modemmanager: set interface MTU based on bearer settings

clamav: update to version 0.102.3 (security fix)

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>

postgresql: fix compilation with GCC4

Using the same method used by other protocol handlers like uqmi.

Fixes https://github.com/openwrt/packages/issues/11383

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>

Fixes:
CVE-2020-3341
CVE-2020-3327

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

libtasn1: fix host build under old GCC

remove upstreamed patches. Refresh remaining one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Update the SDK URL in the README.

protobuf-c: fix host build on GCC4

sqlite3: update to version 3.32.0

Nothing uses this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

It's completely unused and breaks under CentOS7.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

prereq-build.mk says that GCC 4.8 and above is supported. GCC 4.8
defaults to std=gnu89, breaking the build. GCC5 defaults to gnu99.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

prereq-build.mk says that GCC 4.8 and above is supported. GCC 4.8
does not default to gnu++11. This fixes compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

uwsgi: make luci-webui single threaded and log more

msmtp: update to version 1.8.10

nginx: set log level to crit for luci-static

Signed-off-by: Wren Turkal <wt@penguintechs.org>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* limit domain name length to max. 63 chars
  to fix issues with energized sources

Signed-off-by: Dirk Brenken <dev@brenken.org>

Update nano version to 4.9.3
Minor bugfix release.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Signed-off-by: Gabor Seljan <sgabe@users.noreply.github.com>

Do not write errors for inexistent files to the system log.

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

nginx: do not reduce max processes

The minimum version of GCC according to prereq-build.mk is 4.8 which
defaults to gnu89. This breaks the host build when the host GCC is less
than 5, which defaults to gnu99. Add a simple CFLAG to fix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

taglib: update to 1.12-beta-1

It seems 1.11.1 is old and has CVEs.

Removed boost hack since upstream removed boost support.

Removed outdated InstallDev hacks.

Added PKG_CPE_ID.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

taglib: fix taglib-config paths

It seems gerbera uses this instead of pkgconfig.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gerbera: add taglib support

Gives audio info support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

lxc: use -minterlink-mips16 only with USE_MIPS16

The flag is either not supported or not needed unless there's mixed
mips/mips16 code.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

nss: fix build for mips64

* update energized source urls, add ultimate variant
* switch shalla source to http (invalid server certificate)
* add another stevenblack source variant (normal / porn)
* small cornercase fixes
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

disable arm32_neon on unsupported target

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Update SQLite to version 3.32.0 to mitigate a security vulnerability.

This mitigates CVE-2020-11656
https://nvd.nist.gov/vuln/detail/CVE-2020-11656

Signed-off-by: Robert Marko <robert.marko@sartura.hr>

dawn: update to latest version

Includes:
- dawn_iwinfo: fix whitespace
- dawn_iwinfo: indentation
- dawn_iwinfo: iwinfo_finish();
- dawn_iwinfo: filter out global interface
- dawn_iwinfo: release iwinfo after usage
- tcpsocket: fix port print
- github: set CONFIG_SRC_TREE_OVERRIDE in actions CI
- github: fix link to dawn source
- github: use v2 for checkout action
- github: add GitHub Actions CI
- ubus: only update TCP socket list when using TCP connections
- add notice that full wpad is requirement
- fix link to luci-app-dawn
- update readme and install instructions

Signed-off-by: Nick Hainke <vincent@systemli.org>

lxc fixes

knot: disable libcap-ng

This makes every lxc-* package depend on lxc so that they are grouped
under the lxc menu.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Similar to libseccomp, ARC is completely unsupported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Added PKG_NO_MIPS16 as MIPS16 is no longer supported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Lua support seems to be gone from LXC 4.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

Recently, there was added libcap-ng to OpenWrt packages feed,
which is optional for Knot DNS. It enables POSIX 1003.1e capabilities.
This can restrict root (by default it runs as root) permissions and
might harm and as there isn't systemd on OpenWrt it can interfere.

There is an added patch, which introduced an option to disable libcap-ng.
This will be part of the next release.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>