lcd4linux: fix build error for custom build

This change fixes the following build error:
hecking that generated files are newer than configure... done
configure: error: conditional "ANSICXX" was never defined.
Usually this means the macro was only invoked conditionally.
make[2]: *** [Makefile:300:
/home/feckert/openwrt/build_dir/target-x86_64_musl/lcd4linux-custom/lcd4linux-2019-07-19-0b83bb3a/.configured_a17fb5ef857664f03cd0ce37cc5ea591]
Error 1
make[2]: Leaving directory
'/home/feckert/feeds/packages/utils/lcd4linux'
time: package/feeds/packages/lcd4linux/custom/compile#15.43#0.79#16.92
ERROR: package/feeds/packages/lcd4linux failed to build (build
variant: custom).
make[1]: *** [package/Makefile:120:
package/feeds/packages/lcd4linux/compile] Error 1
make[1]: Leaving directory
'/home/feckert/openwrt'
make: ***
[/home/feckert/openwrt/include/toplevel.mk:231:
package/feeds/packages/lcd4linux/compile] Error 2

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Suggested-by: Oskari Rauta <oskari.rauta@gmail.com>

dos2unix: Update to 7.5.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

pciutils: update to 3.10.0

Manually refresh:
- 101-no-strip.patch

Remove upstreamed:
- 107-avoid-addng-multiple-version-tags.patch

ChangeLog:
https://github.com/pciutils/pciutils/blob/21407521fb62a65e39051561e16e4ce1a74362c1/ChangeLog

Signed-off-by: Nick Hainke <vincent@systemli.org>

Merge pull request #21128 from mhei/php8-pecl-xdebug-update-to-3.2.1

php8-pecl-xdebug: update to 3.2.1

ocserv: add otp config option

and also fix build error:
Package ocserv is missing dependencies for the following libraries:
liboath.so.0

Signed-off-by: Thlv Alivs <zgmzzzz18@gmail.com>

oath-toolkit: Add oath PAM authentication module

will install to /usr/lib/security/pam_oath.so

Signed-off-by: Thlv Alivs <zgmzzzz18@gmail.com>

oath-toolkit: splitting liboath from oath-toolkit

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

transmission: add missing nls.mk include

Fixes issue #21016.

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>

php8-pecl-xdebug: update to 3.2.1

Some bugfixes, see changelog:
https://pecl.php.net/package-info.php?package=xdebug&version=3.2.1

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

tailscale: update to 1.40.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>

nginx: add configure flag --with-compat

Without it, nginx could complain about incompatible dynamic modules

Signed-off-by: Glen Huang <me@glenhuang.com>
[ fix conflict error on cherry-pick ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

nginx: introduce migration for old uci conf template

Introduce support for migration of old uci conf template to new version.
Uci conf template are saved in config backup. This cause problem on config
restore as old config template might have compatibility problem with new
nginx implementation.

Add logic to migrate the template script at runtime to correctly align
to latest change from nginx and nginx-util.

Fixes: 65a676ed56fb ("nginx: introduce support for dynamic modules")
Fixes: #20904
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

nginx-util: add version to UCI conf template

Add versioning to UCI conf template as a commented version.
This permits the introduction of migration script since the template is
saved and restored config restore. The migration script are handled by
nginx init.d script.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

vips: update to 8.14.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

zmq: fix gcc 13 errors

gcc 13 compatibility patch is from alpine linux.
https://git.alpinelinux.org/aports/tree/main/zeromq/gcc13.patch

fixes #20972

I also renamed one of patches, so patch filenames are more unified.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

openvpn: Add more hotplug events

OpenVPN supports more hooks than just 'up' and 'down'. Especially
reacting to 'route-up' and 'route-pre-down' events could be important.
When routing table changes, it can make sense to adapt firewall, run
some tests or change even more routes. This change passes those events
to hotplug, so it is easy to react to them without changing
configuration files provided by VPN provider.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>

ttyd: update to 1.7.3

also fixes linking issue that appeared after gcc 13
removed obsolete (merged) patch, ttyd now depends on
libcap, added that as a dependency.

remaining patch refreshed.

release notes: https://github.com/tsl0922/ttyd/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

scapy: update to 2.5.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

syslog-ng: update to 4.2.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

php8-pecl-mcrypt: update to 1.0.6

Signed-off-by: W. Michael Petullo <mike@flyn.org>

php8-pecl-krb5: update to 1.1.5

Signed-off-by: W. Michael Petullo <mike@flyn.org>

openldap: update to 2.6.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

nfdump: update to 4.2.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

luasec: update to 1.3.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libsoup3: update to 2.6.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgpg-error: update to 1.47

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgcrypt: update to 1.10.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libpsl: update to 0.21.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

evtest: don't build man page

Just selecting this package resulted in a build error:

/home/mhei/openwrt.git/staging_dir/hostpkg/bin/python3: No module named asciidoc
make[4]: *** [Makefile:856: evtest.xml] Error 1

Since we usually do not need the man page, just prevent to
build it by pre-setting two environments variables. Then
the makefile warns about, but don't try to build.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #21103 from jefferyto/gensio-without-go

gensio: Fix build on build host with Go compiler

python3-libselinux: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

mariadb: fix gcc 13 building

fixes:
FAILED: tpool/CMakeFiles/tpool.dir/aio_liburing.cc.o
/usr/src/openwrt/staging_dir/toolchain-x86_64_gcc-13.1.0_musl/bin/x86_64-openwrt-linux-musl-g++ -DDBUG_TRACE -DHAVE_CONFIG_H -DHAVE_URING -D_FILE_OFFSET_BITS=64 -I/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/wsrep-lib/include -I/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/wsrep-lib/wsrep-API/v26 -I/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/include -I/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/include/providers -I/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/tpool -Os -pipe -fno-caller-saves -fno-plt -fhonour-copts -fmacro-prefix-map=/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3=mariadb-10.9.3 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro   -I/usr/src/openwrt/staging_dir/toolchain-x86_64_gcc-13.1.0_musl/usr/include -I/usr/src/openwrt/staging_dir/toolchain-x86_64_gcc-13.1.0_musl/include/fortify -I/usr/src/openwrt/staging_dir/toolchain-x86_64_gcc-13.1.0_musl/include -DNDEBUG -DDBUG_OFF -std=gnu++11 -DHAVE_IO_URING_MLOCK_SIZE -MD -MT tpool/CMakeFiles/tpool.dir/aio_liburing.cc.o -MF tpool/CMakeFiles/tpool.dir/aio_liburing.cc.o.d -o tpool/CMakeFiles/tpool.dir/aio_liburing.cc.o -c /usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/tpool/aio_liburing.cc
/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/tpool/aio_liburing.cc: In constructor '{anonymous}::aio_uring::aio_uring(tpool::thread_pool*, int)':
/usr/src/openwrt/build_dir/target-x86_64_musl/mariadb-10.9.3/tpool/aio_liburing.cc:64:18: error: 'runtime_error' is not a member of 'std'
   64 |       throw std::runtime_error("aio_uring()");

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

gnutls: fix build with zabbix

Zabbix verifies the version of gnutls by search in the header gnutls.h.
This is done with 'cat' and 'egrep'. The problem here is now that the
preprocess definition did changed in gnutls.h, so the regex does not
match anymore.

The following error message acourse in the log:
> configure: error: GnuTLS library version requirement not met (>= 3.1.18)

To fix this backport an upstream patch to let the regex work again.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

efivar: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Backport an upstream fix to replace these old data types.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

perl: perlmod: append _LARGEFILE64_SOURCE flag for musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

cloudflared: support setting tunnel token

Allows user to provide a token for Cloudflare tunnel.
When provided along with credentials, this will take precedence.

Signed-off-by: Scott McKenzie <scott@noizyland.net>

Merge pull request #20981 from jefferyto/python3-packages-fix-build

python3-packages: Set PYTHON3_PKG_BUILD:=0

natmap: add myself to maintainers

Signed-off-by: Ray Wang <r@hev.cc>

natmap: update to 20230519

Signed-off-by: Ray Wang <r@hev.cc>

podman: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

gensio: Fix build on build host with Go compiler

If the build host has the Go compiler installed, then configure will
detect this and will try to compile gensio's Go support, leading to a
build failure.

This disables Go support entirely to fix this build failure.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

transmission: add missing ftruncate64 syscall

Transmission 4.0.3 started using the ftruncate64 syscall.
Add it to the list of allowed syscalls.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

docker-compose: Update to version 2.18.1

Signed-off-by: Javier Marcet <javier@marcet.info>

php8: update to 8.2.6

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php8: fix compilation with musl 1.2.4

As noted in the release notes of musl 1.2.4, we can use
CFLAGS to pass -D_LARGEFILE64_SOURCE to allow to keep
using LFS64 definitions (as a short-term solution).

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

mariadb: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

inotify-tools: fix compilation with musl 1.2.4

Fixes errors in the form of:
inotifytools.c: In function 'inotifytools_watch_recursively_with_exclude':
inotifytools.c:1335:30: error: storage size of 'my_stat' isn't known
 1335 |         static struct stat64 my_stat;
      |                              ^~~~~~~
inotifytools.c:1342:36: error: implicit declaration of function 'lstat64'; did you mean 'lstat'? [-Werror=implicit-function-declaration]
 1342 |                         if ( -1 == lstat64( next_file, &my_stat ) ) {
      |                                    ^~~~~~~
      |                                    lstat
inotifytools.c:1335:30: error: unused variable 'my_stat' [-Werror=unused-variable]
 1335 |         static struct stat64 my_stat;
      |                              ^~~~~~~
inotifytools.c: In function 'isdir':
inotifytools.c:1621:30: error: storage size of 'my_stat' isn't known
 1621 |         static struct stat64 my_stat;
      |                              ^~~~~~~
inotifytools.c:1621:30: error: unused variable 'my_stat' [-Werror=unused-variable]
inotifytools.c:1630:1: error: control reaches end of non-void function [-Werror=return-type]
 1630 | }
      | ^
cc1: all warnings being treated as errors

Signed-off-by: Nick Hainke <vincent@systemli.org>

arp-scan: fix missing libcap dependency

arp-scan complains about missing libcap dependency. Disable the
dependency.

Signed-off-by: Nick Hainke <vincent@systemli.org>

crowdsec: new upstream release version 1.5.1

Update crowdsec to latest upstream release version 1.5.1

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5

Description: update to latest version of upstream

tgt: Update to 1.0.86

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

pcre: move pcre from base repository to packages feed

pcre is no longer needed in the base repository. However, some packages
still rely on it in the packages and telephony feed.

Cross-reference to base repository:
e3e6652a550d ("pcre: move package to packages feed")

While working on it remove AUTORELEASE.

Signed-off-by: Nick Hainke <vincent@systemli.org>

pcre2: package moved to base feed

The package is needed by selinux, so it was moved to the base repository.
Remove it from openwrt packages feed.

Cross-reference:
c39b0646f3f2 ("pcre2: import pcre2 from packages feed")

Signed-off-by: Nick Hainke <vincent@systemli.org>

python-packaging: Update to 23.1

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-attrs: Update to 23.1.0

The package now uses pyproject.toml-based builds with additional build
dependencies.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

libvorbisidec: Fix error in package description

libvorbisidec needs libogg since
https://gitlab.xiph.org/xiph/tremor/-/commit/8886a2805fc107489912f8c500db3373e04a316d

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>

python-automat: Update to 22.10.0, refresh patches

This also removes the patch to avoid setuptools-scm and adds a build
dependency on python-setuptools-scm/host.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

gpgme: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libdeflate: Update to 1.18

Release note:
https://github.com/ebiggers/libdeflate/blob/master/NEWS.md#version-118

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libupm: Workaround for errors with GCC13

Workaround for errors with GCC13
 https://github.com/openwrt/packages/issues/20994

patch
 https://github.com/oskarirauta/local-overrides/blob/main/libs/libupm/patches/011-gcc-13-compatibility-fixes.patch

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

perl: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

_LARGEFILE64_SOURCE has to be defined in the source, or CFLAGS can be used
to pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Robert Marko <robimarko@gmail.com>

oath-toolkit: add InstallDev section

This package seems to be missing an InstallDev section. Had a compile
failure for an application that needs to compile against liboath

Signed-off-by: Thlv Alivs <zgmzzzz18@gmail.com>

Merge pull request #21007 from micmac1/gnutls-unistring-optional

gnutls: load libunistring-optional gnulib module

lttng-modules: Update to 2.13.9

* Added new dependency
* Enabled parallel build
* Switched to use KERNEL_MAKE

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

lttng-tools: Update to 2.13.9

Backported a upstream commit (with manually rebased) to fix build
with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

lttng-ust: Update to 2.13.5

Added a patch to disable building tests.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

transmission: add new syscall needed with musl 1.2.4

Apparently the "revcmsg" syscall is now needed, add it to the list
of allowed syscalls.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

cryptsetup: fix compilation with musl 1.2.4

Similar to mdadm also cryptsetup now requires _LARGEFILE64_SOURCE.
Add -D_LARGEFILE64_SOURCE to TARGET_CFLAGS to fix compilation.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

xupnpd: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

crowdsec: fix compilation with musl 1.2.4

_LARGEFILE64_SOURCE has to be defined in the source, or CFLAGS can be used
to pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Fixes errors in the form of:

Building targets
github.com/mattn/go-sqlite3
sqlite3-binding.c:35901:42: error: 'pread64' undeclared here (not in a function); did you mean 'pread'?
35901 |   { "pread64",      (sqlite3_syscall_ptr)pread64,    0  },
      |                                          ^~~~~~~
      |                                          pread
sqlite3-binding.c:35919:42: error: 'pwrite64' undeclared here (not in a function); did you mean 'pwrite'?
35919 |   { "pwrite64",     (sqlite3_syscall_ptr)pwrite64,   0  },
      |                                          ^~~~~~~~
      |                                          pwrite
sqlite3-binding.c: In function 'seekAndRead':
sqlite3-binding.c:35905:49: error: unknown type name 'off64_t'; did you mean 'off_t'?
35905 | #define osPread64 ((ssize_t(*)(int,void*,size_t,off64_t))aSyscall[10].pCurrent)
      |                                                 ^~~~~~~
sqlite3-binding.c:38767:11: note: in expansion of macro 'osPread64'
38767 |     got = osPread64(id->h, pBuf, cnt, offset);
      |           ^~~~~~~~~
sqlite3-binding.c:35905:58: error: expected ')' before 'aSyscall'
35905 | #define osPread64 ((ssize_t(*)(int,void*,size_t,off64_t))aSyscall[10].pCurrent)
      |                   ~                                      ^~~~~~~~
sqlite3-binding.c:38767:11: note: in expansion of macro 'osPread64'
38767 |     got = osPread64(id->h, pBuf, cnt, offset);
      |           ^~~~~~~~~
sqlite3-binding.c: In function 'seekAndWriteFd':
sqlite3-binding.c:35923:57: error: unknown type name 'off64_t'; did you mean 'off_t'?
35923 | #define osPwrite64  ((ssize_t(*)(int,const void*,size_t,off64_t))\
      |                                                         ^~~~~~~
sqlite3-binding.c:38896:17: note: in expansion of macro 'osPwrite64'
38896 |   do{ rc = (int)osPwrite64(fd, pBuf, nBuf, iOff);}while( rc<0 && errno==EINTR);
      |                 ^~~~~~~~~~
sqlite3-binding.c:35924:21: error: expected ')' before 'aSyscall'
35924 |                     aSyscall[13].pCurrent)
      |                     ^~~~~~~~
sqlite3-binding.c:38896:17: note: in expansion of macro 'osPwrite64'
38896 |   do{ rc = (int)osPwrite64(fd, pBuf, nBuf, iOff);}while( rc<0 && errno==EINTR);
      |                 ^~~~~~~~~~
sqlite3-binding.c:35923:21: note: to match this '('
35923 | #define osPwrite64  ((ssize_t(*)(int,const void*,size_t,off64_t))\
      |                     ^
sqlite3-binding.c:38896:17: note: in expansion of macro 'osPwrite64'
38896 |   do{ rc = (int)osPwrite64(fd, pBuf, nBuf, iOff);}while( rc<0 && errno==EINTR);
      |                 ^~~~~~~~~~

make[2]: *** [Makefile:153: /home/nick/openwrt/build_dir/target-aarch64_cortex-a53_musl/crowdsec-1.4.6/.built] Error 1
make[2]: Leaving directory '/home/nick/openwrt/feeds/packages/net/crowdsec'

Signed-off-by: Nick Hainke <vincent@systemli.org>

btrfs-progs: Update to 6.3

Fixed build issue with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xfsprogs: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

mblaze: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Backport an upstream fix to replace these old data types.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #21066 from jefferyto/python-hatchling-1.17.0

python-hatchling: Update to 1.17.0

acpid: Update to 2.0.34

Backported an upstream commit to fix build with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

nfs-kernel-server: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libpciaccess: Update to 0.17

Backported an upstream commit to fix build with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

openssh: sftp no longer needs crypto or zlib.

OpenSSH 9.1p1 removed remaining dependencies and stopped linking sftp,
sftp-server and scp against libcrypto or libz.  This change moves those
package dependencies from the default to those that still need them.
In particular, this will allow sftp-server to be installed for use with
Dropbear without needing to install zlib or openssl.

Signed-off-by: Darren Tucker <dtucker@dtucker.net>

openssh: Use CDN first for source downloads.

Also point to https for website.

Signed-off-by: Darren Tucker <dtucker@dtucker.net>

python-hatchling: Update to 1.17.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

apk: Update to 2.14.0

* Fixed build issue with musl 1.2.4.
* Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

acl: fix compilation with musl 1.2.4

musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so
just having _GNU_SOURCE defined is not enough anymore.

Backport an upstream fix to replace these old functions.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

libreswan: update to 4.11

Fixes https://libreswan.org/security/CVE-2023-30570

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Revert "gptfdisk: fix some warnings treated as errors"

The bug was fixed in 1.0.9, so remove this hack.

This reverts commit 5899a16f4ba70689055f7276e84aa96adce14373.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

gptfdisk: Update to 1.0.9

Backported an upstream commit to fix build with musl 1.2.4.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

alsa-utils: Update to 1.2.9

* updated source url (prefer https rather than http/ftp)
* fixed build with musl 1.2.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

alsa-ucm-conf: Update to 1.2.9

* updated source url (prefer https rather than http/ftp)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

alsa-lib: Update to 1.2.9

* updated source url (prefer https rather than http/ftp)
* refreshed patches

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

btop: fix compilation with musl 1.2.4

_LARGEFILE64_SOURCE has to be defined in the source, or CFLAGS can be used
to pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Fixes errors in the form of:
Compiling src/linux/btop_collect.cpp
src/linux/btop_collect.cpp: In function 'Mem::mem_info& Mem::collect(bool)':
src/linux/btop_collect.cpp:1082:58: error: aggregate 'Mem::collect(bool)::statvfs64 vfs' has incomplete type and cannot be defined
 1082 |                                         struct statvfs64 vfs;
      |                                                          ^~~
src/linux/btop_collect.cpp:1083:79: error: invalid use of incomplete type 'struct Mem::collect(bool)::statvfs64'
 1083 |                                         if (statvfs64(mountpoint.c_str(), &vfs) < 0) {
      |                                                                               ^
src/linux/btop_collect.cpp:1082:48: note: forward declaration of 'struct Mem::collect(bool)::statvfs64'
 1082 |                                         struct statvfs64 vfs;
      |                                                ^~~~~~~~~
make[3]: *** [Makefile:274: obj/linux/btop_collect.o] Error 1
make[3]: Leaving directory '/home/nick/openwrt/build_dir/target-aarch64_cortex-a53_musl/btop-1.2.13'
make[2]: *** [Makefile:53: /home/nick/openwrt/build_dir/target-aarch64_cortex-a53_musl/btop-1.2.13/.built] Error 2
make[2]: Leaving directory '/home/nick/openwrt/feeds/packages/admin/btop'
time: package/feeds/packages/btop/compile#2.57#0.17#3.02
    ERROR: package/feeds/packages/btop failed to build.

Signed-off-by: Nick Hainke <vincent@systemli.org>

openfortivpn: update to 1.20.3

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

crowdsec-firewall-bouncer: new upstream release version 0.0.27

Update crowdsec-firewall-bouncer to latest upstream release version 0.0.27

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.5

nspr: fix musl compile

Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions.

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

nss: update to 3.89.1

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

libpng: update to 1.6.39

Changelog:
https://github.com/glennrp/libpng/blob/v1.6.39/CHANGES

Fixes CVE-2019-6129.

Signed-off-by: Nick Hainke <vincent@systemli.org>

tiff: update to 4.5.0

Release Notes:
http://www.simplesystems.org/libtiff/releases/v4.5.0.html

Remove upstreamed:
- 010-CVE-2022-2519.patch
- 020-CVE-2022-2520.patch

Fixes: CVE-2022-2056, CVE-2022-2057, CVE-2022-2058, CVE-2022-3570,
       CVE-2022-3598, CVE-2022-3627, CVE-2022-3597, CVE-2022-3626,
       CVE-2022-3599, CVE-2022-34526
Signed-off-by: Nick Hainke <vincent@systemli.org>

arp-scan: update to 1.10.0

ieee-iab is removed, see:
https://github.com/royhills/arp-scan/commit/2a56a066494cb67e1c932cc64e739b326ef9a272

Release Notes:
https://github.com/royhills/arp-scan/releases/tag/1.10.0

Signed-off-by: Nick Hainke <vincent@systemli.org>

frr: update to 8.5.1 branch

also fixes gcc 13 compile

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

gcc: update to 12.3.0

Release notes:
https://gcc.gnu.org/gcc-12/changes.html

Refresh patches:
- 230-musl_libssp.patch
- 910-mbsd_multi.patch
- 920-specs_nonfatal_getenv.patch
- 970-macos_arm64-building-fix.patch

Signed-off-by: Nick Hainke <vincent@systemli.org>

gcc: copy patches from 12.2.0 to 12.3.0

This simplifies reviewing process.

Signed-off-by: Nick Hainke <vincent@systemli.org>

Merge pull request #21024 from commodo/python-updates1

python-{django,requests}: bump versions

banip: update 0.8.6-2

* fix/rework no-op loop
* small fixes & cosmetics
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>