net/mwan3: enhance ipset status generation

This change should optimize and speed up the status output generation.

Signed-off-by: Florian Eckert <redacted>

net/mwan3: reduce duplicate code

The generation for reporting the policies uses the same code add a
common function to reduce duplication.

Signed-off-by: Florian Eckert <redacted>

net/mwan3: cleanup/prettify 80 characters code boundary

Prettify and cleanup source

Signed-off-by: Florian Eckert <redacted>

sbc: Bump to 1.4

Minor bugfix
Remove Dirk as maintainer, hasn't been active in years

Signed-off-by: Daniel Engberg <redacted>

Merge pull request #7238 from neheb/patch-36

rcssmin: Switch to pythonhosted for consistency

Merge pull request #7237 from neheb/patch-35

python-urllib3: Update to 1.24

Merge pull request #7236 from neheb/patch-26

django-restframework: Update to 3.9.0

keyutils: Update to 1.5.11

Added Kerberos dependency as it's required now.

Signed-off-by: Rosen Penev <redacted>

liboping: Update to 1.10.0

Updated URLs.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <redacted>

clamav: Update to 0.100.2

Fixes CVE-2018-15378. Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <redacted>

hdparm: Update to 9.57

Slightly adjusted Makefile for consistency between projects.

Signed-off-by: Rosen Penev <redacted>

rcssmin: Switch to pythonhosted for consistency

Easier to bump the version as well.

Signed-off-by: Rosen Penev <redacted>

python-urllib3: Update to 1.24

Switched URL to pythonhosted for consistency between packages.

Small reorganization.

Signed-off-by: Rosen Penev <redacted>

django-restframework: Update to 3.9.0

Signed-off-by: Rosen Penev <redacted>

Merge pull request #7217 from neheb/pico

picocom: Backport upstream fix for x86

Merge pull request #7220 from neheb/pycry

python-crypto: Fix faulty patch

Merge pull request #7211 from zhaojh329/rtty

rtty: update to 6.3.1

ruby: bump to 2.5.3

Fix only release, including:
* CVE-2018-16396: Tainted flags are not propagated in Array#pack
  and String#unpack with some directives
* CVE-2018-16395: OpenSSL::X509::Name equality check does not work
  correctly

Signed-off-by: Luiz Angelo Daros de Luca <redacted>

Merge pull request #7205 from NightBlues/tcl_back

lang/tcl: bring back package and update to 8.6.8

libndpi: Update to 2.4

Switched to codeload for simplicity and easier package bumping.

Added PKG_BUILD_PARALLEL for faster compilation.

Reordanized Makefile for consistency between packages.

Signed-off-by: Rosen Penev <redacted>

libarchive: Update to 3.3.3

Added HTTPS.

Signed-off-by: Rosen Penev <redacted>

Merge pull request #7219 from neheb/patch-18

libglog: Remove libunwind dependency

gnunet: update source

Signed-off-by: Daniel Golle <redacted>

alsa-lib: update to 1.1.7

Signed-off-by: Peter Wagner <redacted>

fish: Add (lib)pcre2 dependency

Use the shared version of libpcre2 instead of bundled.

Fixes the following error:
Package fish is missing dependencies for the following libraries:
libpcre2-32.so.0

Signed-off-by: Daniel Engberg <redacted>

Merge pull request #7225 from neheb/patch-26

django-constance: Update to 2.3.1

Merge pull request #7224 from neheb/vala

vala: Update to 0.34.18

Merge pull request #7222 from neheb/patch-25

python-mysql: Update to 1.3.13

Merge pull request #7221 from neheb/patch-11

openpyxl: Update to 2.5.9

Merge pull request #7223 from neheb/sudo

sudo: Update to 1.8.25p1

python-crypto: Fix faulty patch

Buildbots are currently breaking because of this.

Signed-off-by: Rosen Penev <redacted>

Merge pull request #7214 from Wedmer/zoneinfo-2018f

zoneinfo: Updated to the latest release.

django-constance: Update to 2.3.1

Signed-off-by: Rosen Penev <redacted>

vala: Update to 0.34.18

Signed-off-by: Rosen Penev <redacted>

sudo: Update to 1.8.25p1

Signed-off-by: Rosen Penev <redacted>

python-mysql: Update to 1.3.13

Signed-off-by: Rosen Penev <redacted>

openpyxl: Update to 2.5.9

Signed-off-by: Rosen Penev <redacted>

syslog-ng: stop service when uninstalling/updating

This avoids the possibility of the service getting reloaded and
a previously running instance trying to re-dynamically link to
more modern plugins.

Signed-off-by: Philip Prindeville <redacted>

libglog: Remove libunwind dependency

Switched to codeload and updated Makefile for consistency between projects

Signed-off-by: Rosen Penev <redacted>

Merge pull request #7204 from dedeckeh/pr-perl-glibc

perl: fix compilation with glibc 2.27

 openssh: fixes issues with some openssl options

This adds a couple of patches when setting some openssl options:
* ECDSA code in openssh-compat.h and libressl-api-compat.c needs to be
  be guarded by OPENSSL_HAS_ECC; otherwise, it will not build with
  openssl compiled without ECC support.

* Fix openssl version number in openbsd-compat/openssl-compat.c which
  failed to compile --with-ssl-engine; this option is used when
  CONFIG_OPENSSL_ENGINE_CRYPTO=y

Signed-off-by: Eneas U de Queiroz <redacted>
Signed-off-by: Peter Wagner <redacted>

libopus: Update to 1.3.0

Added PKG_BUILD_PARALLEL for faster compilation.

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <redacted>

picocom: Backport upstream fix for x86

Replaced the maintainer with myself due to inactiviy.

Signed-off-by: Rosen Penev <redacted>

unixodbc: Update to 2.3.7

Switched to HTTP as FTP can be problematic. uscan for example has issues
figuring out the latest version.

Added PKG_CPE_ID for proper CVE tracking.

Reorganized Makefile for consistency with other projects.

Add PKG_FIXUP:=autoreconf, needed to avoid host lib leakage on hosts
with unixodbc installed.

Signed-off-by: Rosen Penev <redacted>
[add PKG_FIXUP:=autoreconf - thanks jow]
Signed-off-by: Stijn Tintel <redacted>

Revert "unixodbc: Update to 2.3.7"

This reverts commit 6d6c15e1e9fd5a381f3cce0d68c3b781a82088ce.

The package no longer cross-compiles when building for the x86/64 target
on an x86/64, resulting in the following error:

Package unixodbc is missing dependencies for the following libraries:
libc.so.6
libpthread.so.0

Signed-off-by: Stijn Tintel <redacted>

strongswan: bump to 5.7.1

Signed-off-by: Stijn Tintel <redacted>

openssh: update to 7.9p1

Signed-off-by: Peter Wagner <redacted>

libssh: mark as BROKEN due to CVE-2018-10933

The only known user of this library is currently unable to get their
application to work with with the fixed 0.7.6 release of this library.

To prevent accidental use by unknown parties of a flawed library, mark
it as BROKEN.

Signed-off-by: Kevin Darbyshire-Bryant <redacted>

mdnsresponder: remove Steven Barth as maintainer

https://github.com/openwrt/packages/pull/7215#issuecomment-431281385

Signed-off-by: Jacob Siverskog <redacted>

lang/tcl: bring back package, update to 8.6.8, add host compile

Signed-off-by: Vadim Radovel <redacted>

Merge pull request #7212 from nxhack/bump_63_1

icu: update to 63.1

mdnsresponder: bump to 878.70.2 and refresh patches

Signed-off-by: Jacob Siverskog <redacted>

zoneinfo: Updated to the latest release.

Signed-off-by: Vladimir Ulrich <redacted>

net/mosquitto: add CPE_ID

Signed-off-by: Karl Palsson <redacted>

libs/c-ares: finaly cpe id update.

Use the correct base 2.2 CPE id from
https://nvd.nist.gov/products/cpe/search instead of the old id.

Signed-off-by: Karl Palsson <redacted>

libs/c-ares: fix CPE id

Incorrectly copied from source document.

Signed-off-by: Karl Palsson <redacted>

rtty: update to 6.3.1

Signed-off-by: Jianhui Zhao <redacted>

icu: update to 63.1

ICU 63 updates to CLDR 34 locale data with many additions and corrections,
and some new languages. ICU adds API for number and currency range formatting,
and API for additional Unicode properties and for constructing custom properties.
CLDR and ICU include data for testing readiness for the upcoming Japanese calendar era.

Signed-off-by: Hirokazu MORIKAWA <redacted>

patch: Add missing CVE-2018-6951 patch

The last commit added PKG_CPE_ID and now uscan detects a CVE that I missed

Reordered patches by date

Signed-off-by: Rosen Penev <redacted>
[tweaked commit message]
Signed-off-by: Kevin Darbyshire-Bryant <redacted>

net/safe-search: new package

This package forces the use of Google and Bing safe search by default.
It does this by adding hosts files for dnsmasq to use. These hosts replace the
normal IP addresses for Google and Bing with addresses that force safe
search to be turned on all the time.

Google and Bing Safe Search are suitable for most businesses, schools, and
families who wish to block adult content. This package also offers
YouTube's restricted and 'restricted moderate' via a configuration
option. The reason that this is not enabled is that it is probably more
suitable for children rather than a wide audience.

This package is designed so that other services that offer safe search can be
added easily in the future.

For more information about safe search please visit these URLs:
- https://support.google.com/websearch/answer/186669
- https://help.bing.microsoft.com/#apex/18/en-US/10003/0
- https://support.google.com/a/answer/6212415

Signed-off-by: Gregory L. Dietsche <redacted>

lib/c-ares: add PKG_CPE_ID

bump package, but no functional changes

Signed-off-by: Karl Palsson <redacted>

net-snmp: update to 5.8

Disable PCRE process searching to avoid linking against libprce, which
would cause the build to fail due to a missing dependency. With the
--without-pcre switch, build fails due to an undefined reference, so do
it via CONFIGURE_VARS instead.

Signed-off-by: Rosen Penev <redacted>
[disable PCRE process searching]
Signed-off-by: Stijn Tintel <redacted>

haproxy: Update all patches for HAProxy v1.8.14
- Add new patches (see https://www.haproxy.org/bugs/bugs-1.8.14.html)
- Raise PKG_RELEASE to 2

Signed-off-by: Christian Lachner <redacted>

Merge pull request #7206 from teslamint/chilli_ipv6

coova-chilli: honor CONFIG_IPv6 option

Merge pull request #6886 from neheb/pycrypto

python-crypto: Fix two CVEs

Merge pull request #7199 from Andy2244/samba4-fix_hostname

samba4: fix hostname if not defined via Dnsmasq

openobex: Update to 1.7.2

Add myself as maintainer.

Cosmetic Makefile fixes for consistency between projects.

Signed-off-by: Rosen Penev <redacted>

coova-chilli: honor CONFIG_IPv6 option

This fixes #7120.

Signed-off-by: Jaehoon You <redacted>

php7: update to 7.2.11

Signed-off-by: Michael Heimpold <redacted>

perl: fix compilation with glibc 2.27

Remove dependency on glibc in 010-musl-compat patch as glibc does not
support _LIB_VERSION anymore in 2.27; see
https://sourceware.org/ml/libc-announce/2018/msg00000.html

Signed-off-by: Hans Dedecker <redacted>

Merge pull request #6756 from karlp/lsqlite-095-master

lua-lsqlite3: update to 0.9.5

Merge pull request #6762 from neheb/lsof

lsof: Fix dead URL + cosmetic fixes

Merge pull request #5876 from fantom-x/nlbwmon_nice

net/nlbwmon: run with lower priority

Merge pull request #6716 from neheb/patch-26

file: Update to 5.34

exfat-nofuse: bump to git HEAD

Signed-off-by: Rosy Song <redacted>

Merge pull request #7182 from neheb/dark

darkstat: Remove libbsd dependency

darkstat: Remove libbsd dependency

darkstat includes its own strlcat and strlcpy, making the dependency
somewhat pointless.

Fixes compilation ever since glibc dependency on libbsd was removed.

Also removed std=gnu99 as it's not needed with GCC7.

Signed-off-by: Rosen Penev <redacted>

Merge pull request #6970 from cotequeiroz/squid_4.2

squid: update to version 4.3

samba4: fix hostname if not defined via Dnsmasq

* use kernel fs to get the hostname, drop domainname

Signed-off-by: Andy Walsh <redacted>

libsearpc: Update to 3.1.0

Switch to codeload for simplicity. Rearranged Makefile a bit for consistency between Makefiles.

Removed version dependency for seafile-server to avoid breaking builds.

Signed-off-by: Rosen Penev <redacted>

Merge pull request #7122 from jonathanunderwood/stubby_uci

stubby: enable configuration through uci system

stubby: add uci support to init file

This commit brings UCI support to the stubby package.

    o All options are documented in the README.md file.
    o The README.md file has been re-written to include a short usage
      manual.
    o The default configuration now includes more Cloudflare addresses.
    o The stubby service is (re)started using procd triggers from a
      specified interface with a configurable time delay.
    o Round robin use of upstream resolvers is now activated by
      default.
    o Client privacy is now activated by default.
    o Options are added for specifying the log level of the daemon and
      command line options passed to the stubby command.

Signed-off-by: Jonathan G. Underwood <redacted>

Merge pull request #7142 from neheb/patch-9

rsyslog: Update to 8.38

Merge pull request #6707 from guidosarducci/master-fixup-stubby

stubby: some fixes, cleanup, and improvements

Merge pull request #7065 from neheb/patch-40

simplejson: Update to 3.16

Merge pull request #7172 from neheb/patch

patch: Fix CVE-2018-6952 and CVE-2018-1000156

grilo-plugins: Update to 0.3.7

Version .8 no longer uses Autotools and will thus take a while to be
supported.

Silenced the build from warnings to help fix a bunch of -Wformat ones that
currently break the buildbots.

Explicitly disabled all plugins that are currently unused to save on build
time.

Signed-off-by: Rosen Penev <redacted>

libsoup: Update to 2.65.1

Added PKG_CPE_ID for proper CVE tracking.

Added PKG_BUILD_PARALLEL for faster compilation.

Added --disable-gtk-doc-html to fix parallel compilation.

Cleaned up and reorganized configure flags.

Signed-off-by: Rosen Penev <redacted>

glib2: Install glib binaries

Signed-off-by: Peter Wagner <redacted>

patch: Fix CVE-2018-6952 and CVE-2018-1000156

Patches taken from official git repository.

Added PKG_CPE_ID for proper CVE tracking.

Added PKG_BUILD_PARALLEL for faster compilation.

Also adjusted Makefile to be more similar to other projects.

Signed-off-by: Rosen Penev <redacted>

Merge pull request #6500 from neheb/patch-7

umurmur: Switch to tarball

Merge pull request #7066 from neheb/proc

procps-ng: Update to 3.3.15

Merge pull request #7064 from neheb/patch-39

openpyxl: Update to 2.5.7

Merge pull request #7062 from neheb/patch-37

gunicorn: Update to 19.9.0

Merge pull request #7061 from neheb/patch-36

django: Update to 1.11.15

Merge pull request #7060 from neheb/patch-35

django-constance: Update to 2.3.0

Merge pull request #7059 from neheb/patch-32

django-picklefield: Update to 1.1.0

Merge pull request #7058 from neheb/patch-25

django-postoffice: Update to 3.1.0

Merge pull request #7057 from neheb/patch-18

django-restframework: update to 3.8.2

Merge pull request #7056 from neheb/patch-11

django-statici18n: Update to 1.8.2