mpg123: Update to 1.25.13

Fixed license information.

Small Makefile rearrangements for consistency.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aaca589342d793b37afb922ae06b00316ad9c4c4)

screen: update to 4.8.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 318d2dd74bd231418efaa388f3f428cbedf1e32e)

screen: Update to 4.7.0

Remove all patches. They have all been merged upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 29b39264d618a6b9c90e6e72e69abf51bf21b4cf)

zstd: Fix compilation with uClibc-ng

Upstream backports.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54266c99b2a2e37a4c01b02ae74346874db7003c)

zstd: Update to 1.4.4

More speed improvements.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit aaccad695e51bc3b05699fc8f2db70bc7157dd9e)

nano: update to 4.9

Update nano editor to version 4.9

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 09fd4445b3f7c426212ed61b3989e1994255a8aa)

tor: update to version 0.4.2.7 (security fix)

Fixes:
CVE-2020-10592

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

collectd: disable onewire plugin, BROKEN since 2009

Mark the onewire plugin as disabled, as the plugin
has been marked BROKEN since it was introduced in 2009 by
https://git.openwrt.org/?p=openwrt/svn-archive/packages.git;a=commitdiff;h=0de38b88d6ba8c52b8386d3059baba7dca22961f

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 286557e906613757e4b903a8aa4b734682aec85d)

collectd: disable dpdk_telemetry module

Explicitly disable the new dpdk_telemetry module to fix
compilation in buildbot.
(other dpdk modules are aleady disabled)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b936fc4e0da71df1b8ea17ed6ed3f4eedb664106)

collectd: update to 5.11.0

* Update collectd to version 5.11.0
* Refresh patches

Release notes:
https://github.com/collectd/collectd/releases/tag/collectd-5.11.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 1d11a0c892d953d7053b4548d957e3ec6a153b99)

acme: Backport two bug fixes from master

This backports the following bug-fix commits from the master branch:

c6b4d7f367de ("acme: Include empty 'dns' config option by default")
983cc995a3b2 ("acme: Correctly handle domain state dir for ECC certificates")

Fixes #11675.

Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>

openvswitch: depend on IPV6 for intree kmods

Ref: https://github.com/openwrt/packages/issues/11665
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 88dcd094873dd9d28515cd3408077f4d5574eccb)

openvswitch: rework skipping intree kmod build for unsupported kernels

This is a workaround to prevent the whole build from failing because of
the intree kmods are not supported yet by upstream project.

Root cause is that kernel version should not play a part when making
DEPENDS as the generated kconfig was for all targets that may have
different kernel versions.

One less than ideal effect of this change is that for an unsupported
kernel version, people can still select the intree kmod but it won't be
built.  This may contradict expectation if the warning was not noticed
by them

Resolves openwrt/packages#9274

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a6ec885522ced8185cfe66c0ab467d902f043b65)

fish: update to 3.1.0

Remove upstreamed patches.

Added missing libatomic dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit bee0bfe8621516a776e3e3712348ea0b21cf3dd7)

fish: Fix compilation with libcxx

cxxabi.h is a useless header that libcxx does not include.

Remove indent on postint script. It should be on the same as the above
section.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit a135cbb9f1cf568d35e4eb62e154286ab05ccc19)

fish: Convert to CMake

CMake is faster and allows to simplify the Makefile slightly. It also
creates a slightly smaller package for some reason.

Fixed license information.

Ran postinst through shellcheck. It was using bashisms.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from faa89621783bda6bc1128822aac4995be487a39d)

syncthing: configuration cleanup & hardening

Run the service under an unprivileged
user account

The following parameters are now configurable
  niceness
  max concurrency (defaults to number of CPUs)
  user

Added flags "-no-browser"
Disabled in-place upgrades (disabled in the
build already)

Redirected stderr/stdout to syslog

Added support for "reload_config"

Increased "term_timeout" to 15s to give it
plenty of time to shut down gracefully

Properly handled non-existing directories

Removed a softlink that assumes a specific naming
convention in syncthing

Added a comment that using external storage is a
recommend configration

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
[increased package release]
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit a9443eb0eb9f5f8eacdb1daaa0f30f9deec1853d)
Tested-by: Marc Benoit <marcb62185@gmail.com>

syncthing: bump to 1.4.0

Release information:
https://github.com/syncthing/syncthing/releases/tag/v1.4.0

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 3a651638ce9c45b47e821aed5ea3086ce0290d6f)
Tested-by: Marc Benoit <marcb62185@gmail.com>

syncthing: fixup version detection

Since upstream commit dc92994 the LDFLAGS used for settings the version
(and build host and user) changed resulting in "unknown" versions in
syncthing.

Correct version detection is important for syncthing to assure
compatibility with other running instances. The "unknown" version fails
to communicate and sync with correctly compiled instances.

This patch updates the syncthing Makefile to inject the correct
variables and thereby fixes the version detection in syncthing.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b85e387cc2dec49ccaf0063f2b109e5c6151de39)
Tested-by: Marc Benoit <marcb62185@gmail.com>

strongswan: add conffiles for swanctl util

Add a conffiles-section for the /etc/swanctl folder, which is used by the  swanctl util. This will keep the configfiles during an sysupgrade.

Signed-off-by: Sven Roederer <S.Roederer@colvistec.de>
(cherry picked from commit 49f298eb745000c66169cee4791ca6e587a13ce7)

strongswan: quote 'comment' parameter in Config.in

Newer versions of the kconfig generator require quotes.  Prepare the
package for an eventual update.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 404c113bc25ac95bf08ba1b904dbbde8875c00eb)

net/pagekitec: support status reporting json file

Allows luci webapp to report health more dynamically.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

net/pagekitec: Update to newest version

Drops a patch, adds support for a status file for health tracking.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

Merge pull request #11647 from jefferyto/byobu-5.133-openwrt-19.07

[openwrt-19.07] byobu: Update to 5.133

Merge pull request #11646 from jefferyto/python-pyasn1-modules-0.2.8-openwrt-19.07

[openwrt-19.07] python-pyasn1-modules: Update to 0.2.8

Merge pull request #11645 from jefferyto/python-idna-2.9-openwrt-19.07

[openwrt-19.07] python-idna: Update to 2.9

Merge pull request #11644 from jefferyto/python-pycparser-2.20-openwrt-19.07

[openwrt-19.07] python-pycparser: Update to 2.20

Merge pull request #11643 from jefferyto/python-enum34-1.1.10-openwrt-19.07

[openwrt-19.07] python-enum34: Update to 1.1.10

Merge pull request #11641 from jefferyto/python-zope-interface-4.7.2-openwrt-19.07

[openwrt-19.07] python-zope-interface: Update to 4.7.2, refresh patch

Merge pull request #11639 from jefferyto/python-twisted-security-fix-openwrt-19.07

[openwrt-19.07] python-twisted: Fix several request smuggling attacks

Merge pull request #11636 from jefferyto/golang-1.13.9-openwrt-19.07

[openwrt-19.07] golang: Update to 1.13.9

byobu: Update to 5.133

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 847d9f18ccfcad3ae4911941488057142f91e852)

python-pyasn1-modules: Update to 0.2.8

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a6f1e7689b806e3a2baf1446cb8cb547cbc03797)

python-idna: Update to 2.9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 111d7ae088545615aeb453cee20cf5e9f91c82c9)

python-pycparser: Update to 2.20

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 931dcfe3aa992a9d23323d749a806d9627e88fa7)

python-enum34: Update to 1.1.10, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 48af5b2abb2bc3fff18aba9951d274252e7d5c19)

python-enum34: Update to 1.1.9, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 87150b43a8c5328edd7c84f2b51f16c18e0c8dde)

python-zope-interface: Update to 4.7.2, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit a178662fcef00a1cebbe78253ae28eb1edb418f4)

python-twisted: Fix several request smuggling attacks

This backports a patch[1] to fix several request smuggling attacks.

This includes fixes for:
* CVE-2020-10108
* CVE-2020-10109

[1]: https://github.com/twisted/twisted/commit/4a7d22e490bb8ff836892cc99a1f54b85ccb0281

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

golang: Update to 1.13.9

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

libredblack: pass CFLAGS properly

Fixes build with enabled ASLR PIE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a615a821d949f7e12874b1e0e4deb68ec08af104)

Merge pull request #11615 from stangri/19.07-https-dns-proxy

[19.07] https-dns-proxy: support for dnsmasq noresolv option

Merge pull request #11617 from nxhack/19_07_icu_66_1

[openwrt-19.07] icu: update to 66.1 & fix CVE-2020-10531

https-dns-proxy: support for dnsmasq noresolv option

Signed-off-by: Stan Grishin <stangri@melmac.net>

icu: update to 66.1

ICU 66 updates to Unicode 13, including new characters, scripts, emoji, and corresponding API constants. It also updates to CLDR 36.1 with Unicode 13 updates and bug fixes.

Create symbolic link to current version.

FIX CVE-2020-10531
 An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

youtube-dl: update to version 2020.3.8

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5d565db22234f72df7f10c874b033de4a9e6bd96)

haveged: move init script from 13 to 01

This is intended as a match with standard urngd. They serve same purpose
and urngd starts as first with 00. Starting haveged later can create
issues if you replace urngd with it. The example problem is if
uci-defaults script decides to generate certificate. Haveged can supply
entropy but it is started later and to mitigate this urngd would still
have to be installed. This means that haveget can't serve as replacement
without moving it to match start order of urngd.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 1ef38f45d982beb46b2df6d3582ad0bc2b0007ca)

libarchive: update to 3.4.2

Switch to normal tarballs. Remove autoreconf as a result.

Several Makefile cleanups for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c22dd1bf74fa5836a88fa417b467767bcfe8a4ff)

Merge pull request #11566 from BKPepe/python3-update-19.07

[19.07] python3: update to version 3.7.7

openvswitch: fix PIE build against 4.14 kernel

Reported-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/pull/11567
(cherry picked from commit e9d6414437d27803a16b5d96c48b45140e989e5e)

x264: add CONFIGURE_VARS and MAKE_FLAGS when NASM is not selected

- Remove dot in TITLE
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit faac2352e2d3f14de8dfd69f1801e6561ccb156c)

nfs-kernel-server: Fix compile with uClibc-ng

NS_MAXMSG is not defined.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 732b1c4c0e1203cf3f07459694680a6a830a6d71)

xtables-addons: disable ASLR PIE

This package uses ld for linking and therefor does not support the
-specs option.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
(cherry picked from commit 3804006e60579ed9f44c5b315d186ed364f04455)

python3: update to version 3.7.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

django: bump to version 1.11.29

Includes several CVE fixes.
- CVE-2020-7471 in 1.11.28
- CVE-2020-9402 in 1.11.29

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #11540 from neheb/softee

[19.07]softethervpn: Update to rtm version 4.29-9680

softethervpn: disable PIC

Compilation is broken on AArch64.

Reordered some things for consistency between packages.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b8b4e7e2694bb9b6e678f1b06bbe793c9bde0535)

softethervpn: Fix openssl header patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 41fe5a8335dee6e59e3053feb3667d718517fb88)

softethervpn: Add missing OpenSSL header

Fixes compilation without OpenSSL deprecated APIs as well as
-Werror=implicit-function-declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b80b614f8f659e352723a49cc4459521049198ab)

softethervpn: Update to rtm version 4.29-9680

Update SoftEther VPN to the latest rtm version 4.29-9680

Compile tested: Atheros AR7xxx/AR9xxx, TP-LINK Archer C7 v2, 18.06.4

Signed-off-by: Philipp Schuster <philippschuster@gmx.com>
(rebased and refreshed patches).
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 34db38520b879ba8dcf637d2f8bdb365e545b5bb)

stubby: fix init script

The configuration file was not being generated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b95699c6475795ae4d500a43a7cd382de655ec3f)

stubby: makefile and init script cleanup

Reordered Makefile according to
https://github.com/openwrt/packages/pull/9399#issuecomment-508727872 .

Added PKG_BUILD_PARALLEL for faster compilation.

Remove duplicated conffiles section.

Install /etc/config/stubby using INSTALL_CONF, as is done elsewhere

Run init script through shellcheck and clean it up.

Added chmod for the stubby config file, to fix a LuCI issue.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit eaf522532324f9155d2d038e27006e5caaf9874a)

btrfs-progs: fix check for btrfs in btrfs scan

The previous implementation always succeeded so no scan was performed.
This now fixes that and it correctly scans for BTRFS  devices if BTRFS
support is in kernel.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>

syslog-ng: update to version 3.26.1

- Bump version also in the config file
- Move logread to /sbin location instead of /usr/sbin
Because package logd in OpenWrt's ubox Makefile uses /sbin folder and LuCI has
the same path hardcoded in
modules/luci-base/root/usr/share/rpcd/acl.d/luci-base.json and using
different location results that LuCI is not able to load log data as it
is not found.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fe165eeb94d2e7fb35fee93e64336afa024a1283)

Merge pull request #11526 from wvdakker/openwrt-19.07

[Openwrt 19.07] Shorewall: Bump to 5.2.3.7

Merge pull request #11524 from micmac1/1907arc_aio2

[19.07] mariadb: add dependency on libaio for arc as well

Shorewall6: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall6-lite: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-lite: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-core: Bump to 5.2.3.7.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

mariadb: add dependency on libaio for arc as well

Now that libaio compiles on arc targets we need to add the dependency to
libaio on these targets as well.

resolves #9298

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

youtube-dl: update to version 2020.3.6

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

youtube-dl: update to version 2020.3.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #11501 from Bloup1net/phantap19.07

phantap: add to 19.07

libuv: update to 1.34.2

https://github.com/openwrt/packages/pull/11320#issuecomment-594032207

luv, libwebsockets, ttyd, netdata are build OK.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

cgi-io: fix compilation against uClibc

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit ed965cf16fd9ee6a798322b7b73f8c509295f19d)

cgi-io: use O_TMPFILE for uploads and attempt to directly link target file

Create an anonymous inode in /tmp using O_TMPFILE and attempt to link the
file in place using linkat(). Only fall back to the old file copy when
linking the tempfile fails.

Avoids double memory use if both the temporary upload file and the
destination file are located in /tmp.

Ref: https://github.com/openwrt/luci/issues/3654
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 4f4a7e9532e55a16336b79b74b5fb0236e365279)

cgi-io: use dynamic memory for post decoding, support proc files

Allocate dynamic buffer memory for decoding post data and allow post
requsts up to 128KB compared to the previos 1KB limit.

Also support downloading /proc and /sys files by falling back to
chunked transfer encoding when the file size cannot be determined.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 39087eba18011ca1e064c8e356ee33533be760db)

Merge pull request #11500 from fantom-x/irqbalance-backport

Irqbalance: backport to 19.07

irqbalance: support reload_config & start later

Added support for reload_config

This service does not need to start so early (even
before the netwrok is up). Start it after
the device is mostly up and operational.

Compile-tested on: ipq806x
Runtime-tested on: ipq806x

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit b6078559cdd47b4def5bb44dd46759a8591f3e4f)

irqbalance: add support of interval and banirq

Added the ability to change sampling interval
and provide a list of IRQ's to ignore
via /etc/config/irqbalance

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit b7a99b2334e6c69615dc34f93015b8c3ace382c2)

irqbalance: upgrade to 1.6.0

Upgraded from 1.2.0 to 1.6.0 to pick up
all the latest fixes and improvements

irqbalance made glib2 mandatory since 1.3.0, but is
using very little of it. glib2 linked statically
to minimize the impact.

1.2.0 size: 33,619
1.6.0 size: 99,539

~# irqbalance --version
irqbalance version 1.6.0

~# ldd /usr/sbin/irqbalance
/lib/ld-musl-armhf.so.1 (0xb6f5f000)
libgcc_s.so.1 => /lib/libgcc_s.so.1 (0xb6f43000)
libc.so => /lib/ld-musl-armhf.so.1 (0xb6f5f000)

~# opkg info irqbalance
Package: irqbalance
Version: 1.6.0-6
Depends: libc
Status: install user installed
Architecture: arm_cortex-a7_neon-vfpv4
Installed-Time: 1582839249

Compile-tested: ipq806x/R7800 & ipq40xx/GL-B1300
Run-tested:     ipq806x/R7800 & ipq40xx/GL-B1300

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit bdcb872a40e4567bc57c45299a0df5efad65207f)

phantap: add to 19.07

Signed-off-by: Diana Dragusin <diana.dragusin@nccgroup.com>

Merge pull request #11482 from BKPepe/libaio_update

[OpenWrt 19.07] libaio: Update to 0.3.112

libaio: Update to 0.3.112

Replace inactive maintainer with myself.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7cd204e99e564ea9c19e2e1b50e7088ffc5252a8)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[compile tested on powerpc_8540]

mosquitto: bump to 1.6.9

Full changelog: https://mosquitto.org/blog/2020/02/version-1-6-9-released/

Nothing of particular relevant to OpenWrt, just general fixes.

Signed-off-by: Karl Palsson <karlp@etactica.com>

syncthing: enable via config, lower priority, cleanup

Added the ability to enable/disable via a config file;
the default is enabled for backwards compatibility.

This is an additional service, so running it the
same priority as dnsmasq, etc does not make sense.

Added USE_PROCD=1

"done" starts at "START=95", so this should start earlier

Added STOP=10 to stop syncthing early

Compile-tested on: ipq806x, ipq40xx
Runtime-tested on: ipq806x, ipq40xx

Signed-off-by: Marc Benoit <marcb62185@gmail.com>
(cherry picked from commit 6f6877460a775a75f16154f2d75944bf91770f0d)

Merge pull request #11472 from fantom-x/syncthing-19.07

syncthing: backport to 19.07

syncthing: bump to 1.3.4

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 7c1d6571ca4a6ca8dd03fb9b3b212a2a78525543)
Tested-By: Marc Benoit <marcb62185@gmail.com> [19.07: R7800/GL-B1300]

syncthing: add package

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 373d3b2420beedb7bfaaaed5e6a3c7072532f278)
Tested-By: Marc Benoit <marcb62185@gmail.com> [19.07: R7800/GL-B1300]

pagekite: add simple websockets and update syntax

Syntax now matches preferred upstream style.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

pagekite: avoid redundant information in syslog

Patch from upstream: https://github.com/pagekite/libpagekite/commit/7b4587818564aa667f868249e9a8f1dc1d095fd3

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

pagekite: bump to v0.91.200218

pings the front ends less aggressively, reducing cpu usage on the host.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

ocserv: updated to 0.12.6

Fixes: #11174
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

gnutls: updated to 3.6.12

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

php7: update to 7.2.28

This fixes:
  - CVE-2020-7062
  - CVE-2020-7063

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

xl2tpd: fix building failure caused by pfc

Fixes openwrt/packages#10270

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit 0412c20f1b2d2e1f8b8c7e101aae6f66be50690a)

xl2tpd: bump to version 1.3.15

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Ref: https://github.com/openwrt/packages/issues/11418
(cherry picked from commit 620ba386b4ffd38911e7ddf0c864979c0f834a11)

zip: remove package

zip has 12 year old source code that would require work to make
the binary actually work.

> root@router1:/# zip
> zip error: Not supported (uzoff_t not same size as zoff_t)

As the binary does not work, lets remove the package to
avoid confusion for the end-users.

Reference to #10985 and #11089 as well as
https://github.com/openwrt/openwrt/commit/ad8c2d6099a7da5192ee6e2c52a8303642271

Adapted from: c1201a999b0

(note: The package was renamed in master from zip to infozip
a few weeks ago due to buildbot's relutance to compile zip in
master and 19.07 ever since host zip was added as a build tool.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>