htop: update to 3.1.2-1

Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 3b041e3b458889d7dbef72e1d49b102f193bf5c7)

htop: explicitly disable some build options

Since 3.1.0 delayacct option is enabled if the needed dependencies
are detected, it was previously disabled.
Sensors also check for dependency so we need to explicitly
disable it when not enabled.

Fixes 5f916720551ad5ea5ac86cf5e122fc2c0c34cc15

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 253e3f558c9d5d6ee43a7e870ef60f8a1c0c80c7)

htop: update to 3.1.0

Update htop to versio 3.1.0

* Adjust Makefile configuration options to update
* Avoid libcap dependency
* Backport post-release fix for old automake

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 5f916720551ad5ea5ac86cf5e122fc2c0c34cc15)

Merge pull request #17299 from nxhack/2102_node_14182

[21.02] node: bump to 14.18.2

node: bump to 14.18.2

Update to v14.18.2

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #17270 from BKPepe/update-python3

python3: update to version 3.9.9

hwdata: update to version 0.354

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 20a759a6ddf9f24ee1ca5128a10cfd95eabad771)

python-babel: update to version 2.9.1

Changelog:
https://github.com/python-babel/babel/releases/tag/v2.9.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e2932db1ce45e1882b6935694a46c3a3b7e8536f)

python-babel: update to version 2.9.0

Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a31dc44d2dd8cae498135b2994a7a117bc4c6e2d)

knot: update to 3.1.4

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 60a80b31fbf3585d52b64ab0b9bf5a4aa844a032)

gnutls: don't run aclocal --install

Remove the --install parameter when running aclocal.  The --install
argument is used to copy third-party files to the first -I directory.
gnutls has -I m4 first, which would copy files to its local build
directory.  However, openwrt prepends the staging dir m4 directory,
causing aclocal --install to copy an old definition of
ax_code_coverage.m4 into the staging dir.

If strace is built after gnutls, compilation will fail:

    Makefile:9303: *** missing separator.  Stop.

The version of ax_code_coverage.m4 that gets installed does not define
@CODE_COVERAGE_RULES@.

Removing the --install parameter in gnutls solves the issue.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 206eaae16520f5e89af5219cf574fa649e64d7e1)

bind: bump to 9.17.20

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 249079187dd6a3a21ec62b275782d13f546b5e26)

knot-resolver: update to version 5.4.3

Release notes:
https://www.knot-resolver.cz/2021-12-01-knot-resolver-5.4.3.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 10ab2306702c5292f98a43cf5a1dfc0b7ab99c27)

yq: Update to 4.16.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0f46facfdba667473ffb57fbda31a145f644af48)

python3: update to version 3.9.9

- Updated setuptools and pip
- Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

msmtp: update to version 1.8.1.9

Changelog:
https://marlam.de/msmtp/news/msmtp-1-8-19/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 173faad3340772e1b2194c618fb8c1f13f81b9a9)

Merge pull request #17259 from rs/nextdns-1.37.7-openwrt-21.02

[21.02] nextdns: Update to version 1.37.7

mariadb: Create compatibility symlinks

For every mysql* binary create corresponding mariadb binary and vice
versa.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 2295c351ed826d26778b42888d6f54744e0133f5)

mariadb: Install all supporting sql files

Do not pick just few random SQL files to install, install all of them.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 4653d83048b24bc49c26c23b34dc74e8627544fe)

mariadb: Tweak default configuration

Remove from default configuration options that are compiled in like
default paths and character set. On the other hand add few examples of
tweak options that might be handy.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit a2c1a5728285ad974aaf1160438fc61f6885603d)

mariadb: Init script improvements

Update init script so other user/group can be used. Also make sure that
init script can actually create an empty database instead of forcing the
user to do it by hand. Other new feature is taking care of migration
of the database when upgrading the database.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 1be35284bb524c43a4e9448c5ead215fc3052efb)

mariadb-common: Drop package and adjust configuration

The raison d'être of package mariadb-common was to provide common my.cnf
config file that was being used to include subdirectories and then to
push utf-8 as default everywhere. Let's make this file part of the
server package as there we actually set other options as well and drop
it from all clients. Instead let's set utf-8 as default in server,
client and client libraries. While at it also set socket to the more
common path and drop mysqld_safe script from the list of configuration
files and do other minor tweaks.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit d8ecded02d29e04fe5b0399de2474605fb6d9897)

nextdns: Update to version 1.37.7

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Merge pull request #17254 from rs/nextdns-1.37.6-openwrt-21.02

[21.02] nextdns: Update to version 1.37.6

nextdns: Update to version 1.37.6

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

syslog-ng: update to version 3.35.1

Also bump the version in syslog-ng config file.
Removes this warning:

Nov 16 14:19:41 turris syslog-ng[15159]: WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.35 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.33'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2d2fd36e28a40a63b1bd16c77cce57d446d656cc)

yggdrasil: bump to 0.4.2

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>

yggdrasil: uci ifname is now known as device

Signed-off-by: William Fleurant <meshnet@protonmail.com>

Merge pull request #17241 from rs/nextdns-1.37.5-openwrt-21.02

[21.02] nextdns: Update to version 1.37.5

nextdns: Update to version 1.37.5

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

ddns-scripts: use HTTPS for spdyn

Signed-off-by: Peter Gransdorfer <peter.gransdorfer@cattronix.com>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
- PKG_RELEASE number updated
(cherry picked from commit c0296bf25da7a4832059d0a708431aef4c5f3238)

Merge pull request #17233 from stangri/openwrt-21.02

[21.02] curl: update to 7.80.0

icu: bump to 70.1

ICU 70 released. It updates to Unicode 14, including new characters, scripts, emoji, and corresponding API constants. ICU 70 adds support for emoji properties of strings. It also updates to CLDR 40 locale data with many additions and corrections. ICU 70 also includes many other bug fixes and enhancements, especially for measurement unit formatting, and it can now be built and used with C++20 compilers.

This change will require minor modifications in php7 and php8.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

curl: update to 7.80.0

* bump version to 7.80.0
* update maintainer email address

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 80ef61729b18c28b76a1ee64d7af7251031a2496)

Merge pull request #17162 from stangri/openwrt-21.02

[21.02] nebula: update to 1.5.0

yq: Update to 4.15.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 63f95db55e38d53947bfe871292f81aa15ac5936)

crowdsec: update to 1.2.1
crowdsec-firewall-boucer: update to 0.0.16

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 2861370567bde7d426a5dda2b41cda321d050f5f)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>

Merge pull request #17155 from jefferyto/golang-1.17.3-openwrt-21.02

[openwrt-21.02] golang: Update to 1.17.3

docker: Update to 20.10.11

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Update to 20.10.11

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

containerd: Update to 1.4.12

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

conntrack-tools: import patch to fix cache

As written in the commit message:

Depending on your conntrackd configuration, events might get lost,
leaving stuck entries in the cache forever. Skip checking the conntrack
ID to allow for lazy cleanup by when a new entry that is represented by
the same tuple is added.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit da619f19f436bc95acd07c0d7aca772328cc5895)

conntrack-tools: add a patch to fix endianness issue

Signed-off-by: Tao Gong <gongtao0607@gmail.com>
(cherry picked from commit f62c15f92d4c8c6eabedf512efd5b2ebbca4b44d)

Merge pull request #17170 from mhei/21.02-php7-update

[21.02] php7: update to 7.4.26

Merge pull request #17169 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.13

php8: update to 8.0.13

This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2e9c1a00ea85a927accad4e0814f67240881d0d4)

php7: update to 7.4.26

This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c6f27671a303dad64cb7429377ffddb67760ba6a)

rosy-file-server: drop this package

Reasons to drop this package:
a) this package depends on luci-app-rosy-file-server
Unfortunately, it was marked as broken as it is unmaintained.

See: https://github.com/openwrt/luci/commit/34b682afac310859f0d4696110d8a1af60f16c04

b) maintainer is inactive
c) rosinson website does not seem to be working

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f1893a426a815a667786385e083e8385f7622524)

nebula: update to 1.5.0

* update binaries to version 1.5.0 (thanks @jefferyto)
* update maintainer's email address

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1421440174b80b7f9e9562217aa3951c6688839e)

Merge pull request #17159 from rs/nextdns-1.37.4-openwrt-21.02

[21.02] nextdns: Update to version 1.37.4

nextdns: Update to version 1.37.4

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

golang: Update to 1.17.3

Contains fixes for:

* CVE-2021-41771: ImportedSymbols in debug/macho (for Open or OpenFat)
  accesses a memory location after the end of a buffer

* CVE-2021-41772: archive/zip Reader.Open panic via a crafted ZIP
  archive containing an invalid name or an empty filename field

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 901f80aae7d14b48e1ff94b59ef03eeeae7b0900)

auc: remove superfluous variables

Remove parsing of data which is not used within `auc`. Later iterations
may use these but they can be gradually added whenever needed.

Also remove HTTP code handling of error codes no longer used by the
backend. Early iterations of the server where infinitely complex to
figure out created images and announce them to clients but ever since
everything is stored in JSON, things got better (aka simpler).

If a package is missing on the upstream server, color it in red.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 6527d65b9bff5f01a67c3d8b1bd0da5f026960aa)

auc: use /json/v1/

Currently `auc` uses the outdated /json/ path, this commit uses
/json/v1/ to be more future proof.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 69b5c289298762ff50783ec81dd67f888a53452b)

auc: fix some minor issues

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 51f9df5b92dd79e739db00f627f0fef584d7e9e2)

rclone: Update to 1.57.0

- Disabled unused plugins and re-enabled CGO.
- Fixed test script

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f712dc311e7c9b76b324e826f85eb2a5dfe33e62)

yq: Update to 4.14.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8eab3a2bf2b31dfd3090443e70619ba002f86fdd)

exim: update to version 4.95

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 40c71110f064ceacb7c44892f55f7f6cb18995ae)

exim: some clean ups

 * use username/group 'exim' instead of mail
 * register configuration file
 * make sure /usr/lib/exim/lookups exists

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 66a62e2fcfeecd0baed5f597c9f7e5970fd1fd5b)

exim: add default config and init script, enable lmtp

Ship default configuration /etc/exim/exim.conf as well as
a simple procd init script. Enable building with LMTP for better
integration with dovecot.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 31d12ead78e29837b6eb29d08684f36e8af9ce46)

exim: update to version 4.94.2

Several exploitable vulnerabilities in Exim were reported to us and are
fixed.
Local vulnerabilities
- CVE-2020-28007: Link attack in Exim's log directory
- CVE-2020-28008: Assorted attacks in Exim's spool directory
- CVE-2020-28014: Arbitrary PID file creation
- CVE-2020-28011: Heap buffer overflow in queue_run()
- CVE-2020-28010: Heap out-of-bounds write in main()
- CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
- CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
- CVE-2020-28015: New-line injection into spool header file (local)
- CVE-2020-28012: Missing close-on-exec flag for privileged pipe
- CVE-2020-28009: Integer overflow in get_stdinput()
Remote vulnerabilities
- CVE-2020-28017: Integer overflow in receive_add_recipient()
- CVE-2020-28020: Integer overflow in receive_msg()
- CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
- CVE-2020-28021: New-line injection into spool header file (remote)
- CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
- CVE-2020-28026: Line truncation and injection in spool_read_header()
- CVE-2020-28019: Failure to reset function pointer after BDAT error
- CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
- CVE-2020-28018: Use-after-free in tls-openssl.c
- CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()

The update to 4.94.2 also integrates a fix for a printf format issue
previously addressed by a local patch which is removed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c241cb12bb292e894e45f063f1a8ddb8a627371d)

exim: fix compilation without deprecated OpenSSL APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de9c527e9a2e5a3437b884c6f583e9dcbe15f3f8)

gpgme: update to version 1.16.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e0e5dea89e1dbdc5270861c129144f21f1670eef)

podman: update to 3.4.1

A lot of changes since 3.3.1.

Full (long) lists of release notes between
versions are available at
https://github.com/containers/podman/releases

containers.conf updated

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 3e5761d6cd3142d7d8649dbd4f14f78d43161f24)

podman: fix broken conffiles

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit e6e770b268bc4b7448a36c0947cdada8cd5b0e17)

podman: update to 3.3.1

Earlier versions of podman did not make use of TMPDIR when running "podman
run ...". Podman's default, /var/tmp, presents a problem to rootless
use since OpenWrt's /var/tmp does not permit writes by non-root users.
Podman 3.3.1 makes full use of TMPDIR.

This is part of an attempt to get rootless podman to work on OpenWrt.
See https://github.com/openwrt/packages/issues/15096.

See also the upstream issue at
https://github.com/containers/podman/issues/10698.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 416eced1748859690c9935f483e22d7f389f6451)

podman: change permissions on /usr/share/containers/seccomp.json

Running podman as users other than root seems to require that those
users can read /usr/share/containers/seccomp.json. This change sets the
permissions on that file to match those used on Fedora.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a41556af4f2fb5c79b3a7902b4f3ca3b81644920)

podman: update to 3.2.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit e565bebf4158c5b835110d76955c3f618c63f25b)

podman: change permissions on /etc/containers

Running podman as users other than root seems to require that those
users can read the configuration files in /etc/containers. This change
sets the permissions of /etc/containers and its contents to match those
used on Fedora.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f51ef46aa6adad6ba95ebc15c50e847044984b36)

podman: bumb version to 3.1.2

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit b6299c763ac901d4b2e5f0919789d5c3dad42c3a)

podman: update to 3.1.1

 - Add support for AppArmor
 - Gracefully stop containers and pods on shutdown

I found out that If you change location of containers to persistent storage instead of tmpfs, starting them will fail unless they have been stopped. If this is the case that reboot has occurred before pods and containers have been stopped, they cannot be started, they have to be removed and re-created. Change in initscript tries to avoid that. Even if containers are running at tmpfs, this won't hurt. Still, if something happens and system hangs/reboots/etc, script won't save you from that. It's just a attempt to make things better.
I also enabled AppArmor support for future possibilities.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 5bb8844fe3e8d6def59f76301acf4c294d38dd30)

podman: Add selinux variant and several improvements

* add -selinux variant which depends on libselinux
* init script for background service
* updated configurations
* maintainer change as requested

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit abce42385154c824d850225f466e54f1136a657a)

podman: add 'crun' to containers.conf

Now that 'crun' has been packaged, add support for it in podman.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 954be76e6a7d3612d36b33de12c355e306458426)

podman: update to version 3.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3c758231cb30e4b1e481d00de0a1a7eb06c6b518)

conmon: update to 2.0.30

bug fixes:
 - Remove unreachable code path
 - exit: report if the exit command was killed
 - exit: fix race zombie reaper
 - conn_sock: allow watchdog messages through the notify socket proxy
 - seccomp: add support for seccomp notify

misc:
 - Add seccomp to build dependency

included patch removes unnecessary dependency of libdl and also allows a succesfull build
disabled for arc where libseccomp does not seem to be available

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ab08ad2ad966b32a7e6e478e3c7dd775492a36ff)

conmon: update to 2.0.29

Patch fixing segfaults on nulls was removed due to patch's content being now included in conmon's source since containers/conmon@355dbf1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9fdfe2e2c76aa08c1653cee97e9ce25f19286207)

conmon: fix segfault, correct a typo and update description

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 463227f70cc75579a93a59c09cb6b372c48c13cc)

conmon: update to version 2.0.27

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 301abeecdcaf696f10c55ed6ac5a3f220bbbcec4)

conmon: update to 2.0.26

Switched to building with meson as it works better in a parallel
context.

Small Makefile adjustments for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c8128df4e4ad4f19d975960c495c3b3ff149783d)

cni-plugins: update to version 1.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit b42ea814a05b318dccaa7b6b9c911afe77b1c6cd)

cni-plugins: update to version 1.0.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ab5050ed652a08f9d0b200aad5fae9f2d523ba2a)

cni-plugins: depend on kmod-veth

cni-plugins makes use of veth, make sure kernel module is installed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1b25b6e23965a68c2366bdde3a9efcc6467ce8c5)

cni-plugins: update to version 0.9.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit d3da0724116b8843f241ecf6d47115322888b15c)

cni: update to version 1.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 043bc28dd10d8a4d2fa52d686c09986735f457f8)

cni: update to 0.8.1

This is a security release that fixes a single bug:
 - tighten up plugin-finding logic (#811)

Users of libcni are strongly encouraged to update.

Added me to list of maintainers as requested by @dangowrt.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ceaccc1c7a5aaca1c5fc4597bd724753b6bef358)

libinput: update to version 1.19.2

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 23ac7563c24d5e446f84b3f427a3f96699524df4)

libinput: update to version 1.19.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e852f509cfaa47209f821e66a0b009f3b4b5eb77)

libinput: package libinput cli applets and quriks

Also package /usr/libexec/libinput/* and /usr/share/lib/input/*.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit f53cd4232ae602907822594ed778a9e42f185fd8)

libinput: update to version 1.18.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 112e5628f47e39630cd29281632458fffbfcb0d0)

libinput: update to version 1.17.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 81ccb88a80b275d5f101a33519ceec052810a98d)

libevdev: update to version 1.12.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 60bc9982b4cc14260737282277dd21d878640043)

libextractor: update to version 1.11

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 42707fc1eedf7b5f92d30b2e17f359f97db0d8b5)

pyodbc: update to version 4.0.32

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 264f7b2f5fff40d0d47b103703c17b1f6daef511)

pyodbc: update hash

This package was updated without a hash change.

Fixes: c1575225807cab ("pyodbc: update to version 4.0.31")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit b783386890ac6d861adc181306c19a9ff2104632)

pyodbc: update to version 4.0.31

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c1575225807cab0e1628793ccf3b04bab3c97174)

Werkzeug: update to version 2.0.2

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e9717188920014e01858b94cbfcc00c2ba692a0e)

Jinja2: update to version 3.0.3

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7c3d48497f05d94dc15a06687ed178d59228cc4c)

click: update to version 8.0.3

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6ea6c94a48ae43d12322b04022292ff561cdecda)

perl-mail-spamassassin: update to version 3.4.6

Fixes CVE-2020-1946

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 86bd165f8ca0c5653d58e22924f14849af57c4e3)

perl-mail-spamassassin: fix compilation without deprecated OpenSSL APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 02d54e1a6f4f2aaee9b5f9d10124b79ff8c3f483)