7afab96 usteer: Fix better candidate not being set in policy

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit c46095085a0578d0759e5a03309e5be38cf746db)

[22.03] https-dns-proxy: 2021-11-22-3: add support for Canary Domains

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit f43a5f03bb)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

[openwrt-22.03] privoxy: update to 3.0.33 and fix the init script

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 659f87d5d4)

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8550edbe85)

Fixes https://github.com/openwrt/packages/issues/15267.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 6b2294ac37)

Signed-off-by: Liang Yang <ggg17226@gmail.com>
(cherry picked from commit 624f48a602)

Signed-off-by: Liang Yang <ggg17226@gmail.com>
(cherry picked from commit 9963312067)

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 1f96ec16ec)

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
(cherry picked from commit 34c77110f1)

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit cd99c4cafb)

a7a7c732c0
changed package pinning from commit hash to version for some dependencies
(but not all, libnetwork is still referenced by commit)

Support the version-based pinning mechanism in addition to commit-based

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit c3166c5a22)

Signed-off-by: Andy Dodd <atd7@cornell.edu>
(cherry picked from commit a134a23a07)

* fixes CVE-2021-43784

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9a4423995a)

1. Fixed init script would kill itself when trying to stop a service.
2. Upgrade privoxy release to 3.0.33
3. Set PKG_RELEASE to AUTORELEASE

Signed-off-by: He Xian <hexian000@outlook.com>
(cherry picked from commit 5d917b9578)

otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2cde10b950)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 95a0d04046)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dcb0495ca1)

7a72674 datastorage/ubus: rework kicking algorithm

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b41e959d0ec6e2046c9e652eb6bf061034082f1)

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

This adds support for the child SA to be rekeyed through the byte/packet
threshold. The default is blank (which disables the byte/packet thresholds).

Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit 5c8af06c94)

strongswan: add wolfssl plugin

[openwrt-22.03] cloudreve: Update to 3.5.3

[openwrt-22.03] cloudflared: Update to 2022.5.0

[22.03] zerotier: fix segfault on ARM platforms

[22.03] sexpect: Expect for Shells

[22.03] passh: an sshpass alternative

* add new oisd nsfw source (XL)
* change korean source name (again)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 7c66d054bf)

[openwrt-22.03] v2rayA: Update to 1.5.7

Signed-off-by: Derek Yerger <derek@altdevs.net>
Signed-off-by: Joel Low <joel@joelsplace.sg>
(cherry picked from commit 51203cae24)

Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit b4043d9225)

- Removed an upstreamed patch
- Move logs to /var/log in accordance with FHS 3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ff8f25cb98)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fc090f1eeb)
[Removed wrong cherry-pick info]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8f6bf937ca)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 74d7af61fe)

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit ef29bf0163)

46539ae policy: abort kick process for missing candidate
408bbca policy: don't kick clients immediatly
444b233 policy: only send preferred candidate with transition request

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit dcd33d5da67bb5247667cc3e1fa7d8a6b4669621)

This fixes CVE-2022-24884.

Also update the package URL to match the source repository.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit de5671e582)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 600eecbac6)

The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
(cherry picked from commit 0b50456514)

Signed-off-by: Mister Benjamin <144dbspl@gmail.com>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cf81132418)

which requires libiptext library from iptables

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
(cherry picked from commit 7408185c1d)

Upstream backport.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1717048598)

Added new dependency "libstdcpp".
Removed an upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2c78f8b154)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 514ca20255)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f6b1169c20)

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit c5b668df5b)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

Changelogs: https://github.com/fatedier/frp/releases

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>