ruby: bump to 2.4.3

This release includes some bug fixes and a security fix.

CVE-2017-17405: Command injection vulnerability in Net::FTP

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

usbip: fix typo (closes #4994 #5312)

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

Merge pull request #5305 from hbl0307106015/ndpi

libndpi: bump to version 2.2

Merge pull request #5309 from sartura/sysrepo_release_0.7.2

Sysrepo release 0.7.2

Merge pull request #5307 from TimelessNL/add_rtl_433

rtl_433: add package

Merge pull request #5299 from thess/shairport-sync

shairport-sync: Update to 3.1.6

usbip: fix usb.ids download (closes #4994)

Used the same solution as in utils/usbutils/Makefile

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

watchcat: bump release due to 8e1e4d7d2d2bfe88c1b14a8e844222278e12fccc

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>

netopeer2: bump to latest version

This patch add's a new cmakefile which builds other cmakefiles and
simplifies the Makefile, also it renames the yang files so
sysrepoctl does not create duplicates.

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

sysrepo: bump to latest version

This patche renames the yang files so sysrepoctl does not create
duplicates.

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

libnetconf2: bump to latest version

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

libyang: bump to latest version

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>

rtl_433: add package
This will add the rtl_433 package. The project can be found: https://github.com/merbanan/rtl_433
It is based on a recent trunk since the latest release is negligible.

Signed-off-by: Jasper Scholte <NightNL@outlook.com>

gnunet: update to git snapshot 2017-12-19

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libndpi: bump to version 2.2

Signed-off-by: BangLang Huang <banglang.huang@foxmail.com>

xl2tpd: README.md: add docs on uci options

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

shairport-sync: Update to 3.1.6

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #5286 from pprindeville/lighttd-update-1.4.48

lighttpd: update to 1.4.48

Merge pull request #5298 from wvdakker/master

Fixed double/missing entry in path.

Shorewall6: Fix double/missing entry in path.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: Fix double/missing entry in path.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Merge pull request #5295 from wvdakker/reorder

Shorewall(6)-lite: Reorder install section

Merge pull request #5296 from wvdakker/set-path

Shorewall(6): Set path

Merge pull request #5294 from damianorenfer/master

libs/libsodium: update to 1.0.16

Shorewall6-lite: Reorder package/install section.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-lite: Reorder package/install section.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

xl2tpd: remove demand support from netifd l2tp protocol

This pppd feature does not make sense in L2TP case because the
tunnel is already connected when xl2tpd launch pppd process. If
a dial-on-demand feature is to be implemented, trigger interface
would have to be provided by xl2tpd, not pppd.

Signed-off-by: Alin Nastac <alin.nastac@gmail.com>

Shorewall6: Change path to prevent busybox/ip detection before ip-tiny/full.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: Change path to prevent busybox/ip detection before ip-tiny/full.

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

libs/libsodium: update to 1.0.16

Signed-off-by: Damiano Renfer <damiano.renfer@gmail.com>

Merge pull request #5291 from pprindeville/acpica-unix-update-20171215

acpica-unix: update to 20171215

Merge pull request #5290 from brianjmurrell/set-PATH

shorewall-lite: set the $PATH variable

acpica-unix: update to 20171215

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

shorewall6-lite: set the PATH variable

So that it matches LEDE's default PATH value.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

shorewall-lite: set the PATH variable

So that it matches LEDE's default PATH value.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>

Merge pull request #5236 from lynxis/rb_perl

perl: remove build timestamp

Merge pull request #5271 from jow-/introduce-setserial

setserial: introduce package

lighttpd: update to 1.4.48

All of the bugs for which we had patches have been fixed upstream
in 1.4.46, so the patches can be dropped.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Revert "python,python3: add zlib/host to HOST_BUILD_DEPENDS"

This reverts commit c764f77dc1a62ce667b38520496ddb9bfaececab.

The commit caused warnings to be displayed at make defconfig etc.
  WARNING: Makefile 'package/feeds/packages/python/python/Makefile'
  has a host build dependency on 'zlib/host' but
  'package/libs/zlib/Makefile' does not implement a 'host' build type

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #5274 from commodo/python-host-zlib

python,python3: add zlib/host to HOST_BUILD_DEPENDS

Merge pull request #5118 from jow-/cgi-io-sha256

cgi-io: support SHA256 checksums for file uploads

Merge pull request #5264 from TDT-AG/pr/20171211-net-stunnel-add-uci-enabled-param

net/stunnel: add enabled config option

Merge pull request #5283 from dibdot/travelmate

travelmate: release 1.0.0

Merge pull request #5237 from lynxis/rb_php7

php7: remove build timestamp

Merge pull request #5280 from bk138/ola-0.10.5-try2

ola: update to 0.10.5, drop obsolete patches

travelmate: release 1.0.0

* limit sta interface selection/handling
  to defined travelmate interface (trm_iface) only
* check eap capabilities and ignore enterprise uplinks
  as long as eap support is not available
* documentation update
* cosmetics
* LuCI: various cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>

ola: update to 0.10.5, drop obsolete patches

This also add a patch fixing builds with newer protobuf versions,
https://github.com/OpenLightingProject/ola/pull/1336.

Signed-off-by: Christian Beier <dontmind@freeshell.org>

Merge pull request #5279 from mstorchak/lsof

lsof: reproducible build

Merge pull request #5244 from yousong/p11-err.h

openconnect: fix compilation against libp11 >= 0.4.7

lsof: reproducible build

- clear build host and user info
- clear compiler flags
- set date to SOURCE_DATE_EPOCH

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

net/stunnel: add enabled config option

Add an enabled option for the service section, so you could keep your
configuration in place without apply this section on startup or service reload.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

openconnect: fix compilation against libp11 0.4.7

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Merge pull request #5179 from neheb/cifs

cifs-utils: Update to 6.7

php7: remove build timestamp

Build timestamp prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

perl: remove build timestamp

Build timestamp prevents reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

Merge pull request #5276 from thess/fdk-aac

fdk-aac: Update to latest source revision. Add myself as maintainer

Merge pull request #5261 from nxhack/bump_to_60_2

icu: update to 60.2

icu: update to 60.2

Maintainer: me
Compile tested: ar71xx, LEDE trunk r5488-893a1ed
Run tested: NONE

Description:
upstream update to 60.2
note: fix g++-4 issue

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

fdk-aac: Update to latest source revision. Add myself as maintainer

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #5275 from thess/unrar-update

unrar: Update to latest version (5.5.8)

unrar: Update to latest version (5.5.8)

11-Aug-2017 version fixes outstanding CVE's.
CVE-2012-6706, CVE-2017-12942, CVE-2017-12941, CVE-2017-12940 and CVE-2017-12938

Signed-off-by: Ted Hess <thess@kitschensync.net>

python,python3: add zlib/host to HOST_BUILD_DEPENDS

This should fix the zlibmodule build on the host side.

Usually, if zlib is not found, Python/Python3 builds fine
without it, but there are some cases where the Python/Python3
interpreter on the host-side requires zlib to run.

At the moment, zlib does not have a host-build.
This should be available when this PR gets merged:
https://github.com/lede-project/source/pull/1329
[ or a similar one that contains host-build support for zlib ].

In the meantime, this change can go into Python/Python3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

mjpg-streamer: Remove build date-time from image

Remove un-needed uvcvideo.h (use system include)

Signed-off-by: Ted Hess <thess@kitschensync.net>

Merge pull request #5190 from jow-/iodine-fix-musl-endianess

iodine: properly detect endianess when building against musl libc

iodine: workaround incomplete musl nameser.h header

The arpa/nameser.h header of musl libc indirectly depends on the endian.h
header but fails to explicitely include it to properly define
`__BYTE_ORDER` and `__BIG_ENDIAN` prior to declaring the DNS `HEADER`
structure.

When both the appropriate `__BYTE_ORDER` and `__BIG_ENDIAN` defines are
unset, the `#if __BYTE_ORDER == __BIG_ENDIAN` condition in `nameser.h`
evaluates to true, causing it to declare a bad (big endian) DNS packet
header structure on little endian systems.

Work around this musl bug by forcibly passing `-include endian.h` through
the `osflags` file.

An upstream fix for musl libc has been submitted with
http://www.openwall.com/lists/musl/2017/12/04/3

This should solve iodine packet corruption on little endian musl systems
reported at
http://lists.infradead.org/pipermail/lede-dev/2017-November/010085.html

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

setserial: introduce package

This packages setserial, the standard Linux program for setting serial
device attributes such as baud rate, flow control etc.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

nlbwmon: update to current HEAD

Update to latest Git HEAD in order to solve a number of issues.

 - Improves MAC address lookup reliability
 - Properly counts DNAT-ed connections (e.g. for port forwards)
 - Fixes stack corruption when parsing netlink records
 - Fixes deletion of gzipped databases

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

Merge pull request #5267 from diizzyy/patch-112

utils/gawk: Fix package

Merge pull request #5218 from lynxis/rb_lua-rs232

lua-rs232: remove build timestamp

Merge pull request #5207 from lynxis/rb_libdbd

libdbi-drivers: remove build timestamp

lxc: add lxc-unprivileged helper package for unprivileged containers

LXC requires newuidmap and newguidmap with SUID to run unprivileged
containers. This package should help users make sure they are available.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>

utils/gawk: Fix package

Remove igawk references as it's obsolete and not provided anymore.
Reported here: https://github.com/openwrt/packages/issues/5110
Fix package URL

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Merge pull request #5213 from lynxis/rb_openplc

open-plc-utils: remove build timestamp

Merge pull request #5263 from yangfl/master

i2pd: Update to 2.17.0

Merge pull request #5262 from neheb/patch-1

gnutls: Use HTTP instead of FTP

net/mosquitto: reproducible build patches

Remove build timestamp.  Using currently proposed upstream patch.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Signed-off-by: Karl Palsson <karlp@etactica.com>

net/mosquitto: depend on virtual package instead of select

Can't use DEPENDS:= +libname when libname is now a virtual package.
Switch to plain DEPENDS:= libname.

Fixes Github issue 4751

Signed-off-by: Karl Palsson <karlp@etactica.com>

libwebsockets: remove build hostname

Using the build hostname breaks reproducible builds.
The patch is already merged upstream

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

libwebsockets: bump to version 2.4.1

No changelog entry upstream unfortunately.

Signed-off-by: Karl Palsson <karlp@etactica.com>

i2pd: Update to 2.17.0

Signed-off-by: David Yang <mmyangfl@gmail.com>

gnutls: Use HTTPS instead of FTP

While recently building asterisk, the make system stalled on gnutls. On my install of Ubuntu 16.04 on WSL, it seems curl can't download from ftp and doesn't even time out properly. Easiest solution is to switch the gnutls Makefile to use HTTPS instead.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #5259 from valdi74/update_python-curl

python-curl: update to 7.43.0.1

Merge pull request #5197 from commodo/python-bluez-deps

 python,python3: define config option for bluetooth support

python-curl: update to 7.43.0.1

Signed-off-by: Waldemar Konik <informatyk74@interia.pl>

python,python3: define config option for bluetooth support

It was reported via
https://github.com/openwrt/packages/pull/5122#issuecomment-347395472
that if bluez-libs is selected as an installable package,
then the error below will show up:
```
 * satisfy_dependencies_for: Cannot satisfy the following dependencies for python-light:
 * bluez-libs *
 * opkg_install_cmd: Cannot install package python-light.
```

This looks like a limitation in the design of package deps,
and maybe a misuse of conditional deps (i.e. PACKAGE_bluez-libs:bluez-libs).

So, to fix this, an idea we're adding an extra symbol
that enfoces installation of bluez-libs if selected.

We also need to add a way to disable bluetooth build
if PYTHON(3)_BLUETOOTH_SUPPORT is de-selected.
Otherwise, bluetooth is installed and the socket
module is broken due to linker errors.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-pip-conf: split package away from python package

This should improve build time if you only want to
build Python3 (and not Python).

Because python-pip-conf was part of the python package,
the whole python package (host + target) would get built if Python3
would need to get built.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #5116 from TDT-AG/pr/20171113-stunnel-add-uci-support

net/stunnel: add uci config support

net/stunnel: add uci config support

Add uci config support.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Merge pull request #5256 from lynxis/rb_openldap

openldap: remove build host/user/timestamp

openldap: remove build host/user/timestamp

Such information from the build system break reproducible builds.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

open-plc-utils: remove build timestamp

Build timestamps prevent reproducible builds [0].

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

Merge pull request #5155 from neheb/patch-6

ethtool: Update to 4.13

Merge pull request #5253 from mstorchak/acl

acl: update to 20170420

Merge pull request #5248 from diizzyy/patch-111

net/stunnel: Update to 5.44

Merge pull request #5252 from mstorchak/attr

attr: update to 20170915

Merge pull request #5245 from mstorchak/rsync

rsync: fix CVE-2017-15994 and CVE-2017-16548

acl: update to 20170420

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

attr: update to 20170915

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

Merge pull request #5250 from mstorchak/tgt

tgt: update to 1.0.72

Merge pull request #5251 from mstorchak/smartmontools

smartmontools: update to 6.6