safe-search: check for changed IP addresses weekly

While searching for the boost_system library in boost.m4, configure
tries to find boost_system-mt before boost_system.  The presence of
boost_system-mt in the staging dir depends on
CONFIG_boost-use-name-tags.  If it is not defined (default), and there
is a boost_system-mt library in the host system, it will be used, and
the build will fail.

This adds a patch to remove the host paths from the search loop,
preserving the rest of the detection logic.

Alternatively, boost_cv_lib_context_LIBS could be used to avoid library
detection code entirely, but then the mt- variant would never be used.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

The current default of hourly is too fast. Some services such as
DuckDuckGo return IPs from a pool based on the user's location instead
of a fixed IP address. This change prevents unnecessary writes to the
flash memory by only updating once per week.

Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>

adblock: small update

* add adguard_tracking source (list with cname trackers)
* optimize/sort output of active sources in status
* optimize log output in EMails

Signed-off-by: Dirk Brenken <dev@brenken.org>

Fixes CVE-2021-24032

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Fixes CVE-2021-21300

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

selinux updates

bind: fix linking with full language support enabled

Make some cosmetics improvements.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

This updates auc to use the new API of the sysupgrade image server.
Package version updates now need to be evaluated locally.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

be065c4b sepolicy: Do not try to load policy on import
8f0f0a28 selinux(8,5): Describe fcontext regular expressions
e12f71e8 python/sepolgen: allow any policy statement in if(n)def
b15dff0f python/semanage: Sort imports in alphabetical order
92e01969 python/semanage: empty stdout before exiting on BrokenPipeError
fadcc839 python/sepolicy: allow to override manpage date
2a60de8e sepolgen: sort extended rules like normal ones
9e239e55 sepolgen: print extended permissions in hexadecimal
ccd973f7 python/audit2allow: add #include <limits.h> to sepolgen-ifgen-attr-helper.c

Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>

no changes

Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>

Remove no longer needed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Javier Marcet <javier@marcet.info>

igmpproxy: move package from openwrt repo

backuppc: fix build with host detected par2

freetype: switch to meson

znc: update to 1.8.2

ninja: fix cmake host install

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Bugfixes:

- Remove LD_LIBRARY_PATH and SSL_CERT_FILE environment variables when
shelling out to the ssh client.

Signed-off-by: Javier Marcet <javier@marcet.info>

keepalived: update to version 2.2.2

Passing DESTDIR is not needed with cmake packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

meson: update to 0.56.2

openocd: update to 0.11.0

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

hwdata: update to version 0.345

vpn-policy-routing: better processing of custom user files

redis: update to version 6.2.1

simple-adblock: update to 1.8.5-1

stress-ng: bump to version 0.12.04

pillow: bump to version 8.1.2

python-zipp: update to version 3.4.1

subversion: update to 1.14.1

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Changes:
-remove zmalloc patch which is part of release

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Fixes CVE-2020-17525

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Stan Grishin <stangri@melmac.net>

Refreshed patch.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Stan Grishin <stangri@melmac.net>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

fish: update to 3.2.0

libmraa: fix compilation with GCC10

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Curtis Jiang <jqqqqqqqqqq@gmail.com>