Bugs:

- Revert to Python 3.7 bump for Linux static builds

- Add bash completion for docker-compose logs|up --no-log-prefix

Miscellaneous:

- CI setup update

Signed-off-by: Javier Marcet <javier@marcet.info>

socat: allow more complex command line options

Current implementation of socat's init service doesn't allow to run more
complex configurations. As an example there's no possibility to execute
following command:

  socat TCP-LISTEN:8080,fork,reuseaddr,bind=192.168.1.1 \
    EXEC:"/sbin/ip netns exec somenetns socat STDIO TCP:10.0.0.1:80"

In such command the first line is argv[1] and the second line is
argv[2]. SocatOptions config option is a string. As as a consequence of
this each word will be passed as a separate argv element. Socat won't be
able to parse arguments correctly.

In order to mitigate this issue, we can also accept SocatOptions as a
list of strings. Following config file will work correctly:

config socat 'tunnel_8080_into_somenetns'
	option enable '1'
	list SocatOptions 'TCP-LISTEN:8080,fork,reuseaddr,bind=192.168.1.1'
	list SocatOptions 'EXEC:"/sbin/ip netns exec somenetns socat STDIO TCP:10.0.0.1:80"'

While we're at it, pass stdout and stderr into logread.

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

ddns-scripts: make WGET_SSL executable

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Edi Turn <yyxstter@gmail.com>

Fixes: CVE-2021-3156 (known as Baron Samedit)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

dawn: use autorelease feature

Package version is automatically increased as described here:
https://github.com/openwrt/packages/issues/14537

Signed-off-by: Nick Hainke <vincent@systemli.org>

The Alpine Package Keeper is the default package manager for Alpine
Linux. They manage their own repositoriy with thousends of packages and
as musl is used for compilation, their binaries can directly run on
OpenWrt.

Signed-off-by: Paul Spooren <mail@aparcar.org>

Use PKG_INSTALL for consistency between packages.

Use PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

netopeer2: merge-config: listen on ipv6 and ipv4

* The default local-adress makes Netopeer2-server listen on ipv4 only.
We change it to :: in order to listen on ipv6 as well as ipv4.

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

nfs-kernel-server: update to 2.5.2

atop: update to 2.6.0

frr: update 7.5 to latest backports

ksmbd-tools: fix #13758

samba4: update to 4.13.4

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Return with "-1" if parsing fails in read function.
Reduce buffersize of splitstring function.

Signed-off-by: Nick Hainke <vincent@systemli.org>

* fix for possible exploit #13758
* sanetize all external template/config inputs
* fix some shellcheck warnings

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.13.4

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Fix ddns provider

Signed-off-by: Gerald Hansen <gerald.hansen@posteo.de>

I checked the hostname for existing DNS A and AAAA entries and these
ones didn't have an entry.

Signed-off-by: Gerald Hansen <gerald.hansen@cloud.ionos.com>

As the default uclient-fetch doesn't support authentication header
and the ddns provider myonlineportal.net support also username and
passwort as url parameter this can be changed.

Signed-off-by: Gerald Hansen <gerald.hansen@cloud.ionos.com>

pthsem: try to fix ARC compilation

nextdns: Update to version 1.10.1

libmaxminddb: update to version 1.5.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Getifaddrs() is not working all the time (e.g. wireguard interfaces).
Instead we use if_nameindex() syscall as suggested in:
 https://stackoverflow.com/a/45796495/8474618

Signed-off-by: Nick Hainke <vincent@systemli.org>

Signed-off-by: Vladimir Ulrich <admin@evl.su>

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

golang: Update to 1.15.7

uMurmur: Update to 0.2.19. Patches required for 0.2.17 merged upstream.

libqmi: bump version

libmbim: bump version

owipcalc: fix contains not respect default route

This includes fixes for:
* CVE-2021-3114: crypto/elliptic: incorrect operations on the P-224
  curve
* CVE-2021-3115: cmd/go: packages using cgo can cause arbitrary code
  execution on Windows

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Martin Johansson <martin@fatbob.nu>

Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>

Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>

yq: Update to v4.4.1