vsftpd: update to 3.0.3

squid: version bump and dependency fixes

Update vsftpd to 3.0.3 released in July 2015.

Changelog: https://security.appspot.com/vsftpd/Changelog.txt
Release blog: http://scarybeastsecurity.blogspot.fi/2015/07/vsftpd-303-released-and-horrors-of-ftp.html

- Increase VSFTP_AS_LIMIT to 200MB; various reports.
- Make the PWD response more RFC compliant; report from Barry Kelly
<barry@modeltwozero.com>.
- Remove the trailing period from EPSV response to work around BT Internet
issues; report from Tim Bishop <tdb@mirrorservice.org>.
- Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil
<mvyskocil@suse.cz>. At least, syslogging seems to work on my Fedora now.
- Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I
probably have a different distro / libc / etc. and there are multiple reports.
- Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle
this case gracefully. Report from Vasily Averin <vvs@odin.com>.
- List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default.
- Make some compile-time SSL defaults (such as correct client shutdown
handling) stricter.
- Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms
delays. From Tim Kosse <tim.kosse@filezilla-project.org>.
- Kill the FTP session if we see HTTP protocol commands, to avoid
cross-protocol attacks. A report from Jann Horn <jann@thejh.net>.
- Kill the FTP session if we see session re-use failure. A report from
Tim Kosse <tim.kosse@filezilla-project.org>.
(vsftpd-3.0.3pre1)
- Enable ECDHE, Tim Kosse <tim.kosse@filezilla-project.org>.
- Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384.
- Minor SSL logging improvements.
- Un-default tunable_strict_ssl_write_shutdown again. We still have
tunable_strict_ssl_read_eof defaulted now, which is the important one to prove
upload integrity.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Signed-off-by: heil <heil@terminal-consulting.de>

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Several patches here and pull requests at the upstream github project
page were merged into the devel branch.  Switch to that until the next
stable release.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

This change aims to address the following 2 issues

 - The control file was there yet xl2tpd process was not
 - The control file's existence prevented xl2tpd from start

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

L2TP with xl2tpd has no proto_task in the context of netifd and because
of this there is no valid $ERROR to check for when doing tearing down.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

update postgresql

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

- supports arm64/aarch64

Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>

@openwrt/owners : please invite @yousong to @openwrt/package-maintainers

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

[utils/zoneinfo] Updated to the latest release.

tvheadend: add missing install of default Uci config file

Signed-off-by: Vladimir Ulrich <admin@evl.su>

Signed-off-by: Jan Čermák <jan.cermak@nic.cz>

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>

lualanes: fix musl compatibility

sqm-scripts and luci-app-sqm now live in the same Makefile and are built
from the upstream git repository, rather than having the files included
here.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

Turns out that is not needed anymore for v2.7.0.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

openvswitch: upgrade to version 2.4.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

liburcu: update to 0.8.7

Signed-off-by: Nicolas Thill <nico@openwrt.org>

Signed-off-by: Nicolas Thill <nico@openwrt.org>

Signed-off-by: Nicolas Thill <nico@openwrt.org>