libxml2: update to 2.9.14

This fixes CVE-2022-29824.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c12e1cfcab318d0a5b48d63d5952af418e62822e)

Merge pull request #18630 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.19

php8: update to 8.0.19

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

node: bump to v14.19.3

Updates OpenSSL to 1.1.1o (No impact in openwrt)
Upgrade npm to v6.14.17.
etc...

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

vpnc: Update to 0.5.3+git20220517

The new version of vpnc supports additional DH groups for improved key exchange security.

Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
(cherry picked from commit e82106eaeb8cd43b765ba65e70a036820c03de83)

haproxy: Update HAProxy to v2.2.24

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

audit: Fix compilation with kernel 5.15

Linux 5.15 does not have the linux/ipx.h header.

The patch is a partial cherry-pick (skipped ChangeLog) of upstream
commit 6b09724c6 ("Make IPX packet interpretation dependent on the ipx
header file existing").

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 7be14da0d59ef59bfcb4b8c38fa9c93038cde8fb)

bluez: Update to 5.64, update/refresh patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d3cdfa3c307ff3c1d549ff8ab1eb005a2b9dcd67)

bluez: fix compilation with glibc

sync() is implemented now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit df8a0f324d377d1ebdca11fef45f877c3256185d)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

bluez: update to 5.62

Refresh patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3ee221d0166f3e555e5cc7f07a68113f6d2697bf)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

bluez: update to 5.60

Switch to AUTORELEASE for simplicity.

Refresh patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5c467bb76f38179dcbba3868c686b9b6cc8d4c55)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

docker: Update to v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit b05dac56718b64c29780a6464d39ef5e1f5c5278)

dockerd: Update to v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 81dd38677b129555835a79c064166c170bf3ae53)

libnetwork: Updated to 339b97 for docker v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 127aa63898deb76cc1645301f07d579366c5d08b)

containerd: Update to v1.6.4 for docker v20.10.16
* Overrode `PREFIX` to have the old behaviour

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 9a7e3c0b7bdcefe5e9c97e0f8ec17bc4f97b9251)

runc: Update to v1.1.1 for docker v20.10.16

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 8cf4c156c495b88265165f9ed9093559f7ee5136)

openldap: update to 2.4.58

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f200ccd6fc6050357874e4732533aee14a6b2ea1)

* remove a dead mirror
* use https
* fixes CVE-2021-27212

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

usteer: update to latest HEAD

7afab96 usteer: Fix better candidate not being set in policy

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit c46095085a0578d0759e5a03309e5be38cf746db)

Merge pull request #18362 from stangri/openwrt-21.02-https-dns-proxy

[21.02] https-dns-proxy: 2021-11-22-3: add support for Canary Domains

telegraf: Update to version 1.22.4

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit f43a5f03bbc7b66439437429fbd4f2c9fbfa0725)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

Merge pull request #18544 from hexian000/openwrt-21.02

[openwrt-21.02] privoxy: update to 3.0.33 and fix the init script

golang: Update to 1.17.10

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

ci: Look for changed packages in the PR branch only

Fixes https://github.com/openwrt/packages/issues/15267.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b2294ac379ecae55993a8faa583910423f620e7)

privoxy: update to 3.0.33 and fix the init script

1. Fixed init script would kill itself when trying to stop a service.
2. Upgrade privoxy release to 3.0.33
3. Set PKG_RELEASE to AUTORELEASE

Signed-off-by: He Xian <hexian000@outlook.com>
(cherry picked from commit 5d917b957891c23d030c1e64c4857cb1a1035650)

lxc: export systemd cgroups after install

otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2cde10b95053bf958a4001fb0a82c4563bf345e2)

postgresql: security update to 13.7

* fixes CVE-2022-1552
* refresh a patch

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

dawn: update to 2022-05-09

7a72674 datastorage/ubus: rework kicking algorithm

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b41e959d0ec6e2046c9e652eb6bf061034082f1)

docker:  Update to 20.10.14

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit cd99c4cafb8fc30e33f6d4fa670f7379d4d31e6a)

dockerd: Update to 20.10.14, and update version checking mechanism

https://github.com/moby/moby/commit/a7a7c732c0dc02ee5b5515f4ca868ef50cafa4a1
changed package pinning from commit hash to version for some dependencies
(but not all, libnetwork is still referenced by commit)

Support the version-based pinning mechanism in addition to commit-based

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit c3166c5a22a89bfdf4dd1edac25e4a8256717a68)

containerd: Update to 1.5.11

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit a134a23a0784f1b0a04670f38ffedddb46087dee)

runc: update to 1.0.3

* fixes CVE-2021-43784

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9a4423995ab3c6d56c22b282c277a9335ba978f0)

Merge pull request #18324 from jamesmacwhite/21.02-adguardhome-v0.107.6

[21.02] adguardhome: Update v0.107.6

adblock: list maintenance

* add new oisd nsfw source (XL)
* change korean source name (again)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7c66d054bf00f387a04cd174da99064f88c21cab)

adblock: 4.1.3-8

* add new 'hblock' compilation source (XL, see https://hblock.molinero.dev for reference)
* print runtime/date information in ISO-8601 standard format
* minor cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 51a5ec60690674d4525dd14bade280110743e61b)

 adblock: 4.1.3-7

* removed discontinued source 'gaming'
* changed url of source 'reg_kr'

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit bed70d5f4b366f0fe90d4b0cda5a78f91aa4a738)

adblock: 4.1.3-6

* remove discontinued sources: shallalist, stalkerware
* fix a logical glitch in startup trigger handling

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 81d468489f922dfc30195772f63d6284a6f6f508)

adblock: make reproducible

Need to get rid of the timestamp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 5d095a136610e599bbd73ff164aeec89d2cde171)

htop: update to 3.2.0

Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit b4043d92257505526a5b8ceac94f9f28f887abbd)

youtube-dl: update to 2021.12.17

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit ef29bf0163669257c137ebf4e459757b37ddce96)

youtube-dl: update to version 2021.6.6

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit fbe30791792f47e6b925f80ca32f6b4573f4fb0d)

usteer: update to latest HEAD

46539ae policy: abort kick process for missing candidate
408bbca policy: don't kick clients immediatly
444b233 policy: only send preferred candidate with transition request

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit dcd33d5da67bb5247667cc3e1fa7d8a6b4669621)

ecdsautils: update to v0.4.1

This fixes CVE-2022-24884.

Also update the package URL to match the source repository.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit de5671e58226a4cd062e92c2b12e20dcd7854e82)

hwdata: update to version 0.359

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 600eecbac6a765695e652b1029478611ef4f0e79)

tor: bump to 0.4.7.7 stable

The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0b50456514443f0cf74f0a302e31752d2cb55496)

tor: bump to 0.4.6.10 stable

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 17e78a9790b74dcd4da352e70e059c9585a3f8d7)

tor: bump to 0.4.6.9 stable

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 72974bed43d5af0ea17769f33ce6a3824cc858ec)

tor: bump to 0.4.6.8 stable

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 2997d2dcf53a6a687b9a37016a7dbbdb68096831)

tor: bump to 0.4.6.7

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit c12cb0cdde8e7e43ed8c208797cc80e0a3c9ca81)

tor: bump to 0.4.6.6 stable

Run-tested on mvebu/cortexa9 (tor-basic) without issues.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit a45b962eef0b2cb85525ddafce11a63b4f9190d5)

rclone: Update to 1.58.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cf81132418cfe4c07b8b69e068e5663c0ceaa75b)

libtorrent-rasterbar: Update to 2.0.6

Added new dependency "libstdcpp".
Removed an upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2c78f8b1548d3070839bd1ee6977e25fc55030e6)

libtorrent-rasterbar: update to 2.0.5

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 637ecf8c6a12be0f1fb1634b1364074cda790f28)

libtorrent-rasterbar: update to 2.0.4

Backport patch fixing compilation with boost 1.77

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 19fcff09107ab9b03331e433a1750c826c3747dd)

libtorrent-rasterbar: update to 1.0.2

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 2fe4fe7d6ea205611b1915f823d007514adc3039)

yq: Update to 4.25.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 514ca20255ed514a032dce97fb56dadf11c63f0a)

telegraf: upgrade to version 1.22.3

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit c5b668df5bc3a54c696d2903c7d45cae8890e235)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

django: bump to version 3.2.13

Fixes
https://nvd.nist.gov/vuln/detail/CVE-2022-28347
https://nvd.nist.gov/vuln/detail/CVE-2022-28346

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

nano: update to 6.3

Update nano editor to version 6.3

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e076a9a40da733a9f4736cb503af79484db6b160)

knot: update to 3.1.7

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit f30da8c572c7f1acf34d60c468a3a1cceafbf426)

Merge pull request #18392 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.18

php8: update to 8.0.18

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

telegraf: Update to version 1.22.2

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit a93b3baba12b8c2d21fb8b8cbcb2d6e4821b5f57)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

xray-core: Update to 1.5.5

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 67c0a17fee1a533e4106a6902260848645f39332)

prometheus-node-exporter-lua: improve ubnt-manager

It is costly in transmissions to add all information to each metric.
Instead, only use the "device" as a label and add all other important
labels to the "uptime" metric.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 9f3064a11ccb4c04f610faa56b4695adbbab224d)

Merge pull request #18365 from turris-cz/ffmpeg

ffmpeg: update to version 4.3.4

git: update to version 2.34.3

Fixes:
- CVE-2022-24765

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c77f4f9e1d9c3f07c27dd3abe9c666eec003fb8b)

Merge pull request #18369 from jefferyto/golang-1.17.9-openwrt-21.02

[openwrt-21.02] golang: Update to 1.17.9

golang: Update to 1.17.9

Includes fixes for:
* CVE-2022-24675 - encoding/pem: stack overflow
* CVE-2022-28327 - crypto/elliptic: generic P-256 panic when scalar has
  too many leading zeroes

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

https-dns-proxy: 2021-11-22-3: add support for Canary Domains

Fixes https://github.com/stangri/source.openwrt.melmac.net/issues/155.
Background: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit cb3b47be433f43838a109c326152ef86354fa8da)

ffmpeg: update to version 4.3.4

Changelog: https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n4.3.4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

ruby: update to 3.0.4

Fixes:
- CVE-2022-28738: Double free in Regexp compilation
- CVE-2022-28739: Buffer overrun in String-to-Float conversion

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

ci: use openwrt/gh-action-sdk@v4

[ Upstream commit b1355832a05f96d96081044a90b4c9137eb15fad ]

In order to use feeds from GH mirror for GH actions, thus saving a lot
of resources being wasted.

Signed-off-by: Petr Štetiar <ynezz@true.cz>

Merge pull request #18298 from jamesmacwhite/21.02-ooniprobe-v3.14.2

[21.02] ooniprobe v3.14.2

delve: Update to 1.8.2

See https://github.com/go-delve/delve/blob/master/CHANGELOG.md for
changes.

Signed-off-by: Niels Widger <niels@qacafe.com>

usteer: update to latest HEAD

f88ac23 local-node: periodically send link-measurement requests
4473c6e measurement: add missing timeout-reset
6d3314c local-node: handle received link-measurement reports
7df969f measurement: generalize measurement handling
bb61f2a local-node: enable link-measurement capability
4458b6f usteer: expose STA link measurement capability

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 0248058f6ba0ab1aad8a6c816354486067e5e521)

python3-speedtest-cli: update to 2.1.3

This includes a fix for a breaking change in the Speedtest API.

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry picked from commit 77ebd65f4945ea116365ccab3070ab31bed99ce7)
Signed-off-by: James White <james@jmwhite.co.uk>

adguardhome: Update v0.107.6

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ff6946e73ec5f2e027778aa1582d38bab851f66a)

ooniprobe: Update 3.14.2

Signed-off-by: James White <james@jmwhite.co.uk>
(cherry picked from commit ddb4ccfeaf8fc6067b9265d44aa9b593a591fa68)

ooniprobe: update to version 3.10.1

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 3f62bd9df117b225a57a9f85f61728a9ebe39b74)
Signed-off-by: James White <james@jmwhite.co.uk>

ooniprobe: update to version 3.9.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit eda48170ecffad0e6239ef2190cfb063ef3b10b4)
Signed-off-by: James White <james@jmwhite.co.uk>

ooniprobe: update to version 3.9.0

Remove getrescources call because it is no longer
required.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 354523d5b5a563d2d8c6a59a12f1950a471ddba5)
Signed-off-by: James White <james@jmwhite.co.uk>

ooniprobe: update to version 3.8.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit b2921628abbc9bd13321ed3d09bdcd8a378f6463)
Signed-off-by: James White <james@jmwhite.co.uk>

ooniprobe: update to version 3.7.0

Changes:
-add Configure stage to prebuild resources

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 17b18d825cc385fc2df0fa2f6a5e7775d778ef65)
Signed-off-by: James White <james@jmwhite.co.uk>

ooniprobe: update to version 3.5.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 3b25f4561f3f29066e85df4907c1e277881f2fcd)
Signed-off-by: James White <james@jmwhite.co.uk>

yq: Update to 4.24.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit bedad061071aaf5b229db323eb3cdf01b5bb064b)

yq: Update to 4.24.4

Updated GO_PKG due to upstream changes.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 07a29d211a74fd6663dbc9b7f1e9d7cfc89e22e1)

prometheus-node-exporter-lua: fix ubnt-manager collector

Update the version and add ubnt-manager to the build section.

Fixes: 76f27975a9eb (" prometheus-node-exporter-lua: add ubnt-manager collector ")
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 42e841039bba1daa2af11b3b3cebe367e2a3d7c3)

prometheus-node-exporter-lua: add ubnt-manager collector

Ubnt-manager-collector collects statistics from airos devices configured
in ubnt-manager.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 76f27975a9ebcbff3fbaeeda0d83bba6573cf578)

ubnt-manager: add ubnt-manager

This app makes it easier to work with AirOS devices. So far, only monitoring is implemented.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e4a8d3fc29d8f7f00089b14564d5248694e12638)

pdns-recursor: add patch for CVE-2022-27227

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

pdns: add patch for CVE-2022-27227

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #18284 from mhei/21.02-php7-pecl-redis-update

[21.02] php7-pecl-redis: update to 5.3.7

haveged: update to 1.9.18

Update haveged to version 1.9.18

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8579494bbbfaf5c47049e9365ccfb7b553621d15)

php7-pecl-redis: update to 5.3.7

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #18279 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.17

Merge pull request #18280 from mhei/21.02-php7-pecl-http-update

[21.02] php7-pecl-http: update to 3.2.5

php7-pecl-http: update to 3.2.5

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php8: update to 8.0.17

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

telegraf: Update to version 1.22.1

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 86b8b30683cb7e338324c4cba5bee69cc6f1dcd6)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

keepalived: fix libip6tc dependency

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Rebase commit: nftables is not available
(cherry picked from commit eed4277d5cc923c41ae2c4e182fc7449bb44b090)