nss: update to 3.44

python-requests: allow urllib3 1.25.x

tac_plus: Disabled PAM by default and added a PAM variant

libxerces-c: Switch to using -fPIC

Turns out this was not backported to the stable branch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

youtube-dl: update to version 2019.5.11

loudmouth: Fix compilation with uClibc-ng

flent-tools: Update to 1.2.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

nls.mk must be included.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

nls.mk is needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Simplified the Makefile and fixed compilation with uClibc-ng by including
nls.mk.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Port mirroring 1.4.4

Signed-off-by: Bruno Pena <brunompena@gmail.com>

[Depends on libwangle]

Facebook's branch of Apache Thrift, including a new C++ server.
Thrift is a serialization and RPC framework for service communication.
Thrift enables these features in all major languages, and there is
strong support for C++, Python, Hack, and Java.

Test Plan: compile fbthrift on openwrt master for nbg6817

Maintainer: me

Signed-off-by: Amol Bhave <ambhave@fb.com>

boost: add host library build for boost

iodine: Fix compilation with uClibc-ng

daemon is supported now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

lang/python/README.md: add note about use in other packages feeds

hfsprogs: Fix compilation with uClibc-ng

postfix: Fix compilation with uClibc-ng

tvheadend: Fix compilation on GCC8

libartnet: Fix compilation with GCC8

rsyslog: Remove unnecessary depends

libssh: Fix compilation without deprecated OpenSSL APIs

stubby: update to 0.2.6

libfolly: Fix folly missing deps

Description: folly automatically picks up lz4 and unwind if they are found
by its cmake build script. This is causing buildbot failure.
Include these libraries in DEPENDS as well.

Test Plan:
 - build packages liblz4 and libunwind
 - build folly, and check that it throws an error
 - add this patch, and rebuild
 - verify that it succeeds this time around

Compile Tested: nbg6817, openwrt master

Maintainer: me
Signed-off-by: Amol Bhave <ambhave@fb.com>

libwangle: Add new package libwangle

mariadb: security bump + init script brush-up

Summary: Currently, boost host build doesn't actually compile boost
libraries for the host arch. If there are host tools that would want
to link against boost, it can't right now.

This diff adds support for compiling host boost library as well.
Any packages that need to depend on a host boost library can depend on
CONFIG_boost-host-build-<lib>.

Test Plan: Compiled fbthrift and verified that it works.
used openwrt master using nbg6817

Maintainer: @ClaymorePT

Signed-off-by: Amol Bhave <ambhave@fb.com>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>

- tls_cipher_list
  - tls_ciphersuites
  - tls_min_version
  - tls_max_version

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>

- added trailing '--' to logger to make it foolproof
- user is extracted from config instead of using hard-coded value
- log directory is now also extracted from config (if set)
- directory creation is now done via awk script (more robust)
- improved log messages

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

From Release Notes:

  Security

    MDEV-18686 - Add option to PAM authentication plugin to allow case insensitive username matching
    bugfix - multi-update checked privileges on views incorrectly (commit 5057d46375)
    MDEV-19276 - during connect, write error log warning for ER_DBACCESS_DENIED_ERROR, if log_warnings > 1
    MDEV-17456 - Malicious SUPER user can possibly change audit log configuration without leaving traces.

    Fixes for the following security vulnerabilities:
        CVE-2019-2614
        CVE-2019-2627
        CVE-2019-2628

OpenWrt changes:

  - added PKG_CPE_ID
  - shortened default description to make "opkg info" output easier on the eyes
  - refreshed patches

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Wangle is a framework providing a set of common client/server
abstractions for building services in a consistent, modular, and
composable way.

tested with: master on nbg6817 and arc700.

Signed-off-by: Amol Bhave <ambhave@fb.com>

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>

libevhtp: Update to 1.2.0