net/snort3: Include default configs and snort2lua

dnsproxy: Update to 0.39.1

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>

cyrus-sasl: add optional sasldb package

curl: enable HTTP/2 support by default

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

pdns: Update to 4.5.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

- Fix copypaste error for PUB_KEY link creation
- Clean tmp dir on exit to clear any remaining data

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

Fixes: https://github.com/openwrt/packages/issues/16271

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

TARGET_CXX is added, because PowerDNS now uses C++17.

pdns.conf-dist is updated to the latest version shipped by PowerDNS.

010-time_t-check.patch, which is also used in pdns-recursor and dnsdist,
is added to patch out the check for 64-bit time_t,
because OpenWrt still supports 32-bit devices.

100-pdns-disable-pdns.conf-dist.patch is refreshed.

Signed-off-by: Wout Bertrums <wout@wbnet.eu>

Run-tested on mvebu/cortexa9 (tor-basic) without issues.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>

Maintainer: @datafl4sh
Compile tested: x86, sunxi, bcm27xx
Run tested: x86, sunxi, bcm27xx

Description: Updated gnuplot from 5.4.1 to 5.4.2
Signed-off-by: Matteo Cicuttin <datafl4sh@toxicnet.eu>

simple-adblock: update to 1.8.7-6

* supports newer shellcheck
* restore EXTRA_COMMANDS compatibility with 19.07
* move status display from various functions to status_service
* bugfix: status_service line break after output
* minor arythmetic fix in status_service

Signed-off-by: Stan Grishin <stangri@melmac.net>

https-dns-proxy: update to 2021-07-29-1

transmission: apply DSCP to UDP sockets too

Backport a pending patch in order to DSCP-mark UDP traffic. This allows for
correct binning of traffic in diffserv-capable routers.

Additionally, remove Rosen Penev from the maintainers list, as per his request.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>

This package was updated without a hash change.

Fixes: c157522580 ("pyodbc: update to version 4.0.31")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

clocate is a small utility to determinethe location of a
802.11 capable device by using a remote locator service
(Mozilla or Google).

Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

node: bump to 14.17.4

Fixes crashes like:
daemon.err asterisk[5087]: Assertion failed: enc->streams == NULL (src/opusenc.c: ope_encoder_drain: 839)

Signed-off-by: Andre Heider <a.heider@gmail.com>

php7: update to 7.4.22

php8: update to 8.0.9/add runtime test

gateway-go: update to 0.2.0

Signed-off-by: Yu Fang <yu@iotserv.com>

July 2021 Security Releases:

Use after free on close http2 on stream canceling (High) (CVE-2021-22930)
Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
You can read more about it in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22930

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

ykclient: remove pointless PKG_BUILD_DEPENDS

Description: Lack of support of HTTP/2 by default starts to hurt,
for example with https-dns-proxy package, some DoH resolvers (like mullvad)
no longer support HTTP/1 and are not usable.

This enables HTTP/2 support by default (which would bring ~68Kb libnghttp).

Signed-off-by: Stan Grishin <stangri@melmac.net>

* update binary to the latest commit (2021-07-29) to fix #16222 and #16239
* add hotplug.d/iface file and update Makefile to install it
* use Cloudflare's and Google's bootstrap DNS if bootstrap DNS is missing
* minor improvements in append_bool function
* add append_counter function for verbosity setting
* add append_bootstrap function (and supporting functions) to parse/sanitize bootstrap setting
* move firewall array from 'main' instance to the first proxy instance
* delete useless 'main' instace

Signed-off-by: Stan Grishin <stangri@melmac.net>

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Changing a volume right after activation doesn't work well due to some
caching or race-condition issue.
Perform activation as last lvchange operation as a work-around.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>