yggdrasil: uci ifname is now known as device

Signed-off-by: William Fleurant <meshnet@protonmail.com>

Merge pull request #17241 from rs/nextdns-1.37.5-openwrt-21.02

[21.02] nextdns: Update to version 1.37.5

nextdns: Update to version 1.37.5

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

ddns-scripts: use HTTPS for spdyn

Signed-off-by: Peter Gransdorfer <peter.gransdorfer@cattronix.com>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
- PKG_RELEASE number updated
(cherry picked from commit c0296bf25da7a4832059d0a708431aef4c5f3238)

Merge pull request #17233 from stangri/openwrt-21.02

[21.02] curl: update to 7.80.0

icu: bump to 70.1

ICU 70 released. It updates to Unicode 14, including new characters, scripts, emoji, and corresponding API constants. ICU 70 adds support for emoji properties of strings. It also updates to CLDR 40 locale data with many additions and corrections. ICU 70 also includes many other bug fixes and enhancements, especially for measurement unit formatting, and it can now be built and used with C++20 compilers.

This change will require minor modifications in php7 and php8.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

curl: update to 7.80.0

* bump version to 7.80.0
* update maintainer email address

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 80ef61729b18c28b76a1ee64d7af7251031a2496)

Merge pull request #17162 from stangri/openwrt-21.02

[21.02] nebula: update to 1.5.0

yq: Update to 4.15.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 63f95db55e38d53947bfe871292f81aa15ac5936)

crowdsec: update to 1.2.1
crowdsec-firewall-boucer: update to 0.0.16

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 2861370567bde7d426a5dda2b41cda321d050f5f)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>

Merge pull request #17155 from jefferyto/golang-1.17.3-openwrt-21.02

[openwrt-21.02] golang: Update to 1.17.3

docker: Update to 20.10.11

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Update to 20.10.11

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

containerd: Update to 1.4.12

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

conntrack-tools: import patch to fix cache

As written in the commit message:

Depending on your conntrackd configuration, events might get lost,
leaving stuck entries in the cache forever. Skip checking the conntrack
ID to allow for lazy cleanup by when a new entry that is represented by
the same tuple is added.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit da619f19f436bc95acd07c0d7aca772328cc5895)

conntrack-tools: add a patch to fix endianness issue

Signed-off-by: Tao Gong <gongtao0607@gmail.com>
(cherry picked from commit f62c15f92d4c8c6eabedf512efd5b2ebbca4b44d)

Merge pull request #17170 from mhei/21.02-php7-update

[21.02] php7: update to 7.4.26

Merge pull request #17169 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.13

php8: update to 8.0.13

This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2e9c1a00ea85a927accad4e0814f67240881d0d4)

php7: update to 7.4.26

This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c6f27671a303dad64cb7429377ffddb67760ba6a)

rosy-file-server: drop this package

Reasons to drop this package:
a) this package depends on luci-app-rosy-file-server
Unfortunately, it was marked as broken as it is unmaintained.

See: https://github.com/openwrt/luci/commit/34b682afac310859f0d4696110d8a1af60f16c04

b) maintainer is inactive
c) rosinson website does not seem to be working

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f1893a426a815a667786385e083e8385f7622524)

nebula: update to 1.5.0

* update binaries to version 1.5.0 (thanks @jefferyto)
* update maintainer's email address

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1421440174b80b7f9e9562217aa3951c6688839e)

Merge pull request #17159 from rs/nextdns-1.37.4-openwrt-21.02

[21.02] nextdns: Update to version 1.37.4

nextdns: Update to version 1.37.4

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

golang: Update to 1.17.3

Contains fixes for:

* CVE-2021-41771: ImportedSymbols in debug/macho (for Open or OpenFat)
  accesses a memory location after the end of a buffer

* CVE-2021-41772: archive/zip Reader.Open panic via a crafted ZIP
  archive containing an invalid name or an empty filename field

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 901f80aae7d14b48e1ff94b59ef03eeeae7b0900)

auc: remove superfluous variables

Remove parsing of data which is not used within `auc`. Later iterations
may use these but they can be gradually added whenever needed.

Also remove HTTP code handling of error codes no longer used by the
backend. Early iterations of the server where infinitely complex to
figure out created images and announce them to clients but ever since
everything is stored in JSON, things got better (aka simpler).

If a package is missing on the upstream server, color it in red.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 6527d65b9bff5f01a67c3d8b1bd0da5f026960aa)

auc: use /json/v1/

Currently `auc` uses the outdated /json/ path, this commit uses
/json/v1/ to be more future proof.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 69b5c289298762ff50783ec81dd67f888a53452b)

auc: fix some minor issues

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 51f9df5b92dd79e739db00f627f0fef584d7e9e2)

rclone: Update to 1.57.0

- Disabled unused plugins and re-enabled CGO.
- Fixed test script

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f712dc311e7c9b76b324e826f85eb2a5dfe33e62)

yq: Update to 4.14.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8eab3a2bf2b31dfd3090443e70619ba002f86fdd)

exim: update to version 4.95

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 40c71110f064ceacb7c44892f55f7f6cb18995ae)

exim: some clean ups

 * use username/group 'exim' instead of mail
 * register configuration file
 * make sure /usr/lib/exim/lookups exists

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 66a62e2fcfeecd0baed5f597c9f7e5970fd1fd5b)

exim: add default config and init script, enable lmtp

Ship default configuration /etc/exim/exim.conf as well as
a simple procd init script. Enable building with LMTP for better
integration with dovecot.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 31d12ead78e29837b6eb29d08684f36e8af9ce46)

exim: update to version 4.94.2

Several exploitable vulnerabilities in Exim were reported to us and are
fixed.
Local vulnerabilities
- CVE-2020-28007: Link attack in Exim's log directory
- CVE-2020-28008: Assorted attacks in Exim's spool directory
- CVE-2020-28014: Arbitrary PID file creation
- CVE-2020-28011: Heap buffer overflow in queue_run()
- CVE-2020-28010: Heap out-of-bounds write in main()
- CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
- CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
- CVE-2020-28015: New-line injection into spool header file (local)
- CVE-2020-28012: Missing close-on-exec flag for privileged pipe
- CVE-2020-28009: Integer overflow in get_stdinput()
Remote vulnerabilities
- CVE-2020-28017: Integer overflow in receive_add_recipient()
- CVE-2020-28020: Integer overflow in receive_msg()
- CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
- CVE-2020-28021: New-line injection into spool header file (remote)
- CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
- CVE-2020-28026: Line truncation and injection in spool_read_header()
- CVE-2020-28019: Failure to reset function pointer after BDAT error
- CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
- CVE-2020-28018: Use-after-free in tls-openssl.c
- CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()

The update to 4.94.2 also integrates a fix for a printf format issue
previously addressed by a local patch which is removed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c241cb12bb292e894e45f063f1a8ddb8a627371d)

exim: fix compilation without deprecated OpenSSL APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de9c527e9a2e5a3437b884c6f583e9dcbe15f3f8)

gpgme: update to version 1.16.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e0e5dea89e1dbdc5270861c129144f21f1670eef)

podman: update to 3.4.1

A lot of changes since 3.3.1.

Full (long) lists of release notes between
versions are available at
https://github.com/containers/podman/releases

containers.conf updated

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 3e5761d6cd3142d7d8649dbd4f14f78d43161f24)

podman: fix broken conffiles

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit e6e770b268bc4b7448a36c0947cdada8cd5b0e17)

podman: update to 3.3.1

Earlier versions of podman did not make use of TMPDIR when running "podman
run ...". Podman's default, /var/tmp, presents a problem to rootless
use since OpenWrt's /var/tmp does not permit writes by non-root users.
Podman 3.3.1 makes full use of TMPDIR.

This is part of an attempt to get rootless podman to work on OpenWrt.
See https://github.com/openwrt/packages/issues/15096.

See also the upstream issue at
https://github.com/containers/podman/issues/10698.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 416eced1748859690c9935f483e22d7f389f6451)

podman: change permissions on /usr/share/containers/seccomp.json

Running podman as users other than root seems to require that those
users can read /usr/share/containers/seccomp.json. This change sets the
permissions on that file to match those used on Fedora.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a41556af4f2fb5c79b3a7902b4f3ca3b81644920)

podman: update to 3.2.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit e565bebf4158c5b835110d76955c3f618c63f25b)

podman: change permissions on /etc/containers

Running podman as users other than root seems to require that those
users can read the configuration files in /etc/containers. This change
sets the permissions of /etc/containers and its contents to match those
used on Fedora.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f51ef46aa6adad6ba95ebc15c50e847044984b36)

podman: bumb version to 3.1.2

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit b6299c763ac901d4b2e5f0919789d5c3dad42c3a)

podman: update to 3.1.1

 - Add support for AppArmor
 - Gracefully stop containers and pods on shutdown

I found out that If you change location of containers to persistent storage instead of tmpfs, starting them will fail unless they have been stopped. If this is the case that reboot has occurred before pods and containers have been stopped, they cannot be started, they have to be removed and re-created. Change in initscript tries to avoid that. Even if containers are running at tmpfs, this won't hurt. Still, if something happens and system hangs/reboots/etc, script won't save you from that. It's just a attempt to make things better.
I also enabled AppArmor support for future possibilities.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 5bb8844fe3e8d6def59f76301acf4c294d38dd30)

podman: Add selinux variant and several improvements

* add -selinux variant which depends on libselinux
* init script for background service
* updated configurations
* maintainer change as requested

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit abce42385154c824d850225f466e54f1136a657a)

podman: add 'crun' to containers.conf

Now that 'crun' has been packaged, add support for it in podman.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 954be76e6a7d3612d36b33de12c355e306458426)

podman: update to version 3.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3c758231cb30e4b1e481d00de0a1a7eb06c6b518)

conmon: update to 2.0.30

bug fixes:
 - Remove unreachable code path
 - exit: report if the exit command was killed
 - exit: fix race zombie reaper
 - conn_sock: allow watchdog messages through the notify socket proxy
 - seccomp: add support for seccomp notify

misc:
 - Add seccomp to build dependency

included patch removes unnecessary dependency of libdl and also allows a succesfull build
disabled for arc where libseccomp does not seem to be available

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ab08ad2ad966b32a7e6e478e3c7dd775492a36ff)

conmon: update to 2.0.29

Patch fixing segfaults on nulls was removed due to patch's content being now included in conmon's source since containers/conmon@355dbf1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9fdfe2e2c76aa08c1653cee97e9ce25f19286207)

conmon: fix segfault, correct a typo and update description

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 463227f70cc75579a93a59c09cb6b372c48c13cc)

conmon: update to version 2.0.27

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 301abeecdcaf696f10c55ed6ac5a3f220bbbcec4)

conmon: update to 2.0.26

Switched to building with meson as it works better in a parallel
context.

Small Makefile adjustments for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c8128df4e4ad4f19d975960c495c3b3ff149783d)

cni-plugins: update to version 1.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit b42ea814a05b318dccaa7b6b9c911afe77b1c6cd)

cni-plugins: update to version 1.0.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ab5050ed652a08f9d0b200aad5fae9f2d523ba2a)

cni-plugins: depend on kmod-veth

cni-plugins makes use of veth, make sure kernel module is installed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1b25b6e23965a68c2366bdde3a9efcc6467ce8c5)

cni-plugins: update to version 0.9.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d3da0724116b8843f241ecf6d47115322888b15c)

cni: update to version 1.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 043bc28dd10d8a4d2fa52d686c09986735f457f8)

cni: update to 0.8.1

This is a security release that fixes a single bug:
 - tighten up plugin-finding logic (#811)

Users of libcni are strongly encouraged to update.

Added me to list of maintainers as requested by @dangowrt.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ceaccc1c7a5aaca1c5fc4597bd724753b6bef358)

libinput: update to version 1.19.2

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 23ac7563c24d5e446f84b3f427a3f96699524df4)

libinput: update to version 1.19.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e852f509cfaa47209f821e66a0b009f3b4b5eb77)

libinput: package libinput cli applets and quriks

Also package /usr/libexec/libinput/* and /usr/share/lib/input/*.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f53cd4232ae602907822594ed778a9e42f185fd8)

libinput: update to version 1.18.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 112e5628f47e39630cd29281632458fffbfcb0d0)

libinput: update to version 1.17.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 81ccb88a80b275d5f101a33519ceec052810a98d)

libevdev: update to version 1.12.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 60bc9982b4cc14260737282277dd21d878640043)

libextractor: update to version 1.11

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 42707fc1eedf7b5f92d30b2e17f359f97db0d8b5)

pyodbc: update to version 4.0.32

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 264f7b2f5fff40d0d47b103703c17b1f6daef511)

pyodbc: update hash

This package was updated without a hash change.

Fixes: c1575225807cab ("pyodbc: update to version 4.0.31")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b783386890ac6d861adc181306c19a9ff2104632)

pyodbc: update to version 4.0.31

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c1575225807cab0e1628793ccf3b04bab3c97174)

Werkzeug: update to version 2.0.2

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e9717188920014e01858b94cbfcc00c2ba692a0e)

Jinja2: update to version 3.0.3

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7c3d48497f05d94dc15a06687ed178d59228cc4c)

click: update to version 8.0.3

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6ea6c94a48ae43d12322b04022292ff561cdecda)

perl-mail-spamassassin: update to version 3.4.6

Fixes CVE-2020-1946

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 86bd165f8ca0c5653d58e22924f14849af57c4e3)

perl-mail-spamassassin: fix compilation without deprecated OpenSSL APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 02d54e1a6f4f2aaee9b5f9d10124b79ff8c3f483)

perl-net-dns: update to version 1.32

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 05dcea0289a47a90a45b6f4fcc3756db94b8428b)

perl-net-dns: update to version 1.30

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1876cd2ff2446410794ef46131e8bc3a5fc8caf2)

opentracker: update to git HEAD of 2021-08-23

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0e380d8cff08f115cff0aa3335c2f6b1de856cd1)

opentracker: update to git HEAD

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0a38cb930ad53f8b2f093ab027c0230f6949ae2c)

opentracker: update to git HEAD

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ddeb936ce14f9b9ffc058e30130e6493452d4690)

libksba: update to version 1.6.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 0876a981c23f63afdd35e49c5a392eb98f91044e)

libksba: update to version 1.5.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1c7ef6c666a69d634f7c72d4b4d171b4a842d398)

libassuan: update to version 2.5.5

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1f50a9e417d8d7d6ef9bcbfb1a3aa8842fb583af)

libgpg-error: patch to fix cross-compile

Paul Blazejowski discovered that the recent update to this package broke
cross-compiling for some OpenWrt platforms. This backports commit 33593864
(March 26, 2021) from the upstream libgpg-error project to fix this
problem.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 71b7f74ff1465457e5d071b210c6f62507332564)

libgpg-error: update to 1.42

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c664e1f20727f7b38d0aa1e7977d904f727d1a24)

i2c-tools: update to version 4.3

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 4ed7701b787a976207b7b6041e5c6493035cebaa)

hiredis: update to version 1.0.2

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c15172f7f76c77019710b9f9b879c239e26ff971)

hiredis: fix compilation with macOS

uname is used to test the host OS. Override it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0ce3a961d39eb6a664088bf77cdf36fdad3bb732)

gawk: update to version 5.1.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit be6099fb7e0cfdacec28cb79b8763b2b73a67803)

ccid: update to version 1.4.36

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f8e79854f9e936170babb5d1850433a431c3b5bb)

ccid: fix compilation under macOS

Remove a bad uname check.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7a7d1a5d2cbf626119b4bc7598fdbe2d0afa3743)

ccid: update to version 1.4.35

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a87236861f09530c4420e73306048da158e2a62b)

ccid: update to version 1.4.34

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c22638cb830eb5bed4f1947bcb1c737c1b922331)

cryptsetup: update to version 2.4.1

Package new experimental SSH token authenticator plugin as new package
'cryptsetup-ssh'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 97dd009f58bf4740ac29154d0ca029aea7424290)

cryptsetup: update to version 2.3.6

Signed-off-by: Javier Marcet <javier@marcet.info>
(cherry picked from commit 2bff0b47aa5c878513b8389538bb0d3fab60e1b6)

cryptsetup: update to version 2.3.5

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c644917ca7e822234b27ade566534f6c0a14ed35)

opensc: update to version 0.22.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit a8f37fc15b1136c8285cc572d4e79207eb51be35)

opensc: update to version 0.21.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c84ab8890ca7bb45e9a61061d38c54f2014520ea)

pcsc-lite: update to version 1.9.4

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7e2a56e77d07f8ab7cf924292d92fc5b5a7f51b2)

pcsc-lite: update to version 1.9.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit fee9ad1c68d094fa1c69b6b207642c0a23bbce6c)

postgresql: update to version 13.5

Addresses CVE-2021-3393 and CVE-2021-20229.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

lvm2: update to version 2.03.14

Drop two local patches which were replaced by upstream commits.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 74969337cfded61c30637595e2244cb06496afd1)