This update includes fixes for:
* CVE-2020-10108
* CVE-2020-10109

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Life changes, I'm no longer avaiable to be an sufficiently active
OpenWrt developer.  Therefore removing myself from maintainer from
all packages I maintained in OpenWrt.

All the best for those who keep up the good work!

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>

xml.sax.saxutils has a dependency on urllib[1].

[1]: https://github.com/python/cpython/blob/v3.8.2/Lib/xml/sax/saxutils.py#L6

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

New upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

New upstream.

Cleaned up Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

django-ranged-response is a fork of django-ranged-fileresponse, but they
did not update the URL on PyPI[1].

The URL in this change appears to be the correct one.

[1]: https://github.com/wearespindle/django-ranged-fileresponse/issues/10#issuecomment-509965566

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

This version is not the latest available update, but is the last version
compatible with Python 2.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Previously, this packaged "django-jsonfield" on PyPI.

The only (in-tree) package that depends on this package is
django-postoffice.

django-post-office actually depends on "jsonfield" on PyPI.[1][2]

This changes the packaged project from "django-jsonfield" to
"jsonfield".

The version packaged here is not the latest available update, but the
last version compatible with Django 1.11 / Python 2.

[1]: https://github.com/ui/django-post_office/blob/v3.2.1/setup.py#L45
[2]: https://github.com/ui/django-post_office/issues/182

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

This patches Django to load byte-compiled (.pyc) db migration scripts,
since Python scripts are often distributed in byte-compiled form in
OpenWrt packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* The Makefile creates two packages:
  - chicken-scheme-interpreter, same that was created
    with the previous version of the Makefile (except
    that this one includs Chicken 5.2.0);
  - chicken-scheme-full, which includes the compiler,
    debugger, profiler, and module manager.

  The -full package has some peculiarities:
  It is somewhat large, although that is not really
  an issue, since it depends on gcc, which already needs
  more than 100Mb space.
  The binaries are not stripped, because stripped binaries
  seem to break the compiler (generated objects are not
  properly linked). Since the package is large and depends
  on an even larger one, this shouldn't be a problem.

Signed-off-by: Jeronimo Pellegrini <j_p@aleph0.info>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: Javier Marcet <javier@marcet.info>

Changes:
-remove dependency on more-itertools
-fix build dependency

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

This fixes:
  - CVE-2020-7061
  - CVE-2020-7062
  - CVE-2020-7063

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Added BUILDONLY flag to hide from menuconfig.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Add some new APIs
V8 was updated to 7.8.279.23. This includes performance improvements to object
destructuring, RegExp match failures and WebAssembly startup time.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Changes:
-rename from python3-flask-login to python-flask-login

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>