youtube-dl: Update to version 2019.9.1

python-slugify: Update to version 3.0.3

syslog-ng: Update to version 3.23.1

mxml: update to 3.1

python-pyasn1: Update to 0.4.7

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

apinger: Fix PKG_SOURCE_VERSION

crconf: Pass CFLAGS properly

ap51-flash: upgrade package to latest release 2019.0

Too short

Signed-off-by: Rosen Penev <rosenp@gmail.com>

patch: rename CVE-2019-13638 patch to mollify uscan

Signed-off-by: Russell Senior <russell@personaltelco.net>

Update haveged to 1.9.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

python-yaml: Update to version 5.1.2

classpath: Add jamvm/host build dependency

This is needed for compilation. A Java compiler is also needed but that
must be handled elsewhere.

Fixed up license information.

URLs to HTTPS.

Other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

remove ipsec-tools and opennhrp

* improved Zyxel firmware detection
* introduced optional MAC address filtering
* added support for:

  - Plasma Cloud PA300
  - Plasma Cloud PA1200
  - Plasma Cloud PA2200

Signed-off-by: Sven Eckelmann <sven@narfation.org>

- Correct SPDX License Identifier
- Move DEPENDS under URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Change indentation in dependencies and as well in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

PKG_NAME should match the name of the folder

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

unbound: update to 1.9.3

Microsoft has published technical specification for exFAT [1]
and the driver has been added to Linux staging tree [2].

It's now safe to drop BUILD_PATENTED label.

[1] https://docs.microsoft.com/windows/win32/fileio/exfat-specification
[2] http://lkml.iu.edu/hypermail/linux/kernel/1908.3/04254.html

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>

As discussed on GitHub[0] the package should be removed.

[0]: https://github.com/openwrt/packages/issues/7832

> The package is effectively orphaned upstream and has been for some
  time. Given the security-sensitive nature of the package, an active
  maintainer community is essential for safe usage. Racoon's lack of
  support for IKEv2, despite it being stable for a long time, and the
  availability of next-generation tunneling systems such as wireguard,
  also would seem to limit its future value. Setkey's functionality
  has been subsumed by 'ip xfrm'.

> If you disagree that ipsec-tools should be removed from OpenWRT,
  please say so now. If there are still use cases for it that are
  not met by other IKE implmenentations that would be good to
  know. But more importantly, I think you'll need to convince us
  that ipsec-tools is actually safe to operate on today's Internet
  given its current state of development.

Signed-off-by: Paul Spooren <mail@aparcar.org>

The package requires ipsec-tools which will be removed from packages.git

Signed-off-by: Paul Spooren <mail@aparcar.org>

libuhttpd: Update to 3.0.1

As discussed in #7832, ipsec-tools is no longer suitable for inclusion in the
distribution.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

libev: update to 4.27

keyutils: Add Debian hardening patch

opencv: Update to 4.1.1

new backuppc package w/ dependency perl-file-rsyncp

Signed-off-by: Rosen Penev <rosenp@gmail.com>

jamvm: Add host build

Needed for classpath. GCJ is also needed but that can be dealt with
separately.

Fix compilation with musl by defining _GNU_SOURCE. What's funny here is
that if __USE_GNU gets replaced, the host build fails. The man page says
_GNU_SOURCE for pthread_getattr_np but glibc violates that statement.

Removed classpath dependency. classpaths must select jamvm, not the other
way around.

Removed target whitelist. Switched to blacklist.

Fixed License information.

Various other cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

madplay: Pass CFLAGS properly

nginx: update to 1.16.1

msmtp-scripts: Fix connectivity test and various permissions

libredblack: Pass CFLAGS

atftp: Update to 0.7.2

xmlrpc-c: Update to 1.51.03

haproxy: Update HAProxy to v2.0.5

Shorewall: Bump to 5.2.3.4

libfmt: bump to version 6.0.0

Signed-off-by: Othmar Truniger <github@truniger.ch>

Introduce further ACL checks to verify that the request-supplied
upload location may be written to. This prevents overwriting things
like /bin/busybox and allows to confine uploads to specific directories.

To setup the required ACLs, the following ubus command may be used
on the command line:

ubus call session grant '{
  "ubus_rpc_session": "d41d8cd98f00b204e9800998ecf8427e",
  "scope": "cgi-io",
  "objects": [
    [ "/etc/certificates/*", "write" ],
    [ "/var/uploads/*", "write" ]
  ]
}'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>