samba4: revert to 4.9.11

* revert to 4.9.x series (4.10 needs too many unofficial patches and has weird waf bugs)
* cleanup patches
* enable AD_DC build option again

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-picked from 2f2a4bccd9fa1fdad7b001fad276ce485e76acbe)

logrotate: move config option to menu

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from f6c9e2bacd98741cdb0b231a40e8dc189084f2cb)

logrotate: Add ACL support

Various Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 788318625de9fecd924d4d413c9a9c8558ba3d66)

treewide: Change .*GPL.*+ licenses to SPDX compatible identifier

The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
(cherry-picked from bbb1ea7345f367ed675dcfe40e36ac32ddf8a2e1)

keepalived: update version to 2.0.18

Update version to 2.0.18

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from 333324f973cac180ac34fee6867928bc64fba18f)

keepalived: fix shellcheck warnings

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from 7a207f87afacb706021b8535b7cb85557bef8ed9)

ocserv: updated to 0.12.4

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
(cherry-picked from cefb2f03e256760087a9794f7a8d7ba129833891)

stunnel: fix some shellcheck warnings

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from 6713d1d771dbf29f640cc08271e01dfc97a6389f)

stunnel: update version to 5.55

Update version to 5.55

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry-picked from a17e90591ccafde29e13acf0b8b5fd2c200b6824)

ap51-flash: upgrade package to latest release 2019.0

* improved Zyxel firmware detection
* introduced optional MAC address filtering
* added support for:

  - Plasma Cloud PA300
  - Plasma Cloud PA1200
  - Plasma Cloud PA2200

Signed-off-by: Sven Eckelmann <sven@narfation.org>
(cherry-picked from 22062b10c66b287597df5507173743683a85f9db)

hplip: bump to 3.19.6

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry-picked from fdeb5f81718198c2602f59723ba3852c7176fa93)

geth: Update to 1.9.1

Remove Upstreamed patch.

Minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 03b1d7c4d46414345c7a7cc97a53966930046961)

jamvm: Add host build

Needed for classpath. GCJ is also needed but that can be dealt with
separately.

Fix compilation with musl by defining _GNU_SOURCE. What's funny here is
that if __USE_GNU gets replaced, the host build fails. The man page says
_GNU_SOURCE for pthread_getattr_np but glibc violates that statement.

Removed classpath dependency. classpaths must select jamvm, not the other
way around.

Removed target whitelist. Switched to blacklist.

Fixed License information.

Various other cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2972cc98ebfb512d394ffe406410961545821936)

classpath: Add jamvm/host build dependency

This is needed for compilation. A Java compiler is also needed but that
must be handled elsewhere.

Fixed up license information.

URLs to HTTPS.

Other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 1862f908ebdd68ce734f6ed29b83d5320cde06af)

libshout: Update to 2.4.3

Removed inactive maintainer.

Rearranged Makefile for consistency between packages.

Added --without-pic to avoid both -fPIC and -fpic.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 9bacdfa9a2680d1a0e4da241a4b4ce399db77099)

libtasn1: Update to 4.14

Fixes CVE-2018-1000654

Minor cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 8482407d7c946c385f1325ca4a71775cc66a5cec)

patch: rename CVE-2019-13638 patch to mollify uscan

Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from 604102a865d2f64de787f3b5967b4f38d15f76f1)

patch: apply upstream patch for CVE-2019-13638

GNU patch through 2.7.6 is vulnerable to OS shell command injection that
can be exploited by opening a crafted patch file that contains an ed style
diff payload with shell metacharacters. The ed editor does not need to be
present on the vulnerable system. This is different from CVE-2018-1000156.

https://nvd.nist.gov/vuln/detail/CVE-2019-13638

Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from b82198ff479c4f425da96534f5049bc7d3808065)

tools/patch: apply upstream patch for CVE-2019-13636

In GNU patch through 2.7.6, the following of symlinks is mishandled in
certain cases other than input files. This affects inp.c and util.c.

https://nvd.nist.gov/vuln/detail/CVE-2019-13636

Signed-off-by: Russell Senior <russell@personaltelco.net>
(cherry-picked from c8142f1ac11f0c529992ca8766d38e225ac14418)

Merge pull request #10086 from adde88/openwrt-19.07

Openwrt 19.07

hcxtools: Update to v5.2.2

Signed-off-by: Andreas Nilsen <adde88@gmail.com>

hcxdumptool: Update to v5.2.2

Signed-off-by: Andreas Nilsen <adde88@gmail.com>

net/mosquitto: bump to 1.6.7

Fixes compatibility with newer libwebsockets versions.
Fixes performance issues with websockets
Fixes potential crash on config reload
Fixes CVEs: CVE-2019-11778 and CVE-2019-11779
Various MQTTv5 fixes.
Skips releases with critical regressions

Changelog for 1.6.7:
https://mosquitto.org/blog/2019/09/version-1-6-7-released/

Changelog for 1.6.5:
https://mosquitto.org/blog/2019/09/version-1-6-5-released/

Changelog for 1.6.6:
https://mosquitto.org/blog/2019/09/version-1-6-6-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>

Merge pull request #10064 from stangri/19.07-simple-adblock

[19.07] simple-adblock: dnsmasq.ipset option support, better handling of IDNs, updated README

Merge pull request #10072 from gladiac1337/haproxy-2.0.6-openwrt-19.07

[openwrt-19.07] haproxy: Update HAProxy to v2.0.6

haproxy: Update HAProxy to v2.0.6

- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>

pigeonhole: update to 0.5.7.2

Fixes CVE-2019-11500.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry-picked from 707c683fbab21e609500b2f058f061e6c17887ff)

dovecot: Update to version 2.3.7.2

Fix CVE-2019-11500

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 5275c4156b34693c16748137d1601fcb243eca5f)

usbip: disable ASLR PIE

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit ff216608a0fca3abec2999ed9f5aea92df17ae6b)

simple-adblock: dnsmasq.ipset option support, better handling of IDNs, updated README

Signed-off-by: Stan Grishin <stangri@melmac.net>

libredblack: Pass CFLAGS

CFLAGS were not being passed. This was breaking builds with ASLR.

Pass proper PIC command to gcc with $(fPIC).

Don't install static libraries. Keep those for InstallDev only.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fbcf61d9d3716dc2e0c2f458e38405ee674afbab)

libredblack: Update to 1.3

Technically the same version, but this uses the normal tarball instead of
a random GitHub repository.

Cleaned up Makefile as a result.

Removed Python dependency. rbgen is not used for the package.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 6e8cb556e4640d1c3556cb204de3aa7ac57dc056)

keyutils: Pass OpenWrt CFLAGS directly.

Needed for compilation with PKG_ASLR_PIE.

Replaced Build/Compile with PKG_INSTALL.

Adjusted install paths for consistency.

Added license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ccc3b6d44a3e8c21dae3e011fa18195625ac27b3)

libpbc: Pass CFLAGS properly

This was breaking ASLR builds.

Fixed license tag.

Added PKG_BUILD_PARALLEL for faster compilation.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 43f811ad5b3869ec5fa50259e498feae8abfb9f0)

crconf: Pass CFLAGS properly

CFLAGS were not being passed, breaking ASLR builds.

Switched to using PKG_SOURCE_DATE for the version.

Added PKG_BUILD_PARALLEL for faster compilation.

Added license information.

Small Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 35a258a55cc51822d5db30e54619ee65242daf10)

madplay: Pass CFLAGS properly

CFLAGS were not being passed which was breaking ASLR builds.

Fixed license header.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_INSTALL for consistency.

Passed proper $(FPIC) value.

Several other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 76c0bea36be93e5d1a134dde0ec104c709114f0b)

atftp: Update to 0.7.2

Fixes issue where CFLAGS were not being passed. This was breaking ASLR
builds.

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_INSTALL. Changed install paths based on PKG_INSTALL paths.

Added --disable-debug to make sure debug code is disabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 946dfed856bb049e0ee229593830b355c75350b2)

v4l2rtspserver: Update to 0.1.8

Updated live555 to 2019.08.28

Add TARGET_CFLAGS to LIVE555 CFLAGS to fix compilation with ASLR.

Several other Makefile cleanups and optimizations.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 523eeaed54699420c00605d98dc2e4c70807925c)

Merge pull request #10019 from dibdot/adblock-19.07

[19.07] adblock: update 3.8.6

adblock: update 3.8.6

* refine stop logic to prevent needless dns backend restarts
  and other oddities
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

python-intelhex: add new package

This is Python library to parse, generate and in general handle files
in Intel HEX format.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry-picked from commit 306e276a3b829612786ce47625acdd12f4d59118)

bigclown-firmware-tool: update to version 1.4.1

This release updates: bcf create --from

There are no dependencies changes introduced by upstream and changes are
of limited character.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commit 7741e5db4b2666d6861796804fe19265c785012e)

bigclown-firmware-tool: add new package

This is tool to flash/manage firmware in Bigclown modules.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry-picked from commit 7950442dffe48139cf9f6e670fd71744004b063a)

bigclown-mqtt2influxdb: update to version 1.2.0

This version introduces new option -d that makes service not to exit on
error. This is brutal solution but is required to protect against
service failure when remote resource is down.

bigclown-mqtt2influxdb is service moving data from MQTT to InfluxDB and
both of those services can and potentially are remote. The original
implementation where it failed when service goes down is not ideal
because network outage or target server outage can later require this
service restart.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commti 508e2b865a71be46a6a59032d949c421aae9a8e3)

python-schema: update to version 0.7.1

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry-picked from commit 7bb6d72a47bd8df69c154e72d2f777da032fa6aa)

Merge pull request #9999 from flyn-org/openldap-19.07

openldap: update to 2.4.48

Merge pull request #9998 from flyn-org/libgcrypt-19.07

libgcrypt: Update to 1.8.5

Merge pull request #10000 from cshoredaniel/pr-19.07-p910nd-non-root-backport

[19.07] p910nd: Run as non-root by default

Merge pull request #10002 from cshoredaniel/pr-19.07-uwsgi-cgi-backport

[19.07] uwsgi-cgi: use python3 hostpkg not system python3

Merge pull request #10001 from cshoredaniel/pr-19.07-msmtp-scripts-backport

[19.07] msmtp-scripts: Backport fix for run-time failure

uwsgi-cgi: use python3 hostpkg not system python3

On a Debian system without python3-distutils install, uwsgi-cgi was
failing to build because it couldn't import sysconfig from distutils.
OpenWrt packages should be using the OpenWrt python not the system
python. In addition we need to use python3 not python2, even when
both are available.

(cherry-pick c387d0923c8ced06f685b487f84ae0836d7f3e9b from master)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>

p910nd: Run as non-root by default

We add the necessary Makefile, hotplug, config, and init bits
so that p910nd daemon runs as user:group p910nd:lp by default.
This eliminates an unnecessary root daemon.

The hotplug script sets the permissions of the USB lp
device(s) to read-write owner and group and no access to
anyone else, and sets owner root, group lp.

This is allows sufficient privileges to p910nd
to do it's job.

(cherry-pick 932c76fa740acb0d68a46b78e2bc0eafd5fe13d6)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>

msmtp-scripts: Backport to fix runtime failure

This commit syncs msmtp-scripts with master as current
openwrt-19.07 is broken.

Cherry-picks and squashes the following commits from
master.

6d8cff9a msmtp-scripts: Fix LICENSE information
d163eaea msmtp-scripts: Overhaul and update like upstream
3c15d410 msmtp-scripts: Make conn_test default nc
b9cc3cf2 msmtp-scripts: Fix spool/lock dir permissions
f76408af msmtp-scripts: Add msmtprc permission docs

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>

msmtp: msmtp-scripts: Backport "Enable PROVIDES and ALTERNATIVES"

Backports needed change from master for the next commit (a
combined cherry-pick and squash of required fixes to msmtp-scripts,
due to msmtp-scripts being broken on openwrt-19.07).

Use the PROVIDES mechanism so that msmtp and msmtp-nossl can be be
+depended-on and avoid generating a file level conflict.  Also use
alternatives for msmtp-mta and msmtpq-ng-mta with msmtp-mta since
we can only have one sendmail at a time.

(cherry-pick f76408af486fa7bdfd4cd8ddef2fcc76ab0fd9c4)

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>

openldap: update to 2.4.48

Fixes CVE-2019-13565.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgcrypt: Update to 1.8.5

Fixed up license information. Only the library is packaged.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #9966 from dibdot/openwrt-19.07

[19.07] banip: update 0.2.1

php7: update to 7.2.22

While at, update the SPDX license id to most recent format.

Compile and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 5805da860e0e9afbb0a8d71923dc1db296b07e5e)

btrfs-progs: Update to version 5.2.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit c42b279)

Merge pull request #9968 from BKPepe/1907-yt

[OpenWrt 19.07] youtube-dl: Update to version 2019.9.12.1

youtube-dl: Update to version 2019.9.12.1

- Move PKG_MAINTAINER above PKG_LICENSE
- PKG_HASH and PKG_BUILD_DIR should be together in one section

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

banip: update 0.2.1

* remove 'http-only' mode, all sources are now fetched from https sites
* the backup mode is now mandatory ('/tmp' is the default backup
  directory), always create and re-use backups if available.
  To force a re-download take the 'reload' action.
* support 'sshd' in addition to 'dropbear' for logfile parsing
  to detect break-in events
* always update the black-/whitelist with logfile parsing results
  in 'refresh' mode (no new downloads)
* rework the return code handling
* tweak procd trigger
* various small fixes
* (s)hellsheck cosmetics
* Change .*GPL.*+ licenses to SPDX compatible identifier

Signed-off-by: Dirk Brenken <dev@brenken.org>

adblock: update 3.8.5

* use raw procd interface trigger as last resort, if the
  adblock config is not available during startup
* fix selective subdomain whitelisting for dnsmasq
* fix a kresd restart issue with 'DNS File Reset'
* fix a suspend/resume cornercase
* disable the tld compression, if the number of blocked domains
  is greater than 'adb_maxtld' (default: 100000)
* made the fw portlist configurable (default '53 853 5353')
* preliminary support for inotify-like autoload features
  of dns backends like kresd in future Turris OS. If 'adb_dnsinotify'
  is set to 'true', all adblock related restarts and the
  'DNS File Reset' will be disabled

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 45cb0e1023a924ffbff73d8d6b256ec4f6a5929f)

glib2: don't use libelf during host build

Since commit 2e490e7e46a4f6fbf66fa930a25c2991e24c0f83 tools/libelf
installs a pkgconfig file, which in turn is picked up during the glib2
host build. On the build bots the same occurs, although it so happens
that (sometimes?) libelf.h is not found and the host build fails. This
may be a timing issue specific to the build bots, as the header is in
fact installed by tools/libelf and I can't reproduce this here on my own
computer.

In any case, libelf (if detected) is only used by gresource. gresource
can be used without it. gresource is not used by OpenWrt's build system
(also not in openwrt/packages). So adding "--disable-libelf" to the host
configure args is not detrimental in any way and works around the issue
described above.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

lighttpd: Makefile polishing

- Correct SPDX License Identifier
- Move MAINTAINER, SUBMENU to more appropriate place
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit e06086c4c)

lighttpd: Update to version 1.4.54

Fixes CVE-2019-11072

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 80c721c6a)

knot: update to 2.8.3

Added lmdb dependency

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from 0b19979301d207584da35600f3a5a917e0a4f4c4)

knot: upgrade to vetsion 2.8.2

Upgrade of Knot DNS package to version 2.8.2

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry-picked from 30627a9928eff09c90736055bcee29a9fbabfe9b)

measurement-kit: Fix compilation with uClibc-ng

nextafter is not included in std with uClibc-ng. Don't use the std version

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from e613acffad65b312a75216a47898b76c19e1fd3c)

libgpg-error: Fix compilation with GAWK 5.0

Patch from Upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

fastd: fix init script for multiple VPN instances

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit b7ff8b8087c6e948aba45b74c261cd7337433523)

pulseaudio: fix recursive dependencies

Since OpenWrt commit e82a4d9cfb ("config: regenerate *_shipped sources")
a few recursive dependencies have been discovered that were not visible
before.

$ make menuconfig
tmp/.config-package.in:103098:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:103098: symbol PACKAGE_baresip-mod-pulse depends on PACKAGE_baresip-mod-pulse
tmp/.config-package.in:121863:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
tmp/.config-package.in:121863: symbol PACKAGE_pulseaudio-profiles depends on PACKAGE_pulseaudio-profiles
tmp/.config-package.in:121878:error: recursive dependency detected!
For a resolution refer to Documentation/kbuild/kconfig-language.txt
subsection "Kconfig recursive dependency limitations"
qtmp/.config-package.in:121878: symbol PACKAGE_pulseaudio-tools depends on PACKAGE_pulseaudio-tools

This commit addresses the pulseaudio package's own recursive
dependencies and partially resolves #9300 (baresip will be handled in
telephony repository).

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
cherry picked from commit ec3d077287d9b9cf8560e42123972c0edad97c18
to correct the errors related to backported config parsing changes.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

boost: fix raw kconfig syntax

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
cherry picked from commit af4cacd10869b8e7996c540643bb6f2cd32a8a12
to correct the errors related to kernel config parsing.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

boost: Makefile polishing

Corrected License according to SPDX in PKG_LICENSE
Added PKG_LICENSE_FILES
HTTPS in their website
Reordered some stuff

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
cherry picked from commit 79831ee0abf663faefe179f9a2ae8d84049078bb
to correct the errors related to kernel config parsing.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

syslog-ng: Add GPL license for plugins

- Correct SPDX License Identifier
- Move DEPENDS under URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit d4eed8c4224e88dc15a9eec6d6d14e57553472e6)

syslog-ng: Update to version 3.23.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 298a91364ca8c3ecf0e452ad7d53575c4a921a38)

python-sqlalchemy: Update to version 1.3.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 2ee4b09760b0557121d4a366902b53deb163cffd)

python-slugify: Update to version 3.0.3

Change indentation in dependencies and as well in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit d3c2ff35b573a3a86ad6cf4b8ac71d91243bb90e)

python-yaml: Update to version 5.1.2

PKG_NAME should match the name of the folder

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 3cfbdbf25bab534dc17bc22c375e5c992ef08445)

python-voluptuous-serialize: Update to version 2.2.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit af213059f5aa6982f16aad718f56d32b09727f09)

python-voluptuous: Update to version 0.11.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 0835e5e6dcd0b86f13d29044c7c7e4c54dc03986)

Merge pull request #9911 from jefferyto/python-pyasn1-0.4.7-openwrt-19.07

[openwrt-19.07] python-pyasn1: Update to 0.4.7

python-pyasn1: Update to 0.4.7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

haveged: update to 1.9.6

Update haveged to 1.9.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit c933ac5dcb85361baeb9ff9ec424533b67bb2578)

exfat-nofuse: drop BUILD_PATENTED

Microsoft has published technical specification for exFAT [1]
and the driver has been added to Linux staging tree [2].

It's now safe to drop BUILD_PATENTED label.

[1] https://docs.microsoft.com/windows/win32/fileio/exfat-specification
[2] http://lkml.iu.edu/hypermail/linux/kernel/1908.3/04254.html

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry-picked from commit 4c9d0c7b56365761fd1986ff954edf963feb2931)

unbound: update to 1.9.3

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry-picked from commit c36d8a49fdbc53bf9aac81bf9011f6be0bf15fc7)

bind: update to 9.14.4

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry-picked from commit e7d35f6deb1dfba708044b58e2b4db2ddb5159cf)

python-dateutil: bump to version 2.8.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 0699a69ba1b89290895c3bff5cf1d007ef3d7343)

python-lxml: bump to version 4.4.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 621f5777d3416b1913249a7859a87e68a5f0e7e5)

python-pytz: bump to version 2019.2

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry-picked from commit 16c9fcdda8ba7534a2b3e3fb64fe55f0d37830dd)

Merge pull request #9869 from gladiac1337/haproxy-2.0.5-openwrt-19.07

[openwrt-19.07] haproxy: Update HAProxy to v2.0.5

Merge pull request #9872 from wvdakker/openwrt-19.07

[Openwrt 19.07] Shorewall: Bump to 5.2.3.4

Shorewall6: Bump to version 5.2.3.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: Bump to version 5.2.3.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall6-lite: Bump to version 5.2.3.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-lite: Bump to version 5.2.3.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-core: Bump to version 5.2.3.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

haproxy: Update HAProxy to v2.0.5

- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>

travelmate: update 1.4.12

* automatically add open uplinks to your wireless config,
  e.g. hotel captive portals (disabled by default)
* shift net status check in a separate function
* (s)hellcheck cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1d90509b0351458f66c68d8106f7a8e9bfdd904d)

adblock: update 3.8.4

* fix the 'adb_sysver' output
* pass the adblock version information to the helper scripts correctly

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 161597f2fa219099ce3e350736f3c1a2f52a4fd6)