idna: fix OOB read in punycode decoder

libuv was vulnerable to out-of-bounds reads in the uv__idna_toascii()
function which is used to convert strings to ASCII. This is called by
the DNS resolution function and can lead to information disclosures or
crashes.

b7466e31e4
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990561
https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Free and total bytes are now properly returned as bytes by LVM2 as
requested. No longer multiply values.
Fix parameter order of 'create' command in usage output while at it.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

php7: update to 7.4.21

php8: update to 8.0.8

pillow: bump to version 8.3.0

django: bump to version 3.2.5

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Several bug-fixes.
Fix CVE-2021-35042

Release notes:
  https://docs.djangoproject.com/en/3.2/releases/3.2.5/

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

This fixes:
  - CVE-2021-21704
  - CVE-2021-21705

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

This fixes:
    - CVE-2021-21704
    - CVE-2021-21705

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

python-dateutil: add setuptools-scm build dep

nextdns: Update to version 1.34.2

This prevented expansion of libdir in pkgconfig.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Following:
  https://github.com/openwrt/packages/pull/16004
  https://github.com/openwrt/packages/pull/15995
  https://github.com/openwrt/packages/issues/15988

It seems that dateutil requires setuptools-scm to be installed.
As such, this is being added as a dependency.

Also, bump setuptools-scm to version 6.0.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

strongswan: trivial improvement in 'stroke' packaging

libgpiod: update to 1.6.3

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

tessdata: uncompress tarball only once to speed up builds

The previous approach was to uncompress N times a big tarball (638 MB)
where N=130 is the number of supported languages.  Each iteration would
only extract a single file, but it still needs to uncompress the whole
tarball.  This is of course completely inefficient.

Now, we uncompress the tarball only once to extract all relevant files,
and then iterate N times to copy the file needed for each language.

This massively speeds up builds, at the expense of temporarily requiring
more build space (about 1 GB more)

Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>

adblock: update 4.1.3-2

This fixes support for x86, auc now selects the right combined image
depending on the system being booted in EFI mode or not.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

cache-domains: Fixed missing wildcard entries

lolcat: add package

libulfius: update to 2.7.3

exfatprogs: update to 1.1.2

dnsdist, pdns-recursor: remove --enable-option-checking=fatal

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* add a tcpdump option to resolve IPs in adblock reporting,
  set 'adb_represolve' accordingly (disabled by default). If enabled
  tcpdump will perform a reverse DNS (PTR) lookup for each IP address
* add 'stalkerware' source (provided by @astryzia)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

udhcpsnoop: import package from TIP

Import the udhcpsnoop package from the TIP feed.

The original Makefile in TIP repo spcifies GPL-2.0 as the PKG_LICENSE.
However this is a mistake, as the SPDX headers of the repos source files
all specify BSD-3-Clause as their license.

See https://github.com/Telecominfraproject/wlan-ap/blob/uCentral-trunk/feeds/ucentral/udhcpsnoop/Makefile

Signed-off-by: David Bauer <mail@david-bauer.net>

libzip: fix pkgconfig paths (fixes #15943)

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

I'm reverting this commit, because it is pulling newer source code, but
without doing a new version bump. This results that users who already
installed this library on their router will have different package
content than users who installed it after the commit.

The another small reason is that commit subject - update revision is cryptic itself and should be more bulletproof like saying update to version 1.1

More details: https://github.com/openwrt/packages/pull/15990#issuecomment-870333695

This reverts commit e779323481.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

We should use upstream patch here, which can be removed later,
instead of maintaining our own one.

Reported-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>

podman: change permissions on /usr/share/containers/seccomp.json

ariang: update to 1.2.2

wsdd2: update to git 2021-06-28 (v1.8.5)

uci2: update revision

samba4: update to 4.14.5

rpcbind: update to 1.2.6

libtirpc: update to 1.3.2

* update to git 2021-06-28 (v1.8.5)
* add extra startup delay

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Pull in new API function from upstream.

Signed-off-by: Jakov Petrina <jakov.petrina@sartura.hr>

A pure C implementation of lolcat, probably the lightest out there.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>

strongswan: miscellaneous cleanup of config file, etc

Also from Vincent Wiemann <vincent.wiemann@ironai.com>.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Also from Vincent Wiemann <vincent.wiemann@ironai.com>.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

This option sets the interface of the policy.

Also from Vincent Wiemann <vincent.wiemann@ironai.com>.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>