acme: simplify flock usage

Signed-off-by: Glen Huang <i@glenhuang.com>

golang: update to version 1.18.8

Fixes following CVEs:
- CVE-2022-32189 (version 1.18.5 [1]]
- CVE-2022-27664 (version 1.18.6 [2])
- CVE-2022-32190 (version 1.18.6 [2])
- CVE-2022-2879 (version 1.18.7 [3])
- CVE-2022-2880 (version 1.18.7 [3])
- CVE-2022-41715 (version 1.18.7 [3])
- CVE-2022-41716 (version 1.18.8 [4])

and refreshed patch

[1] https://groups.google.com/g/golang-announce/c/YqYYG87xB10
[2] https://groups.google.com/g/golang-announce/c/x49AQzIVX-s
[3] https://groups.google.com/g/golang-announce/c/xtuG5faxtaU
[4] https://groups.google.com/g/golang-announce/c/mbHY1UY3BaM

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

ffmpeg: libffmpeg-full package should provide libffmpeg package, too

The previous solution overwrote the provide from ``define
Package/libffmpeg/Default``, but that's not what was wanted.
Thus libffmpeg-full should provide three packages libffmpeg,
libffmpeg-mini and libffmpeg-audio-dec

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #19855 from pprindeville/strongswan-update-5.9.8

strongswan: Update to 5.9.8

strongswan: Update to 5.9.8

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

hdparm: Update to version 9.65

This fixes compilation problems with glibc 2.36.

Full Changelog:

hdparm-9.65:
        - Another --Istdin fix: cannot read log pages when no device specified
hdparm-9.64:
        - fix truncated output buf with --Istdin
hdparm-9.63:
        - new --sanitize-overwrite-passes flag, courtesy Michal Grzedzicki.
        - "Plurals patch" from Martin Guy.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

speex: update to 1.2.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libtalloc: update to 2.3.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libssh: update to 0.10.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libxerces-c: update to 3.2.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19796 from stangri/master-simple-adblock

simple-adblock: update to 1.9.2-4

sudo: bump to verison 1.9.12p1

Fixes: https://github.com/openwrt/packages/issues/19816
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #19846 from neheb/2

tiff: update to 4.4.0

tiff: update to 4.4.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libowfat: Fix compile with glibc 2.36

This fixes the following error message seen when compiling against
glibc 2.36:
                 from scan/scan_httpdate.c:3:
include/sys/cdefs.h:338:65: error: macro "__has_attribute" requires an identifier
  338 | #if __GNUC_PREREQ (3,2) || __glibc_has_attribute (__deprecated__)

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

libarchive: Backport build fix for glibc 2.36

This backports a build fix for libarchive when compiling against
glibc 2.36.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

wsdd2: update config file for ksmbd

Previous commit makes use of ksmbd.conf

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ksmbd-tools: use ksmbd.conf

smb.conf is deprecated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ksmbd-tools: update to 3.4.6

Switch to git tarball as the meson files did not get added to the
official one.

Backport busybox style binaries. Saves on size.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mosh: update to 1.4.0

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

samba4: update to 4.17.2

update samba to 4.17.2

* CVE-2022-3437: There is a limited write heap buffer overflow in the GSSAPI
unwrap_des() and unwrap_des3() routines of Heimdal (included in Samba).
https://www.samba.org/samba/security/CVE-2022-3437.html

* CVE-2022-3592: A malicious client can use a symlink to escape the exported
directory.
https://www.samba.org/samba/security/CVE-2022-3592.html

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>

libuhttpd: update to 3.14.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

irqbalance: update to 1.9.2

Update irqbalance to version 1.9.2.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #19834 from neheb/7

libxslt: update to 1.1.37

libgpg-error: install gpg-error-config again

Upstream deprecated it while not fixing libgcrypt not to use it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libdrm: update to 2.4.114

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libxslt: update to 1.1.37

Upstream URL changed. There's also a cmake build now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libdnet: update to 1.16.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libfido2: update to 1.12.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libshout: update to 2.4.6

Signed-off-by: Rosen Penev <rosenp@gmail.com>

log4cplus: update to 2.0.8

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libaio: update to 0.3.113

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libcap-ng: update to 0.8.3

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libgee: update to 0.20.6

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libgpg-error: update to 1.46

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libvpx: update to 1.12.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19822 from neheb/8

libseccomp: update to 2.5.4

libseccomp: update to 2.5.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libupnpp: update to 0.22.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19707 from stangri/master-https-dns-proxy

https-dns-proxy: rename options

lxc-auto: made init script compatible with image builder

Signed-off-by: Marc Benoit <marcb62185@gmail.com>

syncthing: update to 1.22.1

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

syncthing: add stdiscosrv and strelaysrv

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

dos2unix: add new package

dos2unix - text file format converters

includes:
dos2unix - DOS/Mac to Unix text file format converter (dos2unix/mac2unix)
unix2dos - Unix to DOS/Mac text file format converter (unix2dos/unix2mac)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

sms-tool: SMS Tool for 3G/4G modem

Co-authored-by: Cezary Jackiewicz <cezary@eko.one.pl>
Co-authored-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Andrey Butirsky <butirsky@gmail.com>

zoneinfo: updated to the latest release

Updated zoneinfo-all meta-package to fix warnings on build
Removed zoneinfo-simple from dependencies of zoneinfo-all as its contents are included in other packages.

Signed-off-by: Vladimir Ulrich <admin@evl.su>

nload: add new package

Signed-off-by: Jacky Guo <leickwell@hotmail.com>

mini_snmpd: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

lynx: trim trailing space

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

librespeed-cli: add package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

squid: trim trailing space

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

owntone: Update to 28.5

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

libunistring: Update to 1.1

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

libtins: update to 4.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libidn: update to 1.41

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libidn2: update to 2.3.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

liblz4: update to 1.9.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libarchive: update to 3.6.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libmad: update to 0.16.3

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libnpupnp: update to 5.0.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libpng: update to 1.6.38

Remove upstream backports.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19797 from neheb/12

libtasn1: update to 4.19.0

zerotier: update to 1.10.2

Signed-off-by: Moritz Warning <moritzwarning@web.de>

xray-core: Update to 1.6.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsdist: update to 1.7.3

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

libjpeg-turbo: update to 2.1.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libtasn1: update to 4.19.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

simple-adblock: update to 1.9.2-4

* update default config file to list options alphabetically
* rearrange some of the init script code to support transition
  of WebUI to javascript
* rename wan6_trigger to procd_trigger_wan6 for readability

Signed-off-by: Stan Grishin <stangri@melmac.ca>

pdns: update to 4.7.2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #19773 from stintel/announce

announce: trim trailing spaces

Merge pull request #19779 from stintel/hub-ctrl

hub-ctrl: trim trailing spaces

luaexpat: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Merge pull request #19783 from turris-cz/pulseaudio-fix-conffiles

pulseadio: fix conffiles for pulseadio-daemon-avahi package

Merge pull request #19756 from TDT-AG/pr/20221031-ovpn-compress

openvpn: add possibility to set param "compress" without algorithm

mpd: depend the full variant on pulseaudio instead of pulseaudio-daemon

The full variant of mpd depends on pulseaudio-daemon, so it was not
possible to use the other pulseaudio variant with avahi.

Both pulseaudio daemons provides package pulseaudio, so users can choose
which variant suits them best.
Let's change the dependency to pulseaudio.

Fixes: #19187
Fixes: 2ed62adc5914 ("mpd: enable pulseaudio in full package")
Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>

pulseadio: fix conffiles for pulseadio-daemon-avahi package

Fixes: 60ac7dd751240fa096a85794023b18f26a8317da ("pulseaudio: simplify
and rework Makefile")

Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #19769 from mhei/php8-update-8.1.12

php8: update to 8.1.12

hub-ctrl: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

announce: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Merge pull request #19770 from stangri/master-curl

curl: bugfix: building as selected package doesn't break build

curl: bugfix: building as selected package doesn't break build

* Reported-by: Chen Minqiang <ptpt52@gmail.com>
* details [here](https://github.com/openwrt/packages/commit/88009b2d5e394c1822ec55734b63b434981a2a9d#commitcomment-88604318)

Signed-off-by: Stan Grishin <stangri@melmac.ca>

php8: update to 8.1.12

This fixes:
    - CVE-2022-31630
    - CVE-2022-37454

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

knot: update to version 3.2.2

Signed-off-by: Jan Hák <jan.hak@nic.cz>

pulseaudio: change homepage URLs to freedesktop.org

The previous used domain http(s)://pulseaudio.org redirects to
https://www.freedesktop.org/wiki/Software/PulseAudio/

This change enforces to use HTTPS everywhere for homepage URLs

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

pulseaudio: use AUTORELEASE variable

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

pulseaudio: daemons should conflict to each other

It should not be possible to install pulseaudio-daemon and
pulseadio-daemon-avahi at the same time as they have the same files.
Let's avoid that situation by adding conflict.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

pulseaudio: simplify and rework Makefile

There were two conffiles sections and both of them were same, but for
different variants. We can have just one conffile section and use it also
for the other variant.

The same applies for the install section for different variants.
- We have two install sections, but we call the first one with the same
  files and then add something more for the second variant.

- While at it to make it easier, let's change those three rows for
  copying packages into the single one to make sure that I did not miss
anything. Also, we create a directory first and then move files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

libedit: update to version 20221030-3.1

Signed-off-by: Jan Hák <jan.hak@nic.cz>

sudo: bump to version 1.9.12

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

kadnode: fix newlines in config file

Signed-off-by: Moritz Warning <moritzwarning@web.de>

rclone: Update to 1.60.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

ibrdtnd: run through dos2unix

This patch uses CRLF line endings for some reason...

Signed-off-by: Rosen Penev <rosenp@gmail.com>

cloudflared: Update to 2022.10.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.29.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

openobex: remove CXX patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>

knxd: bump to new upstream version 0.14.54

Signed-off-by: Othmar Truniger <github@truniger.ch>

apcupsd: remove header file patch

Seems to be from a time when pkgconfig returned the wrong path.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19747 from stangri/master-curl

curl: include nls.mk

openvpn: add possibility to set param "compress" without algorithm

In some situations you need to set the compress param without an
algorithm. Compression will be turned off, but the packet framing for
compression will still be enabled, allowing a different setting to be
pushed later.

As it is not possible to have options with optional values at the
moment, I've introduced a pseudo value "frames_only" which will be
removed in the init script.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>

curl: include nls.mk

Signed-off-by: Stan Grishin <stangri@melmac.ca>