libreswan: update to 4.4

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

nss: update to 3.65

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

nspr: update to 4.30

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Merge pull request #15664 from looi/fix_ddns_dash

ddns-scripts: Fix for domains with dash

ddns-scripts: Fix for domains with dash

Signed-off-by: Wenli Looi <wlooi@ucalgary.ca>

tor: update to version 0.4.5.8

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

crun: bumb to version 0.19.1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Merge pull request #15657 from looi/fix_ddns_wildcard

ddns-scripts: Fix for wildcard subdomain

ddns-scripts: Fix for wildcard subdomain

Signed-off-by: Wenli Looi <wlooi@ucalgary.ca>

vnstat2: update to version 2.7

Signed-off-by: Jan Hoffmann <jan@3e8.eu>

sudo: bump to version 1.9.7

Refresh  patch 010-cross-compile-fixes.patch
Re-apply patch 020-no-owner-change.patch

Also we need to explicitly disable OpenSSL support.
We may enable it later if needed/requested.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

podman: bumb version to 3.1.2

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

yq: Update to 4.9.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

django: bump to version 3.2.3

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

et_xmlfile: bump to version 1.1.0

Updating Eneas' email as requested on Github:
  https://github.com/openwrt/packages/pull/15622

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-six: bump to version 1.16.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

haproxy: Update HAProxy to v2.4.0

- New upstream major release with tons of new features and LTS (see: https://www.haproxy.com/blog/announcing-haproxy-2-4/)
- Update haproxy download URL and hash
- Activate promtheus exporter support the new way (using USE_PROMEX=1)
- Cleaned up haproxy-specific CFLAGS
- Changed the halog build to make use of the new Makefile target (admin/halog/halog)

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Merge pull request #15630 from nxhack/node_14170

node: bump to v14.17.0

Merge pull request #15601 from pprindeville/strongswan-make-swanctl-default

strongswan: make default bundle use swanctl

rsync: Add rrsync script

Rrsync is a perl script that is supplied as an extra with the rsync program.
It must be used in conjunction with openssh-server or openssh-server-pam
as it requires ~/.ssh/authorized_keys which is not supported by dropbear.

Rrsync allows selective access to subdirectories in either read-only, write-only or read-write,
depending on settings in authorized_keys. This allows for safe, restrictive access.
It's particularly useful for automated backup purposes.

An example usage would be this entry:

command="/usr/bin/rrsync -ro /home" <public key here>

This would allow a system connecting with this public key to be able to rsync FROM the
/home directory tree only. It could not write to this directory, nor read from any other directory.

Signed-off-by: Matt Reeve <matt@mreeve.com>

libpqxx: update to version 7.5.2

Signed-off-by: Igor Bezzubchenko <garikello@gmail.com>

atlas-sw-probe: fix missing link on sysupgrade

Recreate symbolic link if it's missing after a sysupgrade with a private and public key present in /etc/atlas/

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

chrony: update to 4.1

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>

Merge pull request #15618 from Payne-X6/master

knot: update to version 3.0.6

Merge pull request #15615 from flyn-org/libgpg-error

libgpg-error: patch to fix cross-compile

Fixes #15621

knot: update to version 3.0.6

Signed-off-by: Jan Hak <jan.hak@nic.cz>

docker-compose: Update to version 1.29.2

Miscellaneous:

- Remove prompt to use docker compose in the up command

- Bump py to 1.10.0 in requirements-indirect.txt

Signed-off-by: Javier Marcet <javier@marcet.info>

node: bump to v14.17.0

Notable Changes:
Diagnostics channel (experimental module)
UUID support in the crypto module
Experimental support for AbortController and AbortSignal

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

libgpg-error: patch to fix cross-compile

Paul Blazejowski discovered that the recent update to this package broke
cross-compiling for some OpenWrt platforms. This backports commit 33593864
(March 26, 2021) from the upstream libgpg-error project to fix this
problem.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #15593 from flyn-org/snort3

Update snort3 and libdaq3 packages

Merge pull request #15590 from flyn-org/gstreamer

Gstreamer: update to 1.18.4

snort3: update to 3.1.4.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #15608 from dobo90/adguardhome_v0.106.2

adguardhome: bump to 0.106.2

Merge pull request #15603 from ja-pa/knot-resolver-5.3.2

knot-resolver: update to version 5.3.2

Merge pull request #15605 from 1715173329/yq

yq: Update to 4.8.0

Merge pull request #15586 from commodo/python3-update

python3: bump version to 3.9.5

Merge pull request #15591 from flyn-org/grilo-plugins

grilo-plugins: update to 0.3.13

libassuan: fix linking of host's libgpg-error

gpgrt-config is trying to use the host's /usr/lib path when looking for
libgpg-error. Therefore, disable it and gpg-error-config will be used
as a fallback.

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

adguardhome: bump to 0.106.2

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.2

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

gst1-libav: update to 1.18.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-ugly: update to 1.18.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-bad: update to 1.18.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-good: update to 1.18.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gst1-plugins-base: update to 1.18.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gstreamer1: update to 1.18.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

yq: Update to 4.8.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Merge pull request #15602 from ja-pa/redis-6.2.3

redis: update to version 6.2.3

Merge pull request #15604 from ja-pa/lmdb-0.9.29

lmbd: update to version 0.9.29

lmbd: update to version 0.9.29

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

redis: update to version 6.2.3

Fixes CVE-2021-29477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

python3: bump version to 3.9.5

Refreshed Python patches.
Updated pip & setuptools version.

For pip, patch '001-pep517-pyc-fix.patch' was reworked.

Also, the current version of the bundled pip (21.1.1) no longer supports
Python2, so the 'py2.py3' suffix gets replaced with just py3.

For setuptools, there is no longer a script/module:
  https://github.com/pypa/setuptools/pull/2544

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

knot-resolver: update to version 5.3.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #15599 from mhei/php8-update

php8: update to 8.0.6

Merge pull request #15600 from mhei/php7-update

php7: update to 7.4.19

strongswan: make default bundle use swanctl

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

grilo-plugins: update to 0.3.13

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libdaq3: update to 3.0.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

syslog-ng: update to 3.32.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #15594 from flyn-org/snort

snort: update 2.9.17.1

Merge pull request #15589 from flyn-org/krb5

krb5: update to 1.19.1

Merge pull request #15595 from flyn-org/libgcrypt

Update libgpg-error and libgcrypt

Merge pull request #15596 from flyn-org/openldap

openldap: update to 2.4.58

Merge pull request #15597 from flyn-org/scapy

scapy: update to 2.4.5

Merge pull request #15588 from flyn-org/nfdump

nfdump: update to 1.6.23

Merge pull request #15585 from ja-pa/tailscale-1.8.1

tailscale: update to version 1.8.1

php7: update to 7.4.19

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #15587 from flyn-org/libgee

libgee: update to 0.20.4

php8: update to 8.0.6

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

libgcrypt: update to 1.9.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgpg-error: update to 1.42

Signed-off-by: W. Michael Petullo <mike@flyn.org>

scapy: update to 2.4.5

Signed-off-by: W. Michael Petullo <mike@flyn.org>

openldap: update to 2.4.58

Signed-off-by: W. Michael Petullo <mike@flyn.org>

snort: update 2.9.17.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

krb5: update to 1.19.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

nfdump: update to 1.6.23

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libgee: update to 0.20.4

Signed-off-by: W. Michael Petullo <mike@flyn.org>

tailscale: update to version 1.8.1

Add readme with simple tailscale howto.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

lvm2: update to version 2.03.12

Two notable changes are devices file and metadata based autoactivation.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

exim: update to version 4.94.2

Several exploitable vulnerabilities in Exim were reported to us and are
fixed.
Local vulnerabilities
- CVE-2020-28007: Link attack in Exim's log directory
- CVE-2020-28008: Assorted attacks in Exim's spool directory
- CVE-2020-28014: Arbitrary PID file creation
- CVE-2020-28011: Heap buffer overflow in queue_run()
- CVE-2020-28010: Heap out-of-bounds write in main()
- CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
- CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
- CVE-2020-28015: New-line injection into spool header file (local)
- CVE-2020-28012: Missing close-on-exec flag for privileged pipe
- CVE-2020-28009: Integer overflow in get_stdinput()
Remote vulnerabilities
- CVE-2020-28017: Integer overflow in receive_add_recipient()
- CVE-2020-28020: Integer overflow in receive_msg()
- CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
- CVE-2020-28021: New-line injection into spool header file (remote)
- CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
- CVE-2020-28026: Line truncation and injection in spool_read_header()
- CVE-2020-28019: Failure to reset function pointer after BDAT error
- CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
- CVE-2020-28018: Use-after-free in tls-openssl.c
- CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()

The update to 4.94.2 also integrates a fix for a printf format issue
previously addressed by a local patch which is removed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

auc: support queue_position status from server

Display position in queue while waiting for build.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Merge pull request #15552 from mhei/php7-update

php7: update to 7.4.18

Merge pull request #15575 from pprindeville/strongswan-always-generate-var-strongswan

strongswan: swanctl init script doesn't load connections

Merge pull request #15474 from ja-pa/unbound-ttl-neg

unbound: add cache-max-negative-ttl config option

Merge pull request #15553 from PolynomialDivision/add-samplicator

samplicator: add samplicator

Merge pull request #15539 from ja-pa/tailscale

tailscale: add new package

vim: install vimdiff symlink for vim-full

vim-full comes with diff feature

Signed-off-by: Sergio E. Nemirowski <sergio@outerface.net>

samba4: update to 4.13.8

* update to 4.13.8
* remove faulty io_uring kernel detection
* fixes CVE's: CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2021-20254
* resolves #15512

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Merge pull request #15537 from aaronjg/mwan3/notrack

mwan3: allow interfaces with no tracking IPs

Merge pull request #15562 from TDT-AG/pr/20200503-mwan3

mwan3: update ubus status for no tracked interfaces

strongswan: swanctl init script doesn't load connections

Fixes issue #15446

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #15554 from pprindeville/fix-dhcp-route-whitespaces

isc-dhcpd: handle extra spaces in routes

tcpreplay: bump to version 4.3.4

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

adguardhome: bump to 0.106.1

* Create working directory when it is not present. Apparently
  some recent change made adguardhome fail to start when working
  directory is missing.
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.1

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

stress-ng: bump to version 0.12.07

Refreshed patch.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-dotenv: update to v0.17.1

Signed-off-by: Javier Marcet <javier@marcet.info>

Merge pull request #15566 from BKPepe/hwdata

hwdata: update to version 0.347

Merge pull request #15572 from dibdot/banip

banip: update to 0.7.8

banip: update to 0.7.8

* fix pid file processing of the background monitor plus child
  processes (bug reported in the forum)
* made the enabled/disabled switch of the background monitor functional

Signed-off-by: Dirk Brenken <dev@brenken.org>

samplicator: add samplicator

Samplicator receives UDP datagrams on a given port and resends those
datagrams to a specified set of receivers.

Use Cases:
- replicate Flow Samples to multiple receivers
- use with conntrackd to synchronize via unicast to multiple targets

Signed-off-by: Nick Hainke <vincent@systemli.org>

hwdata: update to version 0.347

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>