https://nvd.nist.gov/vuln/detail/CVE-2020-12823

Signed-off-by: Donald Hoskins <grommish@gmail.com>

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Signed-off-by: Rozhuk Ivan <rozhuk.im@gmail.com>

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>

Add new subpackage containing pam authentication module. Shouldn't
affect dependencies and nothing changes, there is just one more module
enabled for people interested in it.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Update cloudflare token ddns file

Signed-off-by: Frank Zhang <i@xjboss.net>

If miniupnpd is installed but disabled or not running, the hotplug
script will query uci for keys that don't exist and grep a temporary
config file that doesn't exist, resulting in the following errors:

uci: Entry not found
grep: /var/etc/miniupnd.conf: No such file or directory

These would arise when an interface is brought up or down, and are
more confusing than helpful, especially when miniupnpd is disabled.

Suppress these errors.

Signed-off-by: David Ehrmann <ehrmann@gmail.com>

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

b933f9cf0c in base made several changes
to OpenWrt's libssp support. It seems this workaround is no longer
needed.

Simplified the configure script slightly.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* fix python3 host paths, ensure we use build hostpkg tools

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Does not seem to be needed anymore.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Othmar Truniger <github@truniger.ch>

Signed-off-by: Josef Zila <josefzila@gmail.com>

The variable is gone as of b933f9cf0c

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

If the status file is not found then set then return the value unknown.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

This enables the procd handling for mwan3 on config change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* update waf-cross-answers for 4.12.x

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Switched to new upstream.

Added PKG_BUILD_PARALLEL for faster compilation.

Refreshed and fixed up patches.

Fixed up license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Helps to see that transmission must be enabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* add unbundle libunwind, icu patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Small adjustments for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Added license information.

Small rearrangements for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Stan Grishin <stangri@melmac.net>

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>

Unbound has a quirk and may reply on a different device address.
When Unbound answers with from-address different than it
received queries on, it may cause trouble for select VPN and
firewall configurations. Ensure Unbound replies with the same
address by changing this default.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

* add anti_ad blocklist source
* made SafeSearch provider configurable, you can limit
  SafeSearch to certain providers
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

* update to 4.12.3
* update/remove patches
* disable netbios port 139 on 'DISABLE_NETBIOS' option or missing 'nmbd'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Includes:
-  test_storage: further refactoring, added test functionality, and TESTING.md to describe testing approach
-  tcpsocket: implement client_read_cb with ustream_read my wheels are much worse than offical wheels.
-  Revert "tcpsocket: implement client_read_cb with ustream_read my wheels are much worse than offical wheels."
-  uci: fix arm64 compiling

Fixes: #12488
Signed-off-by: David Woodhouse <dwmw2@infradead.org>

Signed-off-by: Stan Grishin <stangri@melmac.net>

* add regional list source for czech/slovak
* add regional list source for korea
* adapt oisd_nl changes, switch to adb-syntax domains

Signed-off-by: Dirk Brenken <dev@brenken.org>

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Includes:
-  uci: truncate hostname at first dot
-  ubus/uci/datastorage: add iface and hostname
-  ubus: use strncpy and add backwards compatibility

Signed-off-by: David Woodhouse <dwmw2@infradead.org>

* update to git 2020-05-06
* Fix '-b' option parsing

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 9672

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>