mwan3: update to version 2.7.9

libarchive: patch multiple CVEs

* the DNS Report now displays the hostname, MAC-Address or
  client IP (CLI & LuCI)
* Filter the DNS Query result set for a particular domain, client or
  time frame (CLI & LuCI)
* remove needless XHR.Poll-Events from Reporting page in LuCI
* remove needless 'force sort' option in LuCI

Signed-off-by: Dirk Brenken <dev@brenken.org>

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Sleep will be aborted if a signal is send to this process.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

perl: add missing config for mips64el

lynx: add package

Signed-off-by: Leonid Esman <leonid.esman@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Radicale 2.x as radicale2

jamvm: Clarify and clean up package description

python: Fix lib2to3 fixes search

nut: Prevent FSD when not specifically requested

bcrypt is a secure password hashing mechanism and is
extremely useful for more secure Radicale authentication,
so add it.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>

For changes in 9.11.5-P1 see https://ftp.isc.org/isc/bind9/9.11.5-P1/CHANGES

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>

This allows to get rid of the heavy libstdcpp dependency.

Added -fno-rtti to save a little space (200 bytes).

Also did some Makefile rearrangements for consistency.

Added HTTPS to URLs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This is the patch from c98b12d9a9 (#7931),
applied for python 2.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

vobject: Add python vCard/vCalendar Library

python3: enable lib2to3 to also search .pyc files.

Reverted at request by Daniel Engberg.
https://github.com/openwrt/packages/pull/7706#issuecomment-453734749

This reverts commit d4a62bbbca.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

getdns: Remove iamperson347 from maintainer

stubby: Remove iamperson347 from maintainer

sqlite3: various improvements

grep: Update to 3.3

libmicrohttpd: Update to 0.9.62

Backport an upstream patch to remove the upper limit of
lm-sensors version check, so that using lm-sensors 3.5.0
will work.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

This error is exposed when using python-minimal.

Signed-off-by: Daniel Santos <daniel.santos@pobox.com>

While at, add --with-pic to configure arguments. This prevents the following
build errors spotted by the build bots for i386 targets:

-snip-
...
ext/openssl/.libs/openssl.o: direct GOT relocation R_386_GOT32X against
`X509_REQ_free' without base register can not be used when making a shared object
...
-snap-

This parameter seems to make no difference on other targets, nor
improve or make worse the package size.

Run tested for i386 in VirtualBox VM and on Duckbill for mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

samba4: add mandatory option per CVE-2018-16853

subversion: bump to the latest stable bugfix release

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Joseph Benden <joe@benden.us>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

The configure script uses a deprecated function to check for libssl. I tried patching configure.ac
and adding PKG_FIXUP:=autoreconf but that causes a different error. This is the simplest fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Update to Apache Subversion 1.11.1.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>

Fixes
CVE-2019-5882 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5882

Changes
-add PKG_CPE_ID
-add license info

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Since 4.9.3, Samba AD-DC with MIT Kerberos will refuse to build unless
--with-experimental-mit-ad-dc is provided to the configure command.

The mandatory requirement was introduced in response to a report that
a user in a Samba AD domain can crash the KDC when Samba is built in
the non-default MIT Kerberos configuration:
https://www.samba.org/samba/security/CVE-2018-16853.html

This requirement was introduced in Samba commit
c5370a4349.

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>

softethervpn5: fix client, bridge pkg installation

* fix launcher.sh installation for client, bridge
* link libreadline as static for host helper (hamcorebuilder)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

softethervpn:  use hostpkg-installed libreadline, add name to build_dir

tvheadend: Fix compilation without deprecated OpenSSL 1.0.2 APIs

postfix: Fix compilation without OpenSSL ENGINE