haproxy: Update HAProxy to v2.2.10

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

mandoc: new package

Major change are:

ksmbd.control -s terminate ksmbd.mountd as well as kernel server.
Update configuration.txt and README.
Turn off smb2 leases by default again.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Major change are:

Fix an issue that directories appear as files when using windows
backup.
Fix xfstests generic/241 failure on life test.
Update ksmbd shutdown and debug print on/off using ksmbd.control in
cifsd.rst.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

ksmbd: update to 3.3.6

gcc: add cc symlink

Major changes are:

Add missing g_rwlock_init() for rpc_samr and rpc_lsaprc.
Fix potential potential null pointer dereferencing error.
Fix memleak.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Major changes are:

Fix kernel oops from fuse+ntfs driver.
Fix the issue of change the directory to the file using Nautilus
client.
Fix ksmbd build break with the latest linux-5.12-rc1.
Fix potential memleak and use after free.
Fix use after free from KASAN(racy issue)

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

https://github.com/syncthing/syncthing/releases/tag/v1.14.0

Signed-off-by: Paul Spooren <mail@aparcar.org>

mtd-rw: fix build failure with kernel 5.10

pdns-recursor: don't search for boost libs in host

python3-websocket-client: update to 0.58.0

python-docker: Update to 4.4.4

zstd: update to version 1.4.9 (security issue)

safe-search: check for changed IP addresses weekly

While searching for the boost_system library in boost.m4, configure
tries to find boost_system-mt before boost_system.  The presence of
boost_system-mt in the staging dir depends on
CONFIG_boost-use-name-tags.  If it is not defined (default), and there
is a boost_system-mt library in the host system, it will be used, and
the build will fail.

This adds a patch to remove the host paths from the search loop,
preserving the rest of the detection logic.

Alternatively, boost_cv_lib_context_LIBS could be used to avoid library
detection code entirely, but then the mt- variant would never be used.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

The current default of hourly is too fast. Some services such as
DuckDuckGo return IPs from a pool based on the user's location instead
of a fixed IP address. This change prevents unnecessary writes to the
flash memory by only updating once per week.

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>

adblock: small update

* add adguard_tracking source (list with cname trackers)
* optimize/sort output of active sources in status
* optimize log output in EMails

Signed-off-by: Dirk Brenken <dev@brenken.org>

Fixes CVE-2021-24032

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Fixes CVE-2021-21300

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

selinux updates

bind: fix linking with full language support enabled

Make some cosmetics improvements.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

This updates auc to use the new API of the sysupgrade image server.
Package version updates now need to be evaluated locally.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

be065c4b sepolicy: Do not try to load policy on import
8f0f0a28 selinux(8,5): Describe fcontext regular expressions
e12f71e8 python/sepolgen: allow any policy statement in if(n)def
b15dff0f python/semanage: Sort imports in alphabetical order
92e01969 python/semanage: empty stdout before exiting on BrokenPipeError
fadcc839 python/sepolicy: allow to override manpage date
2a60de8e sepolgen: sort extended rules like normal ones
9e239e55 sepolgen: print extended permissions in hexadecimal
ccd973f7 python/audit2allow: add #include <limits.h> to sepolgen-ifgen-attr-helper.c

Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>

no changes

Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>

Remove no longer needed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Javier Marcet <javier@marcet.info>

igmpproxy: move package from openwrt repo

backuppc: fix build with host detected par2

freetype: switch to meson

znc: update to 1.8.2

ninja: fix cmake host install

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Bugfixes:

- Remove LD_LIBRARY_PATH and SSL_CERT_FILE environment variables when
shelling out to the ssh client.

Signed-off-by: Javier Marcet <javier@marcet.info>

keepalived: update to version 2.2.2

Passing DESTDIR is not needed with cmake packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

meson: update to 0.56.2

openocd: update to 0.11.0

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

hwdata: update to version 0.345

vpn-policy-routing: better processing of custom user files

redis: update to version 6.2.1