less: update ALTERNATIVES

Avoid conflict with busybox

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit d866393)

Merge pull request #12454 from stangri/19.07-simple-adblock

[19.07] simple-adblock: remove obsolete dshield.org links from config

simple-adblock: remove obsolete dshield.org links from config

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #12449 from jefferyto/golang-1.13.12-openwrt-19.07

[openwrt-19.07] golang: Update to 1.13.12

golang: Update to 1.13.12

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

collectd: sqm_collect: tidy interval string handling

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit c2c91ea99e5fb7d4798116888b31f8fd9117d8ee)

collectd: sqm_collectd: improve error handling

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 947c85bff0176c0bb7b6dce796ee32bd9fa868da)

collectd: Improve sqm_collectd error reporting

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit a809dc6f3b4d42e185d84f527cb5e800325ae1d7)

collectd: sqm_collectd improve interface name filter

Increase the range of characters that get substituted by '_' so the
shell doesn't complain about illegal variable names.

Primarily done to catch '.' and '-' but who knows what funnies will
appear in i/f names.

It's a shame that busybox ash doesn't understand :alnum:

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit c8640d1f68321c092542f91adc33f3d21fcecd18)

collectd: bump PKG_RELEASE

Bump PKG_RELEASE on behalf of 38235de9c

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 03162ee920f67551e1a1dd2e7da9a71b64560ab4)

collectd: SQM collect data from some qdiscs

Add a script that can collect data from mq (multi queue) and cake
qdiscs.

Script is reliant on collectd's 'exec' module.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit 38235de9c3a6d0574f3293178617549822fbc738)

collectd: add syslog json plugin

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit bb666cc9ff78b02c93e642f2ac78df30f34d3cd2)

rrdtool1: modify logarithmic scale labelling

The y-axis graph labels in logarithmic mode display in 'scientific'
notation eg: '1e+00' for 0, '1e+01' for 10, '1e+02' for 100 and so on.
This IMO is a pain in the backside for non scientific humans to read.

Modified output to display numbers up to 99,999 in conventional decimal
format and to revert to scientific notation for larger, thus the same
display space is taken.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
(cherry picked from commit edc41b26ab1e78d55e87c79562d8430b87d314a7)

knot: update to version 2.9.5

Removed patch
`03-configure-allow-to-manually-disable-POSIX-capabiliti.patch` that has been backported into release.

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 9d81b6e4cac85a387a629fbb0a278b1ca320ea1c)

knot: disable libcap-ng

Recently, there was added libcap-ng to OpenWrt packages feed,
which is optional for Knot DNS. It enables POSIX 1003.1e capabilities.
This can restrict root (by default it runs as root) permissions and
might harm and as there isn't systemd on OpenWrt it can interfere.

There is an added patch, which introduced an option to disable libcap-ng.
This will be part of the next release.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 41957d6967046277036eb0ec2914f0aed3ea9f14)

knot: update to version 2.9.3

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit 87d6c26c737501544e2aa14758c7fdf68e568764)

linuxptp: fix build failure

Build is failing because HWTSTAMP_TX_ONESTEP_P2P is defined anymore on
linux net_tstamp.h.

Moreover, the usual way of linuxptp build is looking for system includes
unless user defines differently. That also was tried to fix.

PKG_RELEASE bumped to 3.

Signed-off-by: Paulo Machado <pffmachado@yahoo.com>
(cherry picked from commit 5f64b2d1e451e55babe3e6e9dcb7debaedb2b7db)

sslh: use tls option instead of deprecated ssl

Upstream will drop support for the ssl option in the next future version.

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>
(cherry picked from commit 46c253dfcaba4ee9cb8299d3c895e399bf282bb8)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[package bump]

Merge pull request #12361 from rs/nextdns-1.6.4-openwrt-19.07

[19.07] nextdns: Update to version 1.6.4

gnutls: updated to 3.6.14

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

mpd: enable id3tag for all builds

2cedae0aa9befe1135c83f007942d89ec906658e enabled mp3 support for mini,
while keeping id3tag for full. This makes no sense as id3tag is used
specifically for mp3 files.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4ed61c1f68a68c37be37698f7d89d84732bac318)

Merge pull request #12334 from stangri/19.07-simple-adblock

[19.07] simple-adblock: bugfix: proper error reporting on failed downloads; lists update script

unbound: expose interface-auto to UCI

This exposes the interface-auto option to UCI.

By default, interface-auto is disabled.
This leads to the DNS reply possibly originating from
a different address then the request was sent to.

Devices with a packet filter might not receive the reply in this case.

Enabling interface-auto ensures the reply is sent with the
source-address the request was sent to.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit da76aeb24c1bf757415ccebb93a62002b245f4d2)

Merge pull request #12382 from neheb/gst-p

[19.07] gstreamer update

gst1-plugins-bad: don't add webp support

Not present in 19.07.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #12383 from neheb/pige

[19.07] update pigeonhole

gst1-libav: update to 1.16.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0133aebed4a26d6fe11d4989232bcfa1464ac4ea)

gst1-plugins-ugly: update to 1.16.2

Switched to meson.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 714a18e1bb814cee8ca9f92dfb99ffb3201bacb0)

gst1-plugins-bad: update to 1.16.2

Switched to meson.

Fixed license information.

Several Makefile cleanups for consistency between packages.

Enabled and added packages for a bunch of plugins.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ae5ef832d12554f2f5cd7b7985e5688016674e0f)

gst1-plugins-good: update to 1.16.2

Switch to meson.

No more static libraries as meson makes you choose.

Enabled speex and shout2 as the libraries are available.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 077536f00fdc0e70ddcfb8caad83bdd03a672174)

gst1-plugins-base: update to 1.16.2

Switched to meson.

Fixed license information.

No more static libraries as meson makes you choose.

Added several CONFIG_DEPENDS entries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 9cbde8ad8b12a2b4adcb9399b7c5832729a4c806)

gstreamer1: update to 1.16.2

Switched to meson.

Fixed license information.

Rearranged some stuff for consistency between packages.

Removed static libraries. It seems meson only supports either one or the
other.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit cb058bf961e783608954b3244dbc17ea4e46b16b)

pigeonhole: Update to 0.5.9

Dovecot was updated but not pigeonhole. This is important as the API broke

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de66ac26f6fb602992b670071187a96d1f1c5644)

pigeonhole: reflect license of LGPL-2.1-or-later

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit cfcdade87d41a6433ae8ec4eed572fa529895bbd)

pigeonhole: update to 0.5.8

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 10a1877e574e9f263eb1439e249c03c0e84f34d3)

gst1-libav: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 39e223f01999138901aa134222e23031edba1c01)

gst1-plugins-ugly: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 6dc84b2082f072f088c265e86d9af7526d550646)

gst1-plugins-bad: Make HLS crypto explicit

It's normally set to auto. When nettle is missing, it tries to use the
other libraries.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 49b5de830e004a4573619cc98fd58e30676fd070)

gst1-plugins-bad: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ac93280d53ccb0dcb2716e8b5f37bf663260c48f)

gst1-plugins-good: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 158f2e6252c00ab4e3dda203d3c2ce7161b8eaaf)

gst1-plugins-base: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit e4f3f8b02741223c869381b6e11d0a66a1a4a593)

gstreamer1: update to 1.16.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 0934faf567598aed280f8a993683ce5d45b6d88e)

net/mosquitto: bump to 1.6.10

Full changelog at: https://mosquitto.org/blog/2020/05/version-1-6-10-released/

Fixes openssl 3.0 support,
Minor fixes, nothing standout as applicable specifically to OpenWrt.

Signed-off-by: Karl Palsson <karlp@etactica.com>

ola: fix compilation with GCC4

The configure script confusingly sets CXXFLAGS to gnu++11 but does
not use that to check the important stuff. Fix that.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8f7687833ec138af0283d542279b6a287e32e0ba)

dovecot: update to version 2.3.10.1 (security fix)

Fixes:
CVE-2020-10957
CVE-2020-10958
CVE-2020-10967

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d863e2681736b5790eee46ac2b81c6458ce10ab5)

adblock: update 4.0.5-4

* remove dumb list cache
* start adblock processing after adding/removing
  list sources via CLI
* add regional list source for france

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit ab44d8146af2abcfd96f08aba99358e960049bd3)

nextdns: Update to version 1.6.4

Refactor the package so init script is installed from the binary instead
of an init script embedded in the package.

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

adblock: update 4.0.5-3

* fix oisd_nl source parser (format has been changed)
* enable safesearch support for kresd (ip based)

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7f6763359c688ed34891caf83d4080348f0572df)

Merge pull request #12348 from adrianschmutzler/fixmake

[19.07] treewide: use relative include paths for python Makefiles

Merge pull request #12294 from neheb/keab

[19.07] backport kea changes

treewide: use relative include paths for python Makefiles

This updates the include paths for python(3)-package.mk to be relative
to the package Makefile. If not, in certain cases this will print errors
like the following one:

ERROR: please fix feeds/openwrt/net/freeradius3/Makefile
   - see logs/feeds/openwrt/net/freeradius3/dump.txt for details

In the dump.txt there is the following:

Makefile:42: /mylocalpath/feeds/packages/lang/python/python3-package.mk: No such file or directory
make[1]: *** No rule to make target '/mylocalpath/feeds/packages/lang/python/python3-package.mk'.  Stop.

The relative path is used already in 19.07 for most of the packages, and
has been updated for the packages at hand in master as well:

302f4d17e336 ("libmraa,libupm: Disable default Python package build recipe")
1bc2f4f3c621 ("treewide: Remove Python variants for non-Python packages")

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>

Merge pull request #12339 from ja-pa/transmission-fix-19.07

[openwrt-19.07] transmission: init script check syscall list for seccomp

transmission: init script check syscall list for seccomp

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

simple-adblock: bugfix: proper error reporting on failed downloads; lists update script

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #12292 from neheb/spoof

[19.07] spoofer backports

Merge pull request #12269 from neheb/gerb56

[19.07] gerbera: add taglib support

Merge pull request #12330 from rs/nextdns-1.6.3-openwrt-19.07

[19.07] nextdns: Update to version 1.6.3

nextdns: Update to version 1.6.3

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Merge pull request #12326 from rs/nextdns-1.6.0-openwrt-19.07

[19.07] nextdns: Update to version 1.6.0

nextdns: Update to version 1.6.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Merge pull request #12313 from aleksander0m/aleksander/mm-mtu-19.07

modemmanager: set interface MTU based on bearer settings

modemmanager: set interface MTU based on bearer settings

Using the same method used by other protocol handlers like uqmi.

Fixes https://github.com/openwrt/packages/issues/11383

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
(cherry picked from commit 41552c1cc225066bd1f35685ccd5dcf83a21b7e5)

giflib: remove host build

It's completely unused and breaks under CentOS7.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 23be4f9d7c16c6c0e1a1e2672d73c5fa839a4525)

libtasn1: fix host build under old GCC

prereq-build.mk says that GCC 4.8 and above is supported. GCC 4.8
defaults to std=gnu89, breaking the build. GCC5 defaults to gnu99.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6d100823e975da012210213c6c29f7f4b3e1123c)

kea: do not build static host binaries

Errors on some systems. No real change.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1950340c697c537ab9d8d117f1b3ea08fe4bf1c1)

kea: Update kea to the latest stable verion (1.6.2).

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 0f4cc2e339f4633b0e8c0b922d8f38c2fdba14b4)

kea: Remove openssl host dependency

OpenSSL is already built as part of tools (LibreSSL actually) and can be
used instead for the host build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c037c8d988027453214849a098232f86dd4ca4d4)

kea: update package to 1.6.0
Update kea to the latest stable verion (1.6.0).

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 03cf09333254fa9f58de1d35556a3286849137ff)

kea: remove dependency and reduce file size
Remove boost-python3 dependency and reduce file size of the compiled
kea-libs

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 74603fe5ea607ad4afb326a68817ded8ac242166)

kea: fix kea-admin dependency
Fix kea-admin dependency where if procps-ng-ps wasn't available busybox
would output an error casuse it does't support showing a processe's PID

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 9314a96765832683326038e4d7c1c162c4ab1677)

kea: fix and improve makefile
Fix an issue where the Makefile wouldn't allow kea to show up in the
menuconfig Also added some description to the packages

Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
(cherry picked from commit 95307f2a4b3b64db9244f670f3ea2c7cf3cc2492)

kea: remove python3 dependency of kea-admin

fix #9495

Signed-off-by: Rosy Song <rosysong@rosinson.com>
(cherry picked from commit 444420423fbbd707c41343e043d00fa2e843e483)

kea: Fix compilation without deprecated OpenSSL APIs

Forgot to add this one to the last pull request.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 54d7bc119d971d80d700406cab56c58e922a65ab)

kea: Don't install to STAGING_DIR_HOST

STAGING_DIR_HOST is for packages under tools/ , not host packages.

Reorganized Makefile for consistency between packages.

Added PKG/HOST_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d93fd61d6274aecd98ff9b1b89461f569c345cd1)

spoofer: remove host build + cleanups

The host build is not used by anything.

Added PKG_INSTALL for consistency between packages.

Added PKG_BUILD_PARALLEL for faster compilation.

Added missing protobuf/host build dependency. This was previously
specified as a host dependency, which is wrong.

Removed pointless std parameter.  It's only useful for old G++ versions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 63107fa8c00762cee0c5739397cb36f8c32e8e2d)

spoofer: Update to 1.4.5

Needed for the new protobuf update.

Cleaned up Makefile.

Got rid of HOST_BUILD_DEPENDS. This package does not have a host build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4c42eb0b450ad2f58d63efbd60d7b900b3712e4e)

adblock: limit domain name length

* limit domain name length to max. 63 chars
  to fix issues with energized sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0b6ea1256058dc28ae35bdd4ff78c4cb528b2c9e)

nano: update to 4.9.3

Update nano version to 4.9.3
Minor bugfix release.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 38be46a7ae496cf9f01dd2fd6fee74bc9f1b2673)

Merge pull request #12275 from micmac1/mar19run

[19.07] mariadb: use default umask for rundir

mariadb: use default umask for rundir

rundir needs to be accessible for clients, hence o= is not the proper
permission for rundir. This commit breaks out rundir from the awk script
and sets it up with default umask.

This also removes chmod call and instead tells mkdir to create the
directories with the proper permissions directly.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

gerbera: backport init and config changes from master

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gerbera: add taglib support

Gives audio metadata support to gerbera.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libupnp: enable reuseaddr

Helps applications restart safely.

Disabled optssdp. Not used by anything.

Disabled scriptsupport. Not used by anything.

Made all configure options explicit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 8e065c147f7822ca32e053a1da7cc500d0dae2fb)
Added some extra stuff from master.

taglib: update to 1.12-beta-1

It seems 1.11.1 is old and has CVEs.

Removed boost hack since upstream removed boost support.

Removed outdated InstallDev hacks.

Added PKG_CPE_ID.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from b0dc454c0ec20d3e2a4994d30657de2f4e21fe55)

taglib: fix taglib-config paths

It seems gerbera uses this instead of pkgconfig.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 2016b7b79985aed0323e31656af72e0fef28c7c2)

taglib: add

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry-picked from 350317d6732a6acb332d07585322e7ac87e26c02)

adblock: release 4.0.5

* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c9f91ecc472596630fa6be265f90899adf2b935e)

sslh: update to 1.20

Fixed maintainer entry.

Added patch fixing compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ded3ad41b8e6a7ce90f76623f494124a9bbb2d6c)

Merge pull request #12247 from jefferyto/python-setuptools-site-patch-openwrt-19.07

[openwrt-19.07] python-setuptools,python3-setuptools: Fix error when installing from source

python-setuptools: Fix error when installing from source

When a Python package is installed from source (i.e. using setup.py)
into a custom location (with --home), setuptools may want to create a
site.py file in the custom location. This file is created based on the
source code of site-patch.py, a file bundled with setuptools.

Because the normal OpenWrt setuptools package does not contain Python
source code, this file is missing and the installation will end with an
error.

This copies site-patch.py to site-patch.py.txt so that it will be
included in python3-setuptools, and patches setuptools to look for this
file.

See https://github.com/openwrt/packages/issues/12223

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python3-setuptools: Fix error when installing from source

When a Python package is installed from source (i.e. using setup.py)
into a custom location (with --home), setuptools may want to create a
site.py file in the custom location. This file is created based on the
source code of site-patch.py, a file bundled with setuptools.

Because the normal OpenWrt setuptools package does not contain Python
source code, this file is missing and the installation will end with an
error.

This copies site-patch.py to site-patch.py.txt so that it will be
included in python3-setuptools, and patches setuptools to look for this
file.

See https://github.com/openwrt/packages/issues/12223

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 70a7f736c5d6fb9ebec1acc8b3e8ca77704361bf)

bind: update to version 9.14.12

Fixes:
CVE-2020-8616
CVE-2020-8617

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

syslog-ng: update to version 3.27.1

snmp-dest was moved to afsnmp

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d4db36ea093b76b77262ba13505b178422680523)

syslog-ng: restore service "reload" to actually working

Commit 44a16ca broke syslog-ng such that it no longer works with
logrotate, for example.  Yes, you can manually stop and start the
service, but (1) you shouldn't have to and (2) it creates a window
where you potentially lose messages if the syslog UDP socket
overruns.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit c27f4ca53b231823d4298ab976d0a64ed61dfa99)

syslog-ng: including user settings after system settings

Initially we included user-specific settings last, so that they
could turn off or replace system settings... otherwise we only get
to change what's NOT explicitly set by the system.  This is overly
constraining.

Restore the original functionality of allowing the user to
override settings defined by the distribution's configuration.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit f8443ae8295fd391f4927e4bb921b5fe9154d224)

qemu: ignore configure option --disable-ipv6

Fixes: https://github.com/openwrt/packages/issues/12194
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
(cherry picked from commit a3033406eae94105b50ea9d57ea4a032b34a87a1)

openvswitch: fix file generation in /etc/modules.d

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Reported-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 1091badd8399b51abbb2ddd84dd1ff0796947d06)

Merge pull request #12216 from BKPepe/19.07-unbound

[19.07] unbound: update to version 1.10.1 (security fix)

Merge pull request #12231 from jefferyto/python-openssl-ca-certs-openwrt-19.07

[openwrt-19.07] python-openssl,python3-openssl: Add dependency on ca-certs

python-openssl: Add dependency on ca-certs

The ssl module assumes OpenSSL can load the default trust anchors (root
CA certificates).

From https://github.com/openwrt/packages/issues/12209

Signed-off-by: Jeffery To <jeffery.to@gmail.com>