From CHANGES_2.4:

SECURITY: CVE-2020-11984 (cve.mitre.org)
  mod_proxy_uwsgi: Malicious request may result in information disclosure
  or RCE of existing file on the server running under a malicious process
  environment. [Yann Ylavic]

SECURITY: CVE-2020-11993 (cve.mitre.org)
  mod_http2: when throttling connection requests, log statements
  where possibly made that result in concurrent, unsafe use of
  a memory pool. [Stefan Eissing]

SECURITY:
  mod_http2: a specially crafted value for the 'Cache-Digest' header
  request would result in a crash when the server actually tries
  to HTTP/2 PUSH a resource afterwards.
  [Stefan Eissing, Eric Covener, Christophe Jaillet]

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

ldns: fix compilation without deprecated APIs

libulfius: update to 2.6.8

boinc: fix compilation without deprecated OpenSSL APIs

Upstream fixed the libmicrohttp issue. Removed local patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

net/miniupnpd: check by /etc/init.d/miniupnpd running

Signed-off-by: Chen Minqiang <ptpt52@gmail.com>

dawn: bump version

test_storage: fix compilation with musl 1.2.0
datastorage/test: improve scalability and performance
datastorage: fixed use of wrong client search
general: add memory auditing
memory auditing: bug fixes to memory auditing and hearing map
datastorage: fixes to linked list handling
tcpsocket: fix read callback function and arbitrary memory allocations
tcpsocket: leave loop if we read 0 byte

Furthermore, you can now dump the memory usage by sending a SIGHUP to
dawn process.

Signed-off-by: Nick Hainke <vincent@systemli.org>

unbound: follow resolv.conf.auto to new location

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

django-restframework: update to version 3.11.1

libssh: patch security issue

Fixes:
CVE-2020-16135

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

tayga: Added 64:ff9b:1::/48 as well-known prefix for NAT64 (RFC 8215)

ntpd: add config include support

Signed-off-by: Eike Ritter <git@rittere.co.uk>

xtables-addons: update for 3.10

erlang: fix compilation without deprecated OpenSSL APIs

python3-maxminddb: update to version 2.0.2

python-pynacl: fix build with new libsodium patch

freeradius3: fix compilation without deprecated OpenSSL APIs

yara: fix compilation without deprecated OpenSSL APIs

libextractor: remove ffmpeg plugin

inadyn: update to 2.7

update to newest version.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

motion: fix old libmicrohttpd usage

This fixes misleading errors in the status file, and increases buffer
sizes to match the python implementation.

Signed-off-by: Karl Palsson <karlp@etactica.com>

acme: fix alignment space vs tabs

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

scons: update to 4.0.1

Cleaned up Makefile to standards.

Replaced HIDDEN with BUILDONLY. It's more descriptive.

Added PKG_HOST_ONLY. This is a host only package.

Added HOST_BUILD_PARALLEL.

Added URL for uscan.

Added patch to fix library searching.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ooniprobe: new packages

Fixes https://github.com/openwrt/packages/issues/13016
Patch [1] broke compilation for python-pynacl.

The fix is to patch PyNaCl to consider that
PYNACL_HAS_CRYPTO_SCALARMULT_ED25519 is always available.

[1] 3ef28a4ab0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove pic hack.

Fix license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Doesn't seem to be needed for this package but it does fix several
warnings.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

simple-adblock: README and config update

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Signed-off-by: Stan Grishin <stangri@melmac.net>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Eike Ritter <git@rittere.co.uk>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

smstools3: fix compilation with GCC10