* update to 3.2.2

ksmbd changelog:
* fix kernel oops when using signing and pysmb (SMB1) as client.
* fix signing bugs.
* fix encryption bugs.
* fix build error on linux-5.8-rc1
* fix bugs with read-only=yes
* fix potential stuck issue due to cache buffers exhaustion

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

[OpenConnect] Update to version 8.10 to address CVE-2020-12823

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

open-vm-tools: add new package open-vm-tools-fuse

https://nvd.nist.gov/vuln/detail/CVE-2020-12823

Signed-off-by: Donald Hoskins <grommish@gmail.com>

Link: https://kb.vmware.com/s/article/60262

Add new package to support Shared Folders user mode FUSE client.

Signed-off-by: Xingwang Liao <kuoruan@gmail.com>

nextdns: Update to version 1.7.0

sane-backends: update to 1.0.30

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

numpy: add new package

FreeBSD build fix

collectd fix: init uci issues

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

The value is a number and not a string.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Currently the init script generates a config file from uci, that has the
include line before the interval line. This means, that anything happening
in the include directory does not yet see the changed Interval.

Moving the include line before the uci generation process fix this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

collectd: enable ubi plugin

Signed-off-by: Rozhuk Ivan <rozhuk.im@gmail.com>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Currently the values are stored in the ubi plugin as data source type
`counter`. But this makes no sense, because the values change very slowly
and I don't want to know the rate of change. It is better to store the
value as data source type `gauge`. Then I can see the current value.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Add uci binding for ubi plugin.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Enable ubi plugin.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>

wifidog-ng: remove package

tor: remove libssp hack

openssh: always enable stackprotect option

Revert "perl: fix compilation on x86_64 with glibc and ssp"

added libxcrypt and used for shadow-utils

powertop: fix compilation with glibc

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>

mwan3: improvements

overture: update to 1.6.1

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>

Since size is not a problem here, use libxcrypt to avoid algorithm
availability. Changed default to bcrypt as that's the strongest
supported by shadow-utils.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libxcrypt is an external version of libc's libcrypt. It allows to use
algorithms now available with the libc. musl in OpenWrt for example
patches out several algorithms for size reasons. But for shadow-utils,
size does not really matter.

The hashes are set to solaris as that default gives a good balance
between compatibility and size. It includes:

bcrypt,
bcrypt_a,
sha512crypt,
sha256crypt,
md5crypt,
descrypt

The STRONG default adds several algorithms not supported by
shadow-utils.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

alpine: update to 2.23

which: new package

Npupnp gerbera

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This is on track to replace libupnp in the next version. Since libupnp
is not building with GCC10, do this now.

Also backported needed header patch.

Replace other patches with the upstream versions.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes CVE-2020-12695.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

minidlna: restore service triggers

lighttpd: Add subpackage containing authn_pam module

Add new subpackage containing pam authentication module. Shouldn't
affect dependencies and nothing changes, there is just one more module
enabled for people interested in it.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>

docker-ce: Updated to 19.03.11, updated relevant dependencies and script simplification

Restore service triggers which got wrongly removed in commit
733aae9584 ("fix issues").

Without triggers, changing settings from LuCI or calling reload_config
from the cli won't have any effect.

Also adjust the uci commit call to only commit the minidlna configuration
when setting a UUID, to avoid committing unrelated user changes in other
config files.

Ref: https://github.com/openwrt/luci/issues/4194
Fixes: 733aae958 ("minidlna: fix issues")
Fixes: 37367bdc8 ("minidlna: create UUID in config if it is empty")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>