sqlite3: update to version 3.33.0 (security fix)

Update nano editor to version 5.2.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Fixes:
CVE-2020-13871
CVE-2020-15358

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

swig: support node.js v12

node: update to v12.18.3

icu: update to 67.1

openfortivpn: fix routes passed to netifd

Maintainer: @blogic me
Compile tested: head r14241-ba2ddba, x86_64
Run tested: x86_64 (VirtualBox)

Description:
Addressed the build failure with node.js version 12.

https://github.com/openwrt/packages/pull/12225

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

With this change the `/etc/config/sshtunnel` file has the correct access.
It's a sensible file.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ddns-scripts: Support Bearer Token for Cloudflare

rng-tools: bump to 6.10, require libopenssl

python-pytest-xdist: update to version 2.0.0

Update sysrepo, libyang, libnetconf2 and netopeer2 packages to latest versions

libuhttpd: Update to 3.2.0

python-docker: Update to 4.3.1

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

davfs2: update to 1.6.0

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

python-pytest: update to version 6.0.1

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Coremark: update to ver 2020-05-28 and fix for 64bit

Signed-off-by: kongfl888 K <kongfl888@outlook.com>

Signed-off-by: kongfl888 K <kongfl888@outlook.com>

generate-ipv6-address: add ipv6 generator

nginx: update to version 1.19.2

Several security issures are addressed:

 - CVE-2020-8620 It was possible to trigger an assertion failure by sending
   a specially crafted large TCP DNS message.
 - CVE-2020-8621 named could crash after failing an assertion check in
   certain query resolution scenarios where QNAME minimization and
   forwarding were both enabled. To prevent such crashes, QNAME minimization is
   now always disabled for a given query resolution process, if forwarders are
   used at any point.
 - CVE-2020-8622 It was possible to trigger an assertion failure when
   verifying the response to a TSIG-signed request.
 - CVE-2020-8623 When BIND 9 was compiled with native PKCS#11 support, it
   was possible to trigger an assertion failure in code determining the
   number of bits in the PKCS#11 RSA public key with a specially crafted
   packet.
 - CVE-2020-8624 update-policy rules of type subdomain were incorrectly
   treated as zonesub rules, which allowed keys used in subdomain rules to
   update names outside of the specified subdomains. The problem was fixed by
   making sure subdomain rules are again processed as described in the ARM.

Full release notes are available at
https://ftp.isc.org/isc/bind9/9.16.6/doc/arm/html/notes.html#notes-for-bind-9-16-6

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Drops pid files, no longer needed with procd management.
Now properly reloads on reload_config after UCI changes.

Signed-off-by: Karl Palsson <karlp@etactica.com>

[ Fixed two shellcheck warnings and bump PKG_RELEASE ]
Signed-off-by: Michael Heimpold <mhei@heimpold.de>

isc-dhcp: fix compilation with GCC 10

fakepop: add new package

i2pd: Update to 2.32.1

Signed-off-by: David Yang <mmyangfl@gmail.com>

Signed-off-by: Marc Egerton <foxtrot@realloc.me>

Added _GNU_SOURCE for uClibc-ng compatibility. _XOPEN_SOURCE does not
seem to be enough.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

The openfortivpn routes are a bit different than the standard ppp
routes so we need to handle them with a custom ppp-up script.

Gateway should not be set, and src should be set to the PPP local ip
address.

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

fakepop is a fake pop3 daemon. It returns always the same messages to all users, it does not care about usernames and passwords. All user/pass combinations are accepted.

Signed-off-by: Marc Egerton <foxtrot@realloc.me>

Upstream now requires libopenssl unconditionally

Signed-off-by: Nathaniel Filardo <nwfilardo@gmail.com>