Merge pull request #4740 from EricLuehrsen/master

unbound: update to 1.6.5

shadowsocks-libev: ss-rules: new bool option --dst-forward-recentrst

Signed-off-by: Yousong Zhou <redacted>

shadowsocks-libev: ss-rules: rename usage func

Signed-off-by: Yousong Zhou <redacted>

unbound: update to 1.6.5

This fixes the root.key file if created when unbound is installed between sep11 and oct11 2017

Signed-off-by: Eric Luehrsen <redacted>

Merge pull request #4738 from dibdot/travelmate

travelmate: update to 0.9.3

travelmate: update to 0.9.3

* backend/frontend: supports a Connection Limit ('trm_maxretry')
  of '0', to disable this feature (unlimited retries)

Signed-off-by: Dirk Brenken <redacted>

Merge pull request #4737 from sartura/libuv_bump_to_1.14.0

libuv: bump to version 1.14.0

libuv: bump to version 1.14.0

Signed-off-by: Marko Ratkaj <redacted>

glib2: update to 2.53.6

Signed-off-by: Peter Wagner <redacted>

Merge pull request #4735 from antonlacon/ffmpeg-next

ffmpeg: fixup mpeg support in libffmpeg-mini

Merge pull request #4550 from pprindeville/php-multiline-syslog-fix

php7: error_log shouldn't squirt multi-line messages into syslog()

Merge pull request #4707 from pprindeville/openwisp-config-retire-polarssl

openwisp-config: polarssl has been removed

ffmpeg: fixup mpeg support in libffmpeg-mini

The demuxers mpegps is for VOB support and mpegvideo is for raw mpeg video.
mpegps was intended to be included with libffmpeg-mini; mpegvideo was not.

Signed-off-by: Ian Leonard <redacted>

shadowsocks-libev: rewrite ss-rules

 - New UCI options ifnames, dst_default
 - UCI options src_ips_xxx now accept cidr as their values
 - Export ipset names as part of the interface so that it can be
   depended on and used by other programs
 - Bypass only remote servers used ss-redir instances, so that it's
   possible to let other servers to go through existing re-redir
   instances

Signed-off-by: Yousong Zhou <redacted>

php7: backport upstream fix for multiline logging

See: https://github.com/php/php-src/pull/2674

Signed-off-by: Philip Prindeville <redacted>

Merge pull request #4697 from antonlacon/ffmpeg-next

ffmpeg: update to 3.2.7

shadowsocks-libev: Update AEAD cipher names.

Signed-off-by: Leong Hui Wong <redacted>

cgi-io: fix stray semicolon

Remove an improperly placed semicolon in order to solve the following
compiler error:

.../main.c:144:3: error: this 'if' clause does not guard... [-Werror=misleading-indentation]
    if (execl("/bin/busybox", "/bin/busybox", "md5sum", file, NULL));
    ^~
    .../main.c:145:4: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the 'if'
    return NULL;
    ^~~~~~
    cc1: all warnings being treated as errors

Fixes #4723.

Signed-off-by: Jo-Philipp Wich <redacted>

tiff: update package to version 4.0.8

Signed-off-by: Jiri Slachta <redacted>

build,travis: really fail Travis job when build test fail

Signed-off-by: Etienne Champetier <redacted>

Merge pull request #4683 from pprindeville/bind-build-deprecated

bind: patch unneeded if openssl is build w/ deprecated

build,travis: fail Travis test when compilation fail

Signed-off-by: Etienne Champetier <redacted>

build,travis: print all logs files and packages sizes

Signed-off-by: Etienne Champetier <redacted>

build,travis: remove "Terminated" message

More precisely, remove this message
./.travis_do.sh: line 16: 13736 Terminated              while :; do
    sleep 590; echo "still running (please don't kill me Travis)";
done

Signed-off-by: Etienne Champetier <redacted>

Merge pull request #3751 from ianchi/node

Node: update error & fix compile error

Merge pull request #4713 from philjohn/patch-1

ddns-scripts: add support for dynu.com IPv6 update

Merge pull request #4721 from marcin1j/pr/20170817-mwan3-fix-815e83

/ mwan3: fix bugs introduced in 815e83d4

lang/penlight: Update maintainer email

Signed-off-by: Karl Palsson <redacted>
Signed-off-by: Karl Palsson <redacted>

lang/penlight: Update to 1.5.4

Major release from old 1.3.2.  See
https://github.com/stevedonovan/Penlight/blob/master/CHANGES.md

Changes, fixes and features.

Signed-off-by: Karl Palsson <redacted>

libcares: c-ares bump to 1.13.0

Signed-off-by: Lucian Cristian <redacted>

mwan3: fix bugs introduced in 815e83d4

Fixes the following bugs introduced in commit 815e83d4:
 - hotplug: invalid parameter order when initial interface state is "online",
   mwan3track expects initial state to be the third argument
 - hotplug: missing source ip address when initial interface state is "offline"
 - mwan3track: source ip address should be the fourth argument

Signed-off-by: Marcin Jurkowski <redacted>

node: fix path patch

Signed-off-by: Adrian Panella <redacted>

node: bump version and add maintainer

Signed-off-by: Adrian Panella <redacted>

node: bump version and tweak config

Bump version to 6.11.0
Add ICU dependency when using i18n
Tweak fpu configs

Signed-off-by: Adrian Panella <redacted>

memcached: bump to version 1.5.0

Signed-off-by: Thomas Heil <redacted>

pcre: upgrade to version 8.41
 - fixes security issues

Signed-off-by: Thomas Heil <redacted>

apr: bump to version 1.6.2

Signed-off-by: Thomas Heil <redacted>

apr-util: bump to 1.6.0

Signed-off-by: Thomas Heil <redacted>

apache: update to 2.4.47
 - fixes security issues
  CVE-2017-7679, CVE-2017-7668, CVE-2017-7659, CVE-2017-3169
  CVE-2017-3167, CVE-2017-9788, CVE-2017-9789

Signed-off-by: Thomas Heil <redacted>

haproxy: update to 1.7.8 and pending patches
 - fixes reload issue with hanging process

Signed-off-by: Thomas Heil <redacted>

nginx: update lua-nginx to cdd2ae921f67bf396c743406493127be496e57ce
 - fixes lua compilation issue

Signed-off-by: Thomas Heil <redacted>

ddns-scripts: update PKG_RELEASE in Makefile

As requested, bumping the PKG_RELEASE

Signed-off-by: Phil John <redacted>

Merge pull request #4706 from donvipre/nginx_1.12.1

nginx: update to 1.12.1

Merge pull request #4719 from TDT-GmbH/mwan3-add-mmx-config

net/mwan3: add mmx config option over uci

mosquitto: properly use localhost instead of ipv4

On some environments, connecting to localhost was resolving to ::1,
which didn't match the bind to the explicit 127.0.0.1.

Signed-off-by: Karl Palsson <redacted>

mosquitto: support more config options in UCI

Added many more UCI config options, particularly for bridge connections

The recently introduced username/password options for bridges are kept,
even though they have been deprecated upstream for a while.  In keeping
with this, while support is kept in UCI, the generated mosquitto.conf
file will always generate the "modern" remote_username/remote_password
options preferred by mosquitto instead.

Likewise for bridge clientid and remote_clientid options.

Signed-off-by: Karl Palsson <redacted>

net/mwan3: update version

Signed-off-by: Florian Eckert <redacted>

net/mwan3: make mwan3 mask configurable over uci

Add new global config option mmx_mask.

Signed-off-by: Florian Eckert <redacted>

Merge pull request #4714 from neheb/master

ssh: Add umdns entry to the init script.

Merge pull request #4709 from kdarbyshirebryant/nlbwmontweak

nlbwmon: preserve protocols mapping across sysupgrade

ssh: Add umdns entry to the init script.

This is usefull for hosts to discover the ssh server, especially
on macOS.

Signed-off-by: Rosen Penev <redacted>

pulseaudio: don't link against libspeexdsp

Signed-off-by: Peter Wagner <redacted>

ntpd: move ntpq to ntp-utils

Signed-off-by: Peter Wagner <redacted>

acme: Make sure postrm script doesn't fail

Signed-off-by: Toke Høiland-Jørgensen <redacted>

Merge pull request #4715 from aparcar/update_packages

rpcd-mod-attendedsysupgrade: uci update_packages

rpcd-mod-attendedsysupgrade: uci update_packages

add uci option to set "update_packages". this options will lead the
luci-app-attendedsysupgrade to tell the update server to check for
package updates as well (not only release upgrades)

Signed-off-by: Paul Spooren <redacted>

build,travis: prevent travis 10m logs timeout

Signed-off-by: Etienne Champetier <redacted>

gnurl: update to version 7.55.0

Signed-off-by: Daniel Golle <redacted>

ddns-scripts: add support for dynu.com IPv6 update

Dynu.com already support IPV6 updates using the parameter myipv6, adding to services_ipv6 to enable support in OpenWRT/LEDE

Signed-off-by: Phil John <redacted>

Merge pull request #4711 from aparcar/uci

rpcd-mod-attendedsysupgrade: simplify uci options

rpcd-mod-attendedsysupgrade: simplify uci options

use named uci options

Signed-off-by: Paul Spooren <redacted>

python-gnupg: switch to python-gnupg 0.4.1

Aparently there are two python gnupg wrappers around
https://pypi.python.org/pypi/python-gnupg/
and
https://pypi.python.org/pypi/gnupg/

We used to package the latter, now we switched to the prior.

Signed-off-by: Daniel Golle <redacted>

postgresql: update to version 9.6.4

Signed-off-by: Daniel Golle <redacted>

nlbwmon: preserve protocols mapping across sysupgrade

Define package config files to preserve
/usr/share/nlbwmon/protocols across sysupgrade

Signed-off-by: Kevin Darbyshire-Bryant <redacted>

build,travis: print build logs of the modified package only

Signed-off-by: Etienne Champetier <redacted>

build,travis: reduce verbosity so Travis don't kill the job

Signed-off-by: Etienne Champetier <redacted>

build,travis: git rev-list can also error and return nothing

"fatal: Invalid revision range XXX...YYY"

Signed-off-by: Etienne Champetier <redacted>

zabbix: update to 3.2.7

https://www.zabbix.com/rn3.2.7

Signed-off-by: Etienne Champetier <redacted>

build,travis: test build PRs (but don't fail for now)

Rework exec_status to use "tee" to continuously output logs
(so we don't trigger travis timeouts)

Only launch the compile test if everything else is ok
(spare Travis builders a bit)

Signed-off-by: Etienne Champetier <redacted>

glib2: update to 2.53.5

Signed-off-by: Peter Wagner <redacted>

openwisp-config: polarssl has been removed

Signed-off-by: Philip Prindeville <redacted>

nginx: update to 1.12.1
Fixes: CVE-2017-7529
remove PKG_MD5SUM as it is deprecated

Signed-off-by: Uwe Arnold <redacted>

Merge pull request #4704 from commodo/python-pyopenssl-update

python-pyopenssl: bump to 17.2.0 ; add python3 variant ; add myself co-maintainer

python-pyopenssl: bump to 17.2.0 ; add python3 variant ; add myself co-maintainer

Signed-off-by: Alexandru Ardelean <redacted>

shadowsocks-libev: setting mode with default value tcp_only

This is the default value taken by ss-server and ss-redir.  After this
change ss_rules section can still use those ss-redir instances who do
not have mode explicitly specified.

Signed-off-by: Yousong Zhou <redacted>

Revert "btrfs-progs: update to 4.12"

This reverts commit 8592566b7621601cd8960441857db516f5f32a23.

Signed-off-by: Etienne Champetier <redacted>

travis,build: accept "Revert" commits

Signed-off-by: Etienne Champetier <redacted>

Merge pull request #4514 from alive4ever/mksh-R55

mksh: bump to R55 and use PKG_HASH

Merge pull request #4695 from dibdot/patch-1

dnscrypt-proxy: change start priority

dnscrypt-proxy: change start priority

* adapt start priority to the new trigger based setup

Signed-off-by: Dirk Brenken <redacted>

Merge pull request #4698 from D-Albers/btrfs-progs-4.12

btrfs-progs: update to 4.12

btrfs-progs: update to 4.12

update to 4.12
remove PKG_MD5SUM

Signed-off-by: Daniel Albers <redacted>

Merge pull request #4696 from dibdot/travelmate

travelmate: update to 0.9.2

travelmate: update to 0.9.2

* backend: fix typo in log message
* frontend: add/modify input datatypes in 'extra' section
* frontend: add support to edit/change wpa enterprise key phrases
* frontend: various small fixes

Signed-off-by: Dirk Brenken <redacted>

Merge pull request #4689 from aparcar/keep_settings

rpcd-mod-attendedsysupgrade: add keep_settings opt

rpcd-mod-attendedsysupgrade: add keep_settings opt

as mentioned [here][1] some firmwares require to reset all settings.
this commit add a param "keep_settings" which changes the sysupgrade
parameter "-c" to "-n" to flush all configs

[1]: https://github.com/aparcar/gsoc17-attended-sysupgrade/issues/34

Signed-off-by: Paul Spooren <redacted>

Merge pull request #4693 from commodo/python-cryptography-update

python-cryptography: bump to version 2.0.3 ; add python-asn1crypto (dep required for python-cryptography)

python-cryptography: bump to version 2.0.3

The dependency has changed from needing `pyasn1`
to needing `asn1crypto`.
Oh well...

Signed-off-by: Alexandru Ardelean <redacted>

python-asn1crypto: add new package (needed for python-cryptography)

Unfortunately python-cryptography (after version 2.0.<something>)
decided to replace `pyasn1` with `asn1crypto`.

Unfortunately `pyasn1` is needed for another package,
so it can't be dropped just yet.
Not sure if dropping it would bother people.

Signed-off-by: Alexandru Ardelean <redacted>

Merge pull request #4692 from commodo/pyasn1-updates

pyasn1,pyasn1_modules: update packages & add myself as 2nd maintainer to pyasn1_modules

pyasn1-modules: bump to version 0.0.11 ; add python3 variant ; add myself as maintainer

Signed-off-by: Alexandru Ardelean <redacted>

Merge pull request #4690 from val-kulkov/subversion-package

subversion: update to 1.9.7

python-pyasn1: bump to version 0.3.2

Signed-off-by: Alexandru Ardelean <redacted>

git: update to 2.14.1

Fixes: CVE-2017-1000117
Signed-off-by: Peter Wagner <redacted>

ffmpeg: enable lto build for arm and x86_64

This toggles on Link-Time Optimization for arm and x86-64.

Compile tested on arm/bcm47xx, arm/mvebu, arm/imx6 and x86-64/generic

(Also compile tested on mips/ar71xx where it failed so this change is currently for specific arches.)

Size savings for libffmpeg were 2-3% when measured with libffmpeg-full and libffmpeg-mini.

Signed-off-by: Ian Leonard <redacted>

ffmpeg: let ffmpeg choose necessary parsers for audio-dec and custom

This change allows ffmpeg's configure script to determine the necessary parsers based on
selected decoders & encoders. For libffmpeg-audio-dec, this changes from our selecting:

aac, ac3, flac, mpegaudio, opus and aac_latm

to ffmpeg's configure script selecting:

aac_latm, ac3, flac, mpegaudio

for minor space savings and a simpler Makefile to manage on our end.

In libffmpeg-custom, don't select any parsers when choosing decoders/encoders. I'm undecided
on removing the parser selection in its entirety here.

Signed-off-by: Ian Leonard <redacted>

ffmpeg: update to 3.2.7

Removes the x86 optimization disables from the SOFT_FLOAT portion. There are no i386 profiles that do
not use hard float, so these options accomplish nothing.

Target-os=linux rules out dxva2 and vda, so disable statements are unnecessary.

For x86-64 users of libffmpeg-full, optimize around performance instead of size.

Remove patented flag requirement from mp2 and mp3 audio files in libffmpeg-custom per expiration.

Tidies up some of the configure steps where only one option is being changed or cosmetic consistency.

Signed-off-by: Ian Leonard <redacted>

subversion: update to 1.9.7

This is a straightforward update to the latest version that
fixes a security issue per CVE-2017-9800:
http://subversion.apache.org/security/CVE-2017-9800-advisory.txt

Signed-off-by: Val Kulkov <redacted>

Merge pull request #4688 from TDT-GmbH/mwan3-features

net/mwan3: add new feature and bug fixes

Merge pull request #4687 from kdarbyshirebryant/bumpwireguard

wireguard: bump to release 0.0.20170810