Merge pull request #9751 from champtar/openwrt-19.07

[19.07] prometheus-node-exporter-lua: add target & system to OpenWrt collector

prometheus-node-exporter-lua: add target & system to OpenWrt collector

Before:
node_openwrt_info{revision="r10756+1-7546be6007",model="GL.iNet GL-AR150",id="OpenWrt",board_name="glinet,gl-ar150",release="SNAPSHOT"} 1

After:
node_openwrt_info{revision="r10756+1-7546be6007",target="ath79/generic",board_name="glinet,gl-ar150",id="OpenWrt",model="GL.iNet GL-AR150",release="SNAPSHOT",system="Atheros AR9330 rev 1"} 1

Fixes #9730, replace #9735

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit a14bed1bc959116617b0eb75d2d9a46551a480e6)

coova-chilli: disable parallel build

Parallel building is causing a failure because it executes some
commands, such as patch, more than once.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

travelmate: update 1.4.11

* fix logical glitch in last commit

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 751f312334b4d30f05059560f912c9b1bfdd1aca)

travelmate: update 1.4.10

* add missing dnsmasq dependency
* add a captive portal auto-login hook (configurable via uci/LuCI),
  you could reference an external auto-login script - see readme
* provide an auto-login script for german ICE hotspots
  (/etc/travelmate/wifionice.login), requires 'curl'
* small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 5a2a4fa20a29d39aae91448c632be447444aa11f)

Merge pull request #9731 from jefferyto/ci-improvements-openwrt-19.07

[openwrt-19.07] CI fixes and improvement

circleci: provide prereq output in the build log

Commit 200f2666fb1c ("sdk: fix GCC and Python dangling symlinks") in
master tree has forced prereq build step, which is now failing on the CI
as the Docker CI images are missing Python3 support, so now every build
fails with the following error:

 make: *** [staging_dir/host/.prereq-build] Error 1

which is not helpful due to the silenced output of `make defconfig >
/dev/null`, so let's add `make prereq` build step in order to get
something usable next time.

Reported-by: Karl Palsson <karlp@etactica.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>

circleci: use Docker image v1.0.4

This new image which is already available contains Python3 support.

Signed-off-by: Petr Štetiar <ynezz@true.cz>

circleci: make logs of build failures more readable

Due to concurrent build, it's currently not that easy to find the proper
reason for the package build failure, so let's just build the failing
package with -j1 in order to provide more human readable build log
failures.

Ref: https://github.com/openwrt/packages/pull/9584#issuecomment-518038631
Signed-off-by: Petr Štetiar <ynezz@true.cz>

circleci: add python3 package into Docker image

We've switched to Python3 some time ago so it would make sense to
provide Python3 in the CI image as well.

Ref: https://github.com/openwrt/packages/pull/9584#issuecomment-518038631
Reported-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz>

net/mosquitto: bump to 1.6.4

Full changelog here: https://mosquitto.org/blog/2019/08/version-1-6-4-released/

Fixes a regression in persistent session handling, and various other
regressions related to the mqtt5 support.

Signed-off-by: Karl Palsson <karlp@etactica.com>

zeromq: update to version 4.1.7 (security fix)

Fixes:
CVE-2019-13132
Added CPE ID

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry-picked from commit 92bf4b40126438c77f99a758ba7884436314ee12)

gddrescue: Add uClibc-ng support

It turns out, this breaks only when compiling with both uClibc-ng and
uClibc++. If the libc or libc++ gets swapped out, it compiles fine.

libstdcpp is fine because it already undefs these macros. The actual
bug is probably in uClibc-ng but this is a fine workaround.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d6af6a4d75bd520510aaf2ef97b89024b427cac3)

fossil: Remove

The maintainer is inactive, in addition to this package being woefully out
of date. It probably does not work properly.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 196976cdf0f7206caea7c680e08046b0028aaf01)

Merge pull request #9680 from mrstegeman/remove

node-mozilla-iot-gateway: Remove package

node-mozilla-iot-gateway: Remove package

As the WebThings Gateway moves into a full-fledged router
distribution, it no longer makes sense to have this as a
standalone package, as it now modifies system-wide settings.

References #9629
References mozilla-iot/gateway#2060
References https://gitlab.labs.nic.cz/turris/turris-os-packages/issues/452

Signed-off-by: Michael Stegeman <michael@stegeman.me>

Merge pull request #9656 from liudf0716/kcptun

[openwrt-19.07]kcptun: add new package

kcptun: add new package

kcptun is a stable & secure tunnel based on kcp with N:M multiplexing.
https://github.com/xtaci/kcptun

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>

ntpdate: use uci configured servers instead of static list

If we're going to have a list of ntp servers, we should at least respect
them.  Fallback to the original static list if no configured servers are
found.

Signed-off-by: Karl Palsson <karlp@etactica.com>

subversion: update to the latest release

Update to the latest maintenance release, fixing CVE-2018-11782 and
CVE-2019-0203 among other things.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
(cherry-picked from commit 53f33e5e74e648cd1b1435d354ccd214098d885b)

btrfs-progs: scan devices in preinit instead of init script

There is no gain to do device scan in init. Commonly we want to always
scan BTRFS devices to ensure that after boot raids are correctly linked.
It should be done before any init script tries to mount any raid FS.

Comparing init scripts and preinit scripts there are I think two primary
considerations. First is if user is expected to restart/reload/stop
given service on will. I think that there is no such reason for this as
user can easily enough just call btrfs utility it self. Second
consideration is if it makes sense to have it optional. This means if we
want to have ability to enable and disable given service. I think that
there is no such need in this case. It is pretty much doing nothing if
you don't have BTRFS FS connected and when you have you probably want to
scan it.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>

btrfs-progs: use box version of btrfs tool (busybox like)

This instead of building every tool separately builds one btrfs binary
and additional tools are links to this binary. This is same approach as
busybox is using.

This splits list of tools to two. boxprogs are tools that are boxed to
code btrfs binary and progs are tools that are not.
This also overload default all make target of Build/Compile and instead
builds (unified) btrfs.progs and separate progs.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>

btrfs-progs: Update to version 5.2.1

- Move Depends under URL
- Fix PKG_LICENSE to use correct SPDX License Identifier instead of
deprecated one

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

libsigar: Add missing header

The new version of musl does not include this header internally anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b97f32ec4401dba64ea80d0c066fcb79658a58b7)

libsigar: Remove deprecated rindex function

Optionally unavailable with uClibc-ng.

Switched to local tarballs. .xz is smaller.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b134eb3800f174376a90a382000a5a7af5bea619)

mt-st: Add missing header

New version of musl no longer includes this header internally.

Removed several unnecessary variables in Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 4cda68c72b54885e0465411ba8667e543771d2e2)

xz: Remove bash dependency

Bash is not needed here. These scripts are POSIX compliant.

This was originally added as the configure script looks for /bin/bash
locally. Passing gl_cv_posix_shell overrides this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d0e3aa7493edf6110ca80134bd04c839ecc09459)

Merge pull request #9661 from gladiac1337/haproxy-2.0.3-2

[openwrt-19.07] haproxy: Update all patches for HAProxy v2.0.3

Merge pull request #9649 from jefferyto/python-pyasn1-0.4.6-openwrt-19.07

[openwrt-19.07] python-pyasn1: Update to 0.4.6

Merge pull request #9651 from jefferyto/python-pyasn1-modules-0.2.6-openwrt-19.07

[openwrt-19.07] python-pyasn1-modules: Update to 0.2.6

haproxy: Update all patches for HAProxy v2.0.3

- Add new patches (see https://www.haproxy.org/bugs/bugs-2.0.3.html)
- Raise PKG_RELEASE to 2

Signed-off-by: Christian Lachner <gladiac@gmail.com>

haproxy: Get rid of bashisms from get-latest-patches.sh

Plus some other shellcheck cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

findutils: Add missing header

New version of musl no longer internally includes this header.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 8ca5cf042d6e08f1e7b9f86cb8338d2982a9d296)

findutils: Fixed up LICENSE information.

Also cleaned some whitespace.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fca20e2b2fdf4a83db8e2c7904225422b11f0d2e)

python-pyasn1-modules: Update to 0.2.6

Requires python-pyasn1 0.4.6 (#9649).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyasn1: Update to 0.4.6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #9642 from noblepepper/gcc-7.4.0

gcc: fix build on x86 targets

gcc: fix build on x86 targets

Signed-off-by: Noble Pepper <noblepepper@gmail.com>

Merge pull request #9627 from jefferyto/slide-switch-0.9.5-openwrt-19.07

[openwrt-19.07] slide-switch: Update to 0.9.5

php7: update to 7.2.21

This fixes CVE-2019-11042 and CVE-2019-11041.

Compile and run tested on mxs platform

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

gnutls: updated to 3.6.9

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

slide-switch: Update to 0.9.5

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #9624 from micmac1/19.07-maria10226

mariadb (19.07): security bump to 10.2.26

mariadb: security bump to 10.2.26

mariadb: security bump to 10.2.26

New upstream release. Addresses:

  CVE-2019-2805
  CVE-2019-2740
  CVE-2019-2739
  CVE-2019-2737
  CVE-2019-2758

Package updates:

  - includes "THIRDPARTY" in PKG_LICENSE_FILES
  - drops client_ed25519 as a dynamic plugin and install it with the lib
    as per upstream decision
  - refreshes patches

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

ulogd: Backport JSON network patch

It was requested in #9065 .

Cleaned up Makefile slightly.

Removed inactive maintainer.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 23a36b00e243137d50b8c6c0edd58f4446b6714e)

bcrypt: add python-cffi/host build dependency

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
(cherry-picked from 86fb008751718c4c28d4031006289850a0ca393d)

Merge pull request #9567 from blocktrron/openwrt-19.07

[19.07] fastd: fix segmentation fault with musl >1.1.20

fastd: fix segmentation fault with musl >1.1.20

When compiled with musl >1.1.20, fastd will crash in case it can't
resolve a peers hostname. This is due to a changed implementation of
freeaddrinfo in musl 1.1.21 onwards.

This segfault is fixed by not calling freeaddrinfo in case the supplied
pointer is null.

Signed-off-by: David Bauer <mail@david-bauer.net>

Merge pull request #9544 from jefferyto/prometheus-fix-mips64-build-openwrt-19.07

[openwrt-19.07] prometheus: Fix build for mips64/mips64el

netifyd: Don't build on uClibc-ng

This absolutely needs symbols from libresolv, which uClibc-ng does not
support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 0a3ebb32a134df9cfb4cd0d80e5ae5dc259f314b)

haproxy: Update HAProxy to v2.0.3

- Update haproxy download URL and hash
- Add new patches

Signed-off-by: Christian Lachner <gladiac@gmail.com>

opendkim: Fix compilation with uClibc-ng

res_nsend and res_send are both not available in uClibc-ng as configured
in OpenWrt. Having this function return an error is the only sensible way
to fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b5b776fc9ad807739977e82f809c3fe7b485d262)

python-cachelib: package added

Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

prometheus: Fix build for mips64/mips64el

Prometheus uses an older version of fsnotify, which uses a system call
(unix.InotifyInit) that is not implemented for mips64/mips64el.

This patches Prometheus to use a newer version of fsnotify that uses a
different system call (unix.InotifyInit1) that should be available on
all Linux systems.

Fixes #9494.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python: add patch for CVE-2018-20852

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #9533 from jefferyto/python-musl-find_library-openwrt-19.07

[openwrt-19.07] python,python3: Fix ctypes.util.find_library()

python,python3: Fix ctypes.util.find_library()

Python's ctypes.util.find_library() function currently doesn't work for
musl libraries/systems[1].

This adds a patch to fix this function, based on a patch from Alpine
Linux[2].

Fixes #9448.

[1]: https://bugs.python.org/issue21622
[2]: https://git.alpinelinux.org/aports/tree/main/python2/musl-find_library.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

tgt: update to 1.0.79

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
(cherry-picked from 9c5d11a9daac433d6691288a970388c374a7589d)

golang: Update to 1.12.7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

diffutils: provide diff, cmp as alternatives

Resolves openwrt/packages#6361

Resolves openwrt/packages#9524 by backporting from master b02e4eafd

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

ddns-scripts: various fixes

* use '$ddns_rundir' in 'get_service_data' for pipe creation, fix #8971
* add missing local variables in 'get_service_data'
* change DNS server verification with drill in 'verify_host_port',
fix/supersed #8935
* remove needless cat calls in 'verify_host_port'
* set cloudfare TTL to min. 120 seconds, fix #7745
* bump/align package version number

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2e06c4ec93acb0f941b4aabe79df4437b9520110)

ddns-scripts: modify deSEC update url

the latest update url format for deSEC is
http(s)://update.dedyn.io/update?username=[USERNAME]&password=[PWD]

Signed-off-by: James Qian <sotux82@gmail.com>
(cherry picked from commit e4951651e2c57c86e681d239dc98887f7970bc45)

softethervpn5: update to 5.01.9671

* update to 5.01.9671
* switch to release tar's
* add cmake iconv and musl patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry-pick from 46c320f18f8f6715d4e578ce8015de6a5a249843)

softethervpn: Really fix iconv support

softethervpn overrides nls.mk by defining its iconv functions. This only
works if the libc has iconv. In addition, it does not allow external
libiconv usage. TARGET_LDFLAGS is also the wrong place to add -liconv.

Removed SSL3 patch. It was needed for OpenSSL 1.0.2 but not anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fb480e297c04f6e428324cb787d276c9c3cfe0a6)

coova-chili: Fix compilation with newer GCC

Added -Wno-error to fix.

Also added patch to fix compilation without deprecated OpenSSL APIs.

Added PKG_BUILD_PARALLEL for faster compilation.

Switched libcyassl to libwolfssl.

Reorganized makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 266b0ba9d9c21e3a879aaa28f8ba93448d4ea0a4)

dosfsutils: Properly fix iconv linking

Necessary when using libiconv.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fbfe49d7ffeae87e3d6538ab49cd7dea3b887142)

linknx: Update iconv patch to work with libiconv-full

libiconv-full requires a const char for its second parameter. Otherwise
-fpermissive error is thrown.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from ee94a1e9120e369666909de97ddf68966d61f8e2)

linknx: Fix compilation with libiconv

This applies to uClibc-ng and libiconv-full

Switched to building with uClibc++.

Fixed license information.

Fixed BUILD_DEPENDS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from fec9257655803cdb704fa4fbb0b03b496c2290cc)

elektra: Fix compilation with uClibc-ng

Add patch that checks for libiconv instead of iconv. nls.mk handles this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 50719a639a89a3da57b2fbdf393cee03837dd640)

squid: Fix compilation with GCC9

by passing -Werror. Also added -latomic as some platforms need it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from c18cb9e7c57a1806017a473c2a076c2a5d9aabee)

gddrescue: Do not build with uClibc-ng

From the developer:

It seems that uClibc-ng is defining fgetc, fputc, feof, and ferror as
macros and not including them in std.

IMO this is a bug in uClibc-ng (maybe caused by lack of clarity in the
C++ standard), because even the C functions that are alowed to be
defined as macros (putc, getc) should be included in std for
consistency. Just imagine the chaos if std::getc were defined or
undefined depending on how it is implemented.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(9172e2828f29d1c6de3997ab7b0246bf351d33d7)

flashrom: Add ARC support

Mainly endian definitions are needed.

Removed sys/io.h patch. It's a GNU header unsupported by uClibc-ng.

Cleaned up Makefile slightly.

Added HTTPS everywhere.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 12378cd4d3d96975f1066e26089500cac73ac68e)

open2300: Switch to GitHub fork

It applies the single patch here as well as adding some fixes.

The upstream project is dead.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from d2af82a6f599f781b17e0c6c3967572242caed00)

apinger: Update to latest git revision

This project seems abandoned. Updated to latest version.

Also cleaned up the Makefile quite a bit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from dff6d2639eabb93e2d3782bfc1262bb6f7dccc33)

fbzmq: Fix compilation with newer GCC

Added -faligned-new to fix compilation.

As fbzmq is passing -Werror, fixed compilation with newer GCC versions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 50f865714127755dde89294a68215a6c73d200e8)

node-mozilla-iot-gateway: Remove unnecessary step

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry-picked from 1314b86231f34a25619523d1656e127bbb1262fe)

Merge pull request #9504 from jefferyto/circleci-usign-openwrt-19.07

[openwrt-19.07] CircleCI: Add support for usign signatures

oniguruma: fix CVE-2019-13224 & CVE-2019-13225

The patches were taken from upstream commits.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

CircleCI: Add support for usign signatures

It appears snapshot target builds have switched from GPG signatures
(sha256sums.asc) to usign signatures (sha256sums.sig).

This adds support for verifying these usign signatures. (GPG signatures
will also be verified if found.)

This also restores the alphabetical ordering of packages to be installed
by apt-get.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-pyrsistent: add a new package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

python-cachetools: add a new package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

adblock: update 3.6.5-2

* clean-up config
  - remove youtube source (not working, false positives)
  - remove urlhaus source (false positives)
  - remove zeus source (discontinued)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1d81adc003071d9ac3d6afcb99c6bef5fe407822)

coreutils: add alternatives support

Fixes openwrt/packages#9290

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry-picked from commit 92820448519d43101f646339cbcc557761188b0e)

python-oauthlib: update to 3.0.2 (bugfix release)

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 6c4ba3a58dee6a0aabceb248b765dfbbae3a4878)

wifidog: fix getting ip from interface, cleanup

Patch taken from upstream fixes an Invalid argument error while trying
to get the IP address of an interface.
Makefile was updated to current style.
(cherry-picked from 5ab9f3e3576d7fd28cf55ac604dbf485eb1b0de3)

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

python-sentry-sdk: Update to version 0.10.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 4a7b407d70de228dacc66dad8f866d5c05b6d581 )

python-sentry-sdk: Update to version 0.10.0

- Reorder alphabetically dependencies
- Add python3-logging as a dependency

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit cd13d5d4de6af33c71efb24497489c1a0389c49e)

python-curl: add ssl locking support to wolfssl

Patch was merged upstream.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from commit 8bdb697671dedc73651ffd17fa4c592b264e68b6 )

python-curl: fix compilation with libcurl-wolfssl

This allows compilation when libcurl is build with wolfssl as its SSL
backend.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 3e78945eaf243fe07bd513302972ae49006cfed1)

python-curl: update to version 7.43.0.3

Patch was accepted.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit 3856573)

python3-bottle: update to version 0.12.17

Shorter TITLE
- The longer one was not shown in make menuconfig.
Reodered stuff in Makefile
Removed PKG_UNPACK and change PKG_BUILD_DIR

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from 0a3e4d8)

irssi: update to version 1.2.1 (security fix)

Fixes CVE-2019-13045

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

python3: Update to version 3.7.4

- Update setuptools to 40.8.0
- Update pip to 19.0.3
- Refreshed patches
- Removed 4 patches (2 of them was included in 3.7.3 and other two are
included in this release)

Makefile python3:
- Move PKG_MAINTAINER above PKG_LICENSE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from ce769db0077f3ace8ef691cf33b827a10e0613a5)

python3: use _python_sysroot for cross-compilation

This patch, taken from buildroot, avoids the use of host paths when
compiling third-party extensions.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry-picked from 523c52f6f272810a6183f7e1302c09e9a7f16f46)

Merge pull request #9433 from TDT-AG/pr/mwan3-19.07-20190709

[19.07] mwan3: add migration script for flush_conntrack config

mwan3: add migration script for flush_conntrack config

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 8d3c8dadcfeb7ce8170c0ddec98a6d8fc6bc9756)

dnscrypt-proxy2: add init script using procd

Signed-off-by: Adam Mizerski <adam@mizerski.pl>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from commit cc4ed960634ce9859fd6659e07c5787ac0431185)

dnscrypt-proxy2: add a new package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from cff7ce4b24240ff92801b95eeef87ce901f01c23 )

bind: update to 9.14.3

Fixed CVE-2019-6471

ChangeLog: https://ftp.isc.org/isc/bind9/9.14.3/CHANGES

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry-picked from 868f29d4ee61205e65994f67f23a02198a9dea33)

python-sqlalchemy: add package with version 1.3.5

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry-picked from f5fae3d )