblock: bugfix: start downloads on cold boot

Signed-off-by: Stan Grishin <stangri@melmac.net>

php7: update to version 7.2.30

Fixes:
CVE-2020-7066
CVE-2020-7064

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #11882 from yousong/wget1907

[19.07] acme: depends on wget-ssl

acme: depends on wget-ssl

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit d917d662aedd9c133217b5c6d8c5a4f4a6bd3dea)

wget: make the ssl variant provides wget-ssl

This is to address the need for specifying dependency on a wget
implementation with ssl support.

Now we have a game of names for opkg

 1. uclient-fetch: minimal version by openwrt project
 2. wget-nossl: gnu wget w/o ssl support
 3. wget-ssl: for the moment since this commit, gnu wget w/ ssl support
 4. wget: uclient-fetch, wget-nossl, or wget-ssl
 5. gnu-wget: wget-nossl or wget-ssl

By the time we provide some dummy package like uclient-fetch-ssl and
make it also provide wget-ssl, I guess by then we will also need
gnu-wget-ssl...

Ref: https://github.com/openwrt/packages/issues/11534
Ref: https://github.com/openwrt/packages/pull/9941
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 585e4a38feca24c9650d4e762b44146ecd75d4d0)

wget: do not provide itself

The package wget should not say that it provides itself.

This also make gnu-wget provide general so it is not written in Makefile
twice.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 75f2be7d509e802f2d946d732e7a7539c2b27d2e)

adblock: filter spurious line endings in sources

* prevent processing of spurious line endings
  that confuses (g)awk

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e291d680558f40ae6d0d0a7006ac1991a6910d2f)

git: update to version 2.26.1

Fixes: CVE-2020-5260
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0551a5b030160054e755a750a62b2af84809dfb6)

git: update to version 2.25.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3e0e16ec752782b7c41da434fe98cb17917afc9e)

git: update to version 2.25.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 12bd25596c49261234cb4d7569fdceed8a14d9f9)

libupnp: remove patch that should not be there

Signed-off-by: Rosen Penev <rosenp@gmail.com>

minidlna: fix patches from last backport

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libxslt: update to 1.1.34

Fixes all known CVEs.

Various Makefile cleanups for consistency between packages.

Added PIC explicitly (was implicit). Removed two extra features.

Removed autoreconf and added PKG_BUILD_PARALLEL for faster compilation.

Roughly matched host configure args with target ones.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b28980973530d066acc916bb323f59939f1c4aa8)

libyaml-cpp: Update to 0.63

Several Makefile cleanups for consistency.

Added ABI_VERSION.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dc41b0a6dc4d722c9e700b8e85a383f47e8994ef)

wavemon: update to 0.9.1

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 34ec8facc5d68132a599122763e85ebca72a7a53)

miniupnpd: fix sh syntax error

Add "use_stun" default to prevent sh: out of range error introduced by
c61614a84

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 0f1e7d32afab254a867b8e398612d9522eea3389)

miniupnpd: convert to procd

Massive cleanup of the shell script. Many issues were fixed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c61614a849d1c7fc0cb6d0dafd79440a35bb5fc6)

miniupnpd: update to 2.1.20191006

Removed upstreamed patch:
100-build-on-OpenWrt.patch

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit fcf72ceec4502177cdb9e121a0df4657ebeb50ca)

minidlna: update to latest master

Fixes several issues relating to IPv6.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

liblz4: Update to 1.9.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a6c88c19d7ba2545279eb343dfbfa983508d47b4)

liblz4: Remove deprecated utime function

Optionally fixes compilation with uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4372ed15cca7ebaea483ccadcbff797f9bef3064)

measurement-kit: update to version 0.10.11

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 73a73dfa0947edf3468b3b1cea95e77a17c7d356)

websocketpp: Fix compile with Boost 1.70+

Fix compilation for newer Boost versions, same as in the websocketpp 'develop'
branch: https://github.com/zaphoyd/websocketpp/pull/814

Signed-off-by: Bruno Randolf <br1@einfach.org>
(cherry picked from commit e1bb99f83604a63c219a4a753fadbc19e11cc038)

faad2: update to 2.9.1

It seems upstream abandoned sourceforge.

Add license information.

Fix CVE tag. It seems the mass CVE patch placed many wrong CVEs.

Add PKG_BUILD_PARALLEL for faster compilation.

Do not build patented functionality when BUILD_PATENTED is missing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ff62511ab246f0232c90beb12a192a61f10450f8)

mpc: update to 0.33

Small Makefile cleanups.

Ran script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4fba03d6d16af923199ea876da4fe992f8cbdb91)

mpc: update to v0.32 and build with meson

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 0469c0715b10e8b32fe41e3b3b7248379ffe6046)

libupnpp: link against libm under glibc

Fixes compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4ba3e9cd8de234e3643a259575101738c926ee35)

libupnpp: update to 0.17.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit e76f23715e9b9ee4a07352b214cfcebe74eca1d1)

libupnpp: Update to 0.17.1

Fixed up license information.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f6033cf84137403cf0a246cdccc1d37f1ad0a570)

u2pnpd: update to 0.5

This update fixes #11452 since LFS detection support was added upstream.
While at, update SPDX license tag to latest standard.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2600255ecb960f5afc2b24e2fe21e52bbf23209a)

libupnp: update to 1.8.7

remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7ad02ef9e0cdbec8dece24d75e95f229bb4fae02)

adblock: fix gawk incompatibility

* fix gawk incompatibility in reporting

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c11aaead910d5351d0f3fd4e4460ad98336fa0d4)

Merge pull request #11843 from neheb/py3

[19.07]meson: use python3

ruby: update to 2.6.6

This release includes security fixes, specially:

* CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (Additional fix)
* CVE-2020-10933: Heap exposure vulnerability in the socket library

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

mac-telnet: fix mirror hash

Fixes: 8399121e6 ("mac-telnet: install uci as config file")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9de79455410dde258af28e262d9a22f7bf3526b7)

mac-telnet: install uci as config file

Also mark it as configuration file while being at it.

Fixes: #11846
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8399121e6035d7fccb7111e527d0b99dde29d098)

mac-telnet: mark uci as conffile

Fixes: 8399121e6 ("mac-telnet: install uci as config file")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9f231909ebf332c033788455cf837294b100fda8)

transmission: add init file STOP directive

Transmission should stop early on system shutdown to avoid
for example fstab unmount disks when transmission is writing.

Signed-off-by: Francesco G <gfrancesco@users.noreply.github.com>
(cherry picked from commit 4fcc44bc89559683daf56cb8342e8996a7147c98)

transmission: add syscalls to seccomp filter

Syscalls observered when running on arm32. Add them to seccomp rule.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3724ed3d6888705c64cb38f8f66aad5486d192ae)

transmission: add service triggers and bump PKG_RELEASE

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit c6c8ceb0b4dd107e9b411bc0289d2db2e6726be1)

transmission: update config options

add missing 'peer_id_ttl_hours' and remove 'scrape_paused_torrents'
which is not exist in transmission wiki.

Signed-off-by: Richard Yu <yurichard3839@gmail.com>
(cherry picked from commit 53fd02d62c22fe71442e938ce776f9f23d7beeac)

meson: use python3

meson supports python 3.5.3 and up only.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libid3tag: add pkg-config file

Required for meson to find this library in a sane way.

- In OpenWrt 19.07, there were recently updated mpd to its the latest
version available (current 0.21.22) with transition to meson.
Because of that mpd fails to build due to:

Run-time dependency id3tag found: NO (tried pkgconfig)

This commit fixes it

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 1b37a1d2a869f1d91fcf376ae407c540e3a6252b)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added commit message for OpenWrt 19.07]

adblock: fix another reporting bug

* add a final sort step, this fixes dns reporting with
  multiple pcap files as input

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1d8d456a55a3135de59731640c58d4c222738036)

meson: update to version 0.54.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5f19c2857851cde53e8deaff2605862c3166312e)

ninja: updated to 1.10.0

Removed upstreamed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1c4e99cc4e645d854d0f6e43b14938686837c8ae)

libmpdclient: update to 2.18

Fix URLs and other small cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a5a69057a1153530434a3153061e3baf9c695c02)

libmpdclient: build with meson

Signed-off-by: Andre Heider <a.heider@gmail.com>
(cherry picked from commit 8a7d276618ebd0d065dd6c0eca523d11d8a7a088)

mpd: update to 0.21.22

Removed upstreamed patches. Only the first was really needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5e0264be7dc784ca7c697ebb88c741ff1d810dba)

mpd: allow AAC decoding with mini variant

This is possible as libfaad no longer has patented functionality based on
BUILD_PATENTED.

AAC is a very popular format, so it makes sense to have some kind of
version included.

The ffmpeg package does not provide and cannot provide AAC decoding
without BUILD_PATENTED, therefore enabled FAAD for all variants.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c7d98c3626a4282e1b1c0f2b5daa79840613dccd)