Merge pull request #15605 from 1715173329/yq

yq: Update to 4.8.0

Merge pull request #15586 from commodo/python3-update

python3: bump version to 3.9.5

Merge pull request #15591 from flyn-org/grilo-plugins

grilo-plugins: update to 0.3.13

libassuan: fix linking of host's libgpg-error

gpgrt-config is trying to use the host's /usr/lib path when looking for
libgpg-error. Therefore, disable it and gpg-error-config will be used
as a fallback.

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

yq: Update to 4.8.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #15602 from ja-pa/redis-6.2.3

redis: update to version 6.2.3

Merge pull request #15604 from ja-pa/lmdb-0.9.29

lmbd: update to version 0.9.29

lmbd: update to version 0.9.29

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

redis: update to version 6.2.3

Fixes CVE-2021-29477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

python3: bump version to 3.9.5

Refreshed Python patches.
Updated pip & setuptools version.

For pip, patch '001-pep517-pyc-fix.patch' was reworked.

Also, the current version of the bundled pip (21.1.1) no longer supports
Python2, so the 'py2.py3' suffix gets replaced with just py3.

For setuptools, there is no longer a script/module:
  https://github.com/pypa/setuptools/pull/2544

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #15599 from mhei/php8-update

php8: update to 8.0.6

Merge pull request #15600 from mhei/php7-update

php7: update to 7.4.19

grilo-plugins: update to 0.3.13

Signed-off-by: W. Michael Petullo <mike@flyn.org>

syslog-ng: update to 3.32.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #15594 from flyn-org/snort

snort: update 2.9.17.1

Merge pull request #15589 from flyn-org/krb5

krb5: update to 1.19.1

Merge pull request #15595 from flyn-org/libgcrypt

Update libgpg-error and libgcrypt

Merge pull request #15596 from flyn-org/openldap

openldap: update to 2.4.58

Merge pull request #15597 from flyn-org/scapy

scapy: update to 2.4.5

Merge pull request #15588 from flyn-org/nfdump

nfdump: update to 1.6.23

Merge pull request #15585 from ja-pa/tailscale-1.8.1

tailscale: update to version 1.8.1

php7: update to 7.4.19

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #15587 from flyn-org/libgee

libgee: update to 0.20.4

php8: update to 8.0.6

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

libgcrypt: update to 1.9.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgpg-error: update to 1.42

Signed-off-by: W. Michael Petullo <mike@flyn.org>

scapy: update to 2.4.5

Signed-off-by: W. Michael Petullo <mike@flyn.org>

openldap: update to 2.4.58

Signed-off-by: W. Michael Petullo <mike@flyn.org>

snort: update 2.9.17.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

krb5: update to 1.19.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

nfdump: update to 1.6.23

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgee: update to 0.20.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

tailscale: update to version 1.8.1

Add readme with simple tailscale howto.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

lvm2: update to version 2.03.12

Two notable changes are devices file and metadata based autoactivation.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

exim: update to version 4.94.2

Several exploitable vulnerabilities in Exim were reported to us and are
fixed.
Local vulnerabilities
- CVE-2020-28007: Link attack in Exim's log directory
- CVE-2020-28008: Assorted attacks in Exim's spool directory
- CVE-2020-28014: Arbitrary PID file creation
- CVE-2020-28011: Heap buffer overflow in queue_run()
- CVE-2020-28010: Heap out-of-bounds write in main()
- CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
- CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
- CVE-2020-28015: New-line injection into spool header file (local)
- CVE-2020-28012: Missing close-on-exec flag for privileged pipe
- CVE-2020-28009: Integer overflow in get_stdinput()
Remote vulnerabilities
- CVE-2020-28017: Integer overflow in receive_add_recipient()
- CVE-2020-28020: Integer overflow in receive_msg()
- CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
- CVE-2020-28021: New-line injection into spool header file (remote)
- CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
- CVE-2020-28026: Line truncation and injection in spool_read_header()
- CVE-2020-28019: Failure to reset function pointer after BDAT error
- CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
- CVE-2020-28018: Use-after-free in tls-openssl.c
- CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()

The update to 4.94.2 also integrates a fix for a printf format issue
previously addressed by a local patch which is removed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

auc: support queue_position status from server

Display position in queue while waiting for build.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Merge pull request #15552 from mhei/php7-update

php7: update to 7.4.18

Merge pull request #15575 from pprindeville/strongswan-always-generate-var-strongswan

strongswan: swanctl init script doesn't load connections

Merge pull request #15474 from ja-pa/unbound-ttl-neg

unbound: add cache-max-negative-ttl config option

Merge pull request #15553 from PolynomialDivision/add-samplicator

samplicator: add samplicator

Merge pull request #15539 from ja-pa/tailscale

tailscale: add new package

vim: install vimdiff symlink for vim-full

vim-full comes with diff feature

Signed-off-by: Sergio E. Nemirowski <sergio@outerface.net>

samba4: update to 4.13.8

* update to 4.13.8
* remove faulty io_uring kernel detection
* fixes CVE's: CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2021-20254
* resolves #15512

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Merge pull request #15537 from aaronjg/mwan3/notrack

mwan3: allow interfaces with no tracking IPs

Merge pull request #15562 from TDT-AG/pr/20200503-mwan3

mwan3: update ubus status for no tracked interfaces

strongswan: swanctl init script doesn't load connections

Fixes issue #15446

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #15554 from pprindeville/fix-dhcp-route-whitespaces

isc-dhcpd: handle extra spaces in routes

tcpreplay: bump to version 4.3.4

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

adguardhome: bump to 0.106.1

* Create working directory when it is not present. Apparently
  some recent change made adguardhome fail to start when working
  directory is missing.
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.1

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

stress-ng: bump to version 0.12.07

Refreshed patch.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-dotenv: update to v0.17.1

Signed-off-by: Javier Marcet <javier@marcet.info>

Merge pull request #15566 from BKPepe/hwdata

hwdata: update to version 0.347

Merge pull request #15572 from dibdot/banip

banip: update to 0.7.8

banip: update to 0.7.8

* fix pid file processing of the background monitor plus child
  processes (bug reported in the forum)
* made the enabled/disabled switch of the background monitor functional

Signed-off-by: Dirk Brenken <dev@brenken.org>

samplicator: add samplicator

Samplicator receives UDP datagrams on a given port and resends those
datagrams to a specified set of receivers.

Use Cases:
- replicate Flow Samples to multiple receivers
- use with conntrackd to synchronize via unicast to multiple targets

Signed-off-by: Nick Hainke <vincent@systemli.org>

hwdata: update to version 0.347

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

libmaxminddb: update to version 1.6.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

python-typing-extensions: update to version 3.10.0.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #15532 from dangowrt/bunch-of-updates

a bunch of package updates

mwan3: update ubus status for not tracked interfaces

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

mwna3: fix whitespace

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

isc-dhcpd: handle extra spaces in routes

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

mwan3: allow interfaces with no tracking IPs

In the procd refactor, support for interfaces with no tracking IPs was
inadvertentiy removed. This commit restores the previous behavior

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>

nano: update version to 5.7

Upgrade nano editor to version 5.7.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

haproxy: Update HAProxy to v2.2.14

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #14237 from commodo/python-abi-version

python3: introduce libpython3 with ABI_VERSION flag

nextdns: Update to version 1.32.1

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

php7: update to 7.4.18

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #15547 from dibdot/adblock

adblock: update to 4.1.2

adblock: update to 4.1.2

* preserve DNS cache after adblock processing (unbound & bind)
* fix redirect issue with oisd basic url
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

icu: add ABI_VERSION

To prevent inconsistencies in the coming version (69.1).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

attendedsysupgrade-common: update to 2021

* Use $(COMMITCOUNT)
* Use SPDX
* Use CA (ucert) public key
* Update repo link
* Update maintainer email
* Format description

Signed-off-by: Paul Spooren <mail@aparcar.org>

Merge pull request #15543 from mhei/php8-update

php8: update to 8.0.5

bind: bump to 9.17.12

Fixes the following security issues:

* CVE-2021-25215 - named crashed when a DNAME record placed in the ANSWER
                   section during DNAME chasing turned out to be the final
                   answer to a client query.
* CVE-2021-25214 - Insufficient IXFR checks could result in named serving a
                   zone without an SOA record at the apex, leading to a
                   RUNTIME_CHECK assertion failure when the zone was
                   subsequently refreshed. This has been fixed by adding an
                   owner name check for all SOA records which are included
                   in a zone transfer.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

php8: update to 8.0.5

Also update opcache makefile patch.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

tailscale: add new package

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

knxd: pumb to upstream version 0.14.51

Signed-off-by: Othmar Truniger <github@truniger.ch>

adguardhome: bump to 0.106.0

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.0
* Add build time LDFLAG introduced in commit [1].

[1]: https://github.com/AdguardTeam/AdGuardHome/commit/1d07afb30ee9ff00de72182200b7e1c6d1606d77#diff-82ef468ec5547f1ed424776755a7f87dfec4eba9838d2c2ac02c9881bb67d737R67

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

python-gnupg: update to version 0.4.7

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

perl-mail-spamassassin: update to version 3.4.6

Fixes CVE-2020-1946

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

perl-net-dns: update to version 1.30

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

opentracker: update to git HEAD

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libksba: update to version 1.5.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libinput: update to version 1.17.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libextractor: update to version 1.11

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

libassuan: update to version 2.5.5

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Jinja2: update to version 2.11.3

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

gnunet-fuse: update to version 0.14.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

debian-archive-keyring: update to 2021.1.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

exfatprogs: update to version 1.1.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

python3: introduce libpython3 with ABI_VERSION flag

Related to discussion:
  https://github.com/openwrt/packages/pull/14060

Every once in a while a version bump will occur that requires an ABI
change. Example: Python 3.8 to 3.9. When this happens some Python packages
would need to be rebuilt. In setups where everything gets rebuilt, this
isn't a problem.

It's usually a bigger problem when needing to upgrade something via
opkg.
To accommodate for this, we add a libpython with it's own ABI_VERSION
flag. If this ABI_VERSION changes, then this should propagate forward.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

libupm: Disable node.js support

Library for node.js will be disabled temporarily due to difficulty in supporting the latest node.js.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #15516 from ja-pa/engineio-socketio-update

python-engineio & python-socketio: package update

net-tools: bump to 2.10

Signed-off-by: Aleksander Jan Bajkowski <A.Bajkowski@stud.elka.pw.edu.pl>

libmraa: Disable node.js support

Library for node.js will be disabled temporarily due to difficulty in supporting the latest node.js.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #15525 from 1715173329/xray

xray-core: remove PROVIDES

libedit: update to version 20210419-3.1

Signed-off-by: Jan Hak <jan.hak@nic.cz>

zerotier: update to 1.6.5

Minor ZeroTier update. Refreshed patches.

Signed-off-by: Moritz Warning <moritzwarning@web.de>

Merge pull request #15517 from 1715173329/yq

yq: Update to 4.7.1

Merge pull request #15515 from ja-pa/gitlab-runner-13.11.0

gitlab-runner: update to version 13.11.0