Signed-off-by: Tianling Shen <cnsztl@gmail.com>

Includes fixes for:
* CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr
* CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon
  as a query args separator

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Fixes spurious version bump done in 5c8fb42 and reported in #14815 and
switches source proto from git to codeload.

Upstream has changed daemon binary name to `/usr/sbin/mini-snmpd`.
Package and config/init script name stays unchanged.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>

Changes:
- add python-urllib dependency

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Hak <jan.hak@nic.cz>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jan Hak <jan.hak@nic.cz>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

ksmbd and ksmbd-tools 3.3.5

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>

A treewide script ran to find dirty patches, this was the only packages
found with issues. From now on the CI should no longer return false
positives on dirty patches.

Signed-off-by: Paul Spooren <mail@aparcar.org>

libwebp + libgd version bump

lttng-tools: fix linking with full language support enabled

Use AUTORELEASE to avoid having to bump it manually.

Remove old patch for kernel 4.14 compatibility.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

git-lfs: add new package

Remove upstreamed patch.

Use AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove upstreamed patches. Add one to fix finding libwebp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch to AUTORELEASE for easier changes.

Fix not having all of the libraries.

Remove upstream patches and refresh other one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

std::round was unavailable because of a wrong configure var from the
uClibc days. Fixed upstream with 1647790ae6

Refreshed patches with make package/sane-backends/refresh

Signed-off-by: Rosen Penev <rosenp@gmail.com>

There was a typo in the linker flags.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

zerotier: bump to 1.6.4

treewide: Run refresh on all packages

Signed-off-by: Moritz Warning <moritzwarning@web.de>

Fix typo Yuibco -> Yubico

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

* Changed from DROP to REJECT to be consistant with other firewall rules

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

* Moved logic out of config writing
* Made default config only specify OpenWrt dictated defaults
  Otherwise, docker defaults can be assumed

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Required to make CI happy.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

This fixes fallout after d18692c.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

openconnect: fix dependencies to iconv/intl (fixes #14734)

This fixes the issue raised after d18692c (libxml2: allow building with iconv support).

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Major changes for version 3.3.5 are:
- Rename "streams" parameter to "vfs objects = streams_xattr".
- Enable smb2 leases by default.
- Ignore ksmbd.subauth creation failure.
- Fix bugs that related to guest ok = yes.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>

Major changes for version 3.3.5 are:
- Add support for version 4 dos attribute structure of samba.
- Implement maximal allowed desired access.
- Fix several error handling.
- Fix a few smbtorture failures.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>

banip: update to 0.7.3

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

adguardhome: bump to 0.105.1

* fix search string/pipe preparation for the background service
* fix IPSet maxelem limitation, made it more flexible
* fix potential error during resume action
* add Cisco Talos IP blacklist
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

We should be using "00" to deal with alphabetical order.

Fixes: e9a126c145 ("rng-tools: start as early as possible")
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

rng-tools: start as early as possible

gost_engine: Add GOST2012 Engine for OpenSSL

Signed-off-by: Artur Petrov <github@phpchain.ru>

tor: update to version 0.4.5.6