January 2021 Security Releases:
use-after-free in TLSWrap (High) (CVE-2020-8265)
HTTP Request Smuggling in nodejs (Low) (CVE-2020-8287)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Fixes:
pkg_resources.ContextualVersionConflict: (idna 3.0 (/usr/lib/python3.9/site-packages), Requirement.parse('idna<3,>=2.5'), {'requests'})

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

No package version bump as no change to built package.  URL now points
to current useful webpage, and description is based on current release.

Signed-off-by: Karl Palsson <karlp@tweak.net.au>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

This became a requirement in libwww-perl 6.17.

Note that there are two other missing "soft" dependencies, Authen::Ntlm
as used by LWP::Authen::Ntlm, and Data::Dump as used by
LWP::Debug::TraceHTTP, that are not required for basic functionality.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>

This is a hard requirement of perl-www.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>

Add spamc and spamc-ssl SpamAssassin client packages.
Also package SpamAssassin Perl backend, but that still lacks many
features due to Perl packages missing in OpenWrt.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Disable native code for now as it fails due to the package's
build-system not considering STAGING_DIR.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

It's required to make SpamAssassin's build system happy.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Fixes compilation with clang. The make system misidentifies clang as
GCC for some reason.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Maintainer: me @ianchi
Compile tested: head r15324-920b692, aarch64, x86_64
Run tested: (qemu 5.2.0) aarch64, x86_64

Description:
Update to v14.15.3

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Regenerated patches from:
  https://github.com/pyca/cryptography/pull/4920

The patch names were kept as generated via 'git format-patch 3.3.1..'
And ran through quilt.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Zbyněk Kocur <zbynek.kocur@fel.cvut.cz>

Update to v14.15.1

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Co-authored-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

This adds basic checks for php7 core and module packages.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Add *BUILD_PARALLEL for faster compilation.

Rearrange variable for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

From https://github.com/django/asgiref/blob/master/CHANGELOG.txt
* Updated StatelessServer to use ASGI v3 single-callable applications.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Because of e52d0487e8 , these flags no
longer get passed. Add them back to fix compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

update to 1.3.2

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Update to v12.20.0
Take over maintainership from John Crispin

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

This release contains intentional incompatibility. Deprecation warnings are
off by default on 2.7.2 and later. You can turn on deprecation warnings by
specifying the -w or -W:deprecated option at the command-line. Please check
the topics below for details.

* Feature #17000 2.7.2 turns off deprecation warnings by default
* Feature #16345 Don’t emit deprecation warnings by default.

This release contains the new version of webrick with a security fix described in the article.

* CVE-2020-25613: Potential HTTP Request Smuggling Vulnerability in WEBrick

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>