nextdns: Update to version 1.9.4

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Merge pull request #13981 from rs/nextdns-1.9.3-openwrt-19.07

[19.07] nextdns: Update to version 1.9.3

nextdns: Update to version 1.9.3

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Merge pull request #13937 from jjm2473/openwrt-19.07-fix-vim-clang

vim: fix host compile with clang 12.0.0

travelmate: refine scan interface determination

* preferably use the logical wlan interface for scanning
  (as already done in travelmate 2.0)

Signed-off-by: Dirk Brenken <dev@brenken.org>

vim: fix host compile with clang 12.0.0

fix autoconf script using 'exit' without including 'stdlib.h'

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>

Merge pull request #13911 from ja-pa/libexif-sec-19.07

[OpenWrt 19.07] libexif: update to 0.6.22

libexif: update to 0.6.22

Aside from updating the package, this modifies the Makefile to pull the
sources from GitHub rather than SourceForge. The exif project recently
moved to GitHub.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 818f2d9dffd1c4e0c04dffe6dc80bf2f3cd4a0cb)

Fixes:
CVE-2018-20030, CVE-2020-13114, CVE-2020-13113, CVE-2020-13112, CVE-2020-0093, CVE-2019-9278, CVE-2020-12767, CVE-2016-6328, CVE-2017-7544

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

mwan3: add missing dependency

Add missing rpcd dependency.

Fixes #13896

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

mwan3: Remove fork/exec for head

Instead, let sed do the work since it's already being used.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[ update PKG_VERSION ]

haproxy: Update HAProxy to v2.0.19

- Update haproxy download URL and hash
- Fix uclibc patch offset

Signed-off-by: Christian Lachner <gladiac@gmail.com>

php7: update to 7.2.34

This fixes:
  - CVE-2020-7069
  - CVE-2020-7070

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #13828 from jgora/jgora

xtables-addons: Support IPTV Timeshift. Backport to openwrt-19.07 branch

xtables-addons: Support IPTV Timeshift

Solves Issue #10373 and PR #10428

Signed-off-by: Jose Olivera <oliverajeo@gmail.com>
(bumped PKG_RELEASE)
Signed-off-by: Rosen Penev <rosenp@gmail.com>

youtube-dl: update to version 2020.11.1.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 275817a694895075dfcc97843ab1d0ad458467cc)

youtube-dl: update to version 2020.9.20

Release notes: https://github.com/ytdl-org/youtube-dl/releases/tag/2020.09.20

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d2b4c4e63e0285008fc77d478553e961a2f11467)

youtube-dl: update to version 2020.9.14

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cc6f4ab7ebecc06702cef366d79141132cf8d9cb)

bind: update to version 9.16.8

- DNS Flag Day 2020
(default EDNS buffer size changed from 4096 to 1232 bytes)

-- Added patch, which should be part of the next release
It fixes an issue while cross-compilation (I linked it in the commit
message with issue link)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d442033941b9aa7c9086305099ed6111b86a2bcf)

libftdi1: disable building documentation

This fixes the following build failure:

[ 66%] Generating ../doc/xml/ftdi_8c.xml
warning: Tag 'PERL_PATH' at line 2083 of file 'Doxyfile' has become obsolete.
         To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u"
warning: Tag 'MSCGEN_PATH' at line 2105 of file 'Doxyfile' has become obsolete.
         To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u"
[ 72%] Generating ftdi1_doc.i
Traceback (most recent call last):
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 457, in <module>
    main()
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 453, in main
    convert(args[0], args[1], not options.func_def, options.quiet)
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 430, in convert
    p = Doxy2SWIG(input, include_function_definition, quiet)
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 72, in __init__
    f = my_open_read(src)
  File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 44, in my_open_read
    return open(source)
FileNotFoundError: [Errno 2] No such file or directory: '/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/doc/xml/ftdi_8c.xml'

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c13184366330a72ffd909b605e5a3fb874f23077)

libftdi1: Fix pkgconfig paths properly

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0dac4b74cab4938af9a0148a48557410aa5fa5ae)

libftdi1: Apply pkgconfig fixes to libftdipp1 as well

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 762a0eeb7956153b81d3d8ce3457c1f1f34c4adb)

libftdi1: Partially add back InstallDev

The pkgconfig file needs changing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 180134d04cd5b5613b95ce2e806a6a43b684613e)

libftdi1: Remove faulty change from last patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 79168cc25994eb5beb05aa7bfdd34d173a458ccf)

libftdi1: Don't build examples

Add PKG_BUILD_PARALLEL for faster compilation.

Replace InstallDev section with CMAKE_INSTALL

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2e12e13a3bdc19b62ceb1cc9f507a2567240966d)

tinyproxy: convert to procd

The path changed since 274506803ab9025e3726b1a9449830e4ea8e72d0

Fixed.

Also took the time to convert to procd.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c14ba8bd7729f0b085fefceb59a438e2861eaa20)

tinyproxy: update to 1.10.0

Added license information.

Added PKG_BUILD_PARALLEL for faster compilation.

Refreshed patches.

Updated URLs.

Ran init script through shellcheck.

Fixes: CVE-2017-11747, CVE-2012-3505
Fixes: #13793
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 274506803ab9025e3726b1a9449830e4ea8e72d0)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added fixed CVEs and Github Issue]

nextdns: Update to version 1.8.8

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

openconnect: allow specify --protocol from config

openconnect v8.10 supports 4 VPN protocols

  --protocol=anyconnect  Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default)
  --protocol=nc          Compatible with Juniper Network Connect
  --protocol=gp          Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN
  --protocol=pulse       Compatible with Pulse Connect Secure SSL VPN

This patch allows user to specify protocol use the new "vpn_protocol"
option and deprecate the old option "juniper" which seems to be missing in
the current openconnect client.

Signed-off-by: Mengyang Li <mayli.he@gmail.com>

adblock: update 4.0.7-2

* switch all safesearch providers to dynamic ips (derived from cname)
* made the new safesearch approach compatible with bind-nslookup
* removed 3.x config compatibility code

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4b0d029bb535229c1d5f71a8d90b8f7994ca2ae0)

adblock: update 4.0.7

* fix aria2c download options
* fix report engine with empty domains
* fix safesearch ips of safe.duckduckgo.com (get ips dynamically)
* fix safesearch ips of safesearch.pixabay.com (get ips dynamically)
* add regional blocklist for italy
* shellcheck adjustments
* add test.sh for CI testing

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d36fd5766226698957e09936f366da1f7be89096)

zoneinfo: Updated to the latest release

Also updated compability options to build in supported by musl format

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 4315b0e4f2d46ed45a6808847e8a579b7dbb0b47)

zoneinfo: Updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 416dd1fa40e75adc9221cf5f78ca52134487e989)

zoneinfo: Updated to the latest release.

Signed-off-by: Vladimir Ulrich <admin@evl.su>
(cherry picked from commit 8850e94dfb8de9f52be26a75d69eeb4c25a461f8)

fastd: fix buffer leak when receiving invalid packets

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

logrotate: update to version 3.17.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ba8a34e0d9fe7be5d8cd8399d81984647098ab8b)

logrotate: update to 3.16.0

Fixes compilation with GCC10.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 528d95564d12b099a574244326030564bf2b2a69)

Merge pull request #13688 from dibdot/trm-19.07

[19.07] travelmate: bugfix single radio mode

Merge pull request #13687 from jefferyto/python-3.7.9-openwrt-19.07

[openwrt-19.07] python3: Update to 3.7.9, refresh/remove backported patches

python3: Update to 3.7.9, refresh/remove backported patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

travelmate: bugfix single radio mode

* fix the re-connection handling in single radio mode

Signed-off-by: Dirk Brenken <dev@brenken.org>

netdata: update to version 1.26.0

Disable ebpf plugin as in OpenWrt there is no package libbpf.
- With that, I need to introduce patch, which is not merged into netdata,
yet. Without it, I still got during cross-compilation this error:
checking for externaldeps/libbpf/libbpf.a... configure: error: cannot check for file existence when cross compiling

- And yes, the flag was there.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5ba339b49affba15afc2ab109265cc80e26233c4)

bind: update to version 9.16.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ededaf2977df4ecfcc79b1a779ec830ab20f251a)

Merge pull request #13679 from odmdas/freeradius3-backport-19.07

[19.07] freeradius3: backport latest changes to 19.07

freeradius3: move "release_" from PKG_VERSION

The substring "release_" does not reflect the version number.
In addition, package names will be shorter.

(backported from commit 11aa0b9)
Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>

freeradius3: add meta-package for default modules

This meta-package contains only dependencies for modules needed in
FreeRADIUS default configuration.

This commit adds missing description and install sections.

(backported from commit 7737abf)
Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>

Merge pull request #13659 from ja-pa/python3-urllib3-19.07

[OpenWrt 19.07]python-urllib3: update to version 1.25.10 (security fix)

python-urllib3: update to version 1.25.10 (security fix)

Fixes:
CVE-2020-26137

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #13635 from rs/nextdns-1.8.6-openwrt-19.07

[19.07] nextdns: Update to version 1.8.6

nextdns: Update to version 1.8.6

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Merge pull request #13624 from mlichvar/chrony-update-3.5.1

[19.07] chrony: update to 3.5.1

chrony: update to 3.5.1

Fixes CVE-2020-14367.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

nextdns: mark /etc/config/nextdns as configuration file

Conffile was set for OpenWrt master, but it is not present in OpenWrt
19.07. When /etc/config/nextdns is not set as conffile, it gets
overwritten by each update of nextdns and the user needs to set up it again.

This can be simply reproduced by these steps:
opkg update
opkg install nextdns
edit or add smth to /etc/config/nextdns, save it
then do: opkg install nextdns --force-reinstall
And /etc/config/nextdns gets overwritten by default values

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

simple-adblock: config update file fix

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #13602 from nxhack/1907_libuv_cve

[19.07] libuv: update to 1.40.0

libuv: update to 1.40.0

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

nano: update to 5.3

Update nano editor to version 5.3.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 4690a1f1c98c12f74a882eb2fc256c1f98957e55)

btrfs-progs: update to version 5.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f775fa89cafd17a013ac7ff899a8fc70407aac24)

btrfs-progs: update to version 5.6

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 0c12882a6507c966f26486b3fb76ef91030c3790)

python-pytz: update to 2019.03

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
(cherry picked from commit 0f2cf9ebd6e4f836c3824433a421928bf13d5275)

adblock: refresh blocklist sources

* rename 'smarttv' to 'smarttv_tracking'
* added 'firetv_tracking' and 'android_tracking' (thanks @panache67)
* added 'gaming' (thanks @hasanlo in openwrt forum)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c01beb0679ef49dc449359268f03c2d171bf4064)

Merge pull request #13549 from gladiac1337/haproxy-2.0.18-openwrt-19.07

[openwrt-19.07] haproxy: Update HAProxy to v2.0.18

syslog-ng: bump version in config file

This fixes issues:
syslog-ng[3895]: WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.29 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.26'

Fixes: 06f3ac21b4d7be5a31f6739ab57e140260cdcd95 ("syslog-ng: update to
version 3.29.1")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1607774df4779eeb3951d08532c0330549d38950)

syslog-ng: tweak shell code of network_localhost little bit

We can get rid of pipe with -n flag to sysctl.

Signed-off-by: Karel Kočí <cynerd@email.cz>
(cherry picked from commit 7b7d074c8d18ce7122d50ec207fd71a3bd88c47b)

python-sentry-sdk: Update to version 0.12.3

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fd9ebe3d707544d87a54b7d868f9ddebe0daf463)

haproxy: Update HAProxy to v2.0.18

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #13468 from ja-pa/tor-update-0.4.4.5-19.07

[OpenWrt 19.07]tor: update to version 0.4.4.5

Merge pull request #13542 from miska/mariadb-owrt-19.07

[19.07] mariadb: Update to the latest version from 10.2 branch

tor: update to version 0.4.4.5

Disable ac_cv_func_mallinfo because of arc arch.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

mariadb: Update to the latest version from 10.2 branch

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>

Merge pull request #13532 from flyn-org/openwrt-19.07

gstreamer1: enable build options necessary for most applications

Werkzeug: Update to version 0.16.0

- Remove PKG_BUILD_DEPENDS as it is no longer necessary.
- The Python3 is already included in DEPENDS.
- Remove PKG_BUILD_DIR and PKG_UNPACK was for dual Python version.
- Change TITLE and description
- Add source package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 267796c316d12f3c310a4800d317fcab7a41c7ab)

Flask: update to version 1.1.2

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 90790b6b8f8413002ab6c8cf921daacf849884e7)

Flask: Update to version 1.1.1

- Change TITLE and URL to better one
- Add source package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 19e12971b8ac3294e5f22f1e9dd115c91405d88e)

gstreamer1: enable build options necessary for most applications

Commit eee7ce2b changed gstreamer1's build options, and this broke
some applications.

First, -Doption-parsing=false is intended for very specific embedded
applications rather general packages. Please see:

https://github.com/openwrt/packages/pull/8847
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/388

Second, -Dregistry=false seems to break plugin discovery. Symptoms of
this include broken applications and gst-inspect-1.0 listing zero plugins.

Fixes #13531.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 10aa094d7f7b039b04eec3feab9e6c4a6a5756a7)

python-ifaddr: update to version 0.1.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 98eb81ccd66133586a2ad19ab5bd6ab5a75ed61f)

Merge pull request #13529 from rs/nextdns-1.8.5-openwrt-19.07

[19.07] nextdns: Update to version 1.8.5

nextdns: Update to version 1.8.5

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Merge pull request #13464 from ja-pa/ipmitool-security-fix-19.07

[OpenWrt 19.07] ipmitool: fix CVE-2020-5208

ipmitool: fix CVE-2020-5208

All patches has been applied upstream.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
(cherry picked from commit b2a9219f738344ddd164c9904cc9019db96d4658)

nextdns: Update to version 1.8.4

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

openconnect: updated to 8.10 to address CVE-2020-12823

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

python-zeroconf: update to version 0.28.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1c2f729c9d768c08cd43763737de35f311d39fcf)

python-zeroconf: update to version 0.24.4

Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 8ed94a07fc18908379d4f8d5c71256eaacf80b7d)

Merge pull request #13466 from aaronjg/openwrt-19.07

mwan3: fix typo in mwan3_set_sticky_iptables [19.07] [bugfix]

mwan3: fix typo in mwan3_set_sticky_iptables

fixes #13443

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>

ocserv: include ocserv-worker

Resolves: #13465

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

vpnbypass: README update, code cleanup

Signed-off-by: Stan Grishin <stangri@melmac.net>
update

Signed-off-by: Stan Grishin <stangri@melmac.net>

ocserv: updated to 1.1.1

miniupnpd: add miniupnpd ipv6_disable option, #11971 close

Signed-off-by: Alexey Kuznetsov <axet@me.com>
(cherry picked from commit 9b6537b4877077cbc68b9156da363d834fe53a69)

Merge pull request #13434 from stangri/19.07-simple-adblock

[19.07 simple-adblock: add config auto-update feature

simple-adblock: add config auto-update feature

Signed-off-by: Stan Grishin <stangri@melmac.net>

collectd: update to 5.12.0

Update collectd to version 5.12.0.

* Refresh patches
* Remove upstreamed patch 920-fix-ubi-data-source-type.patch
* Backport a patch from upstream to fix a missing define
  (920-backport-netlink-reg-noerror.patch)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 28747825df75805cbcc5dcf82f9c6b0676fd1417)

collectd: update PKG_RELEASE

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 6d34208c5737d7b3f76fcf2146c4a22754dbe527)

collectd: remove quotation on interval this is an number

The value is a number and not a string.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit d2d62204769b62c3c4bb974dd3cf0c847b24c7b5)

collectd: move include line

Currently the init script generates a config file from uci, that has the
include line before the interval line. This means, that anything happening
in the include directory does not yet see the changed Interval.

Moving the include line before the uci generation process fix this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 50f56c2ede8dc57464a94bdff4dce36ac3fe04dd)

collectd: update PKG_RELEASE

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 5afad91d36df5c7ecda7f2fca4e6738419f7b50c)

collectd: fix ubi data source type

Currently the values are stored in the ubi plugin as data source type
`counter`. But this makes no sense, because the values change very slowly
and I don't want to know the rate of change. It is better to store the
value as data source type `gauge`. Then I can see the current value.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit e7054e7e791566f1908bfd26b7e09dbac04b3dc4)

collectd: add ubi uci and plugin info

Add uci binding for ubi plugin.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a481a2006ccc27addb1e930e6b760f846a6abc0f)

collectd: enable ubi plugin

Enable ubi plugin.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 46f247687551ddc0a1506c24ba75a6bbb720b60e)

zmq: fix compilation when libbsd is present

Limit libbsd support to glibc.

Remove wrong python variable.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit bb9dd1468d78b21ba46bc8727fd7716a1f13e9ae)