Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

With this change the `/etc/config/sshtunnel` file has the correct access.
It's a sensible file.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ddns-scripts: Support Bearer Token for Cloudflare

rng-tools: bump to 6.10, require libopenssl

python-pytest-xdist: update to version 2.0.0

Update sysrepo, libyang, libnetconf2 and netopeer2 packages to latest versions

libuhttpd: Update to 3.2.0

python-docker: Update to 4.3.1

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

davfs2: update to 1.6.0

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

python-pytest: update to version 6.0.1

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Coremark: update to ver 2020-05-28 and fix for 64bit

Signed-off-by: kongfl888 K <kongfl888@outlook.com>

Signed-off-by: kongfl888 K <kongfl888@outlook.com>

generate-ipv6-address: add ipv6 generator

nginx: update to version 1.19.2

Several security issures are addressed:

 - CVE-2020-8620 It was possible to trigger an assertion failure by sending
   a specially crafted large TCP DNS message.
 - CVE-2020-8621 named could crash after failing an assertion check in
   certain query resolution scenarios where QNAME minimization and
   forwarding were both enabled. To prevent such crashes, QNAME minimization is
   now always disabled for a given query resolution process, if forwarders are
   used at any point.
 - CVE-2020-8622 It was possible to trigger an assertion failure when
   verifying the response to a TSIG-signed request.
 - CVE-2020-8623 When BIND 9 was compiled with native PKCS#11 support, it
   was possible to trigger an assertion failure in code determining the
   number of bits in the PKCS#11 RSA public key with a specially crafted
   packet.
 - CVE-2020-8624 update-policy rules of type subdomain were incorrectly
   treated as zonesub rules, which allowed keys used in subdomain rules to
   update names outside of the specified subdomains. The problem was fixed by
   making sure subdomain rules are again processed as described in the ARM.

Full release notes are available at
https://ftp.isc.org/isc/bind9/9.16.6/doc/arm/html/notes.html#notes-for-bind-9-16-6

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Drops pid files, no longer needed with procd management.
Now properly reloads on reload_config after UCI changes.

Signed-off-by: Karl Palsson <karlp@etactica.com>

[ Fixed two shellcheck warnings and bump PKG_RELEASE ]
Signed-off-by: Michael Heimpold <mhei@heimpold.de>

isc-dhcp: fix compilation with GCC 10

fakepop: add new package

i2pd: Update to 2.32.1

Signed-off-by: David Yang <mmyangfl@gmail.com>

Signed-off-by: Marc Egerton <foxtrot@realloc.me>

Added _GNU_SOURCE for uClibc-ng compatibility. _XOPEN_SOURCE does not
seem to be enough.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

The openfortivpn routes are a bit different than the standard ppp
routes so we need to handle them with a custom ppp-up script.

Gateway should not be set, and src should be set to the PPP local ip
address.

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

fakepop is a fake pop3 daemon. It returns always the same messages to all users, it does not care about usernames and passwords. All user/pass combinations are accepted.

Signed-off-by: Marc Egerton <foxtrot@realloc.me>

Upstream now requires libopenssl unconditionally

Signed-off-by: Nathaniel Filardo <nwfilardo@gmail.com>

nft-qos: support mac address based speed limit

simple-adblock: bugfix: update config; use command -v

gstreamer1: enable build options necessary for most applications

Signed-off-by: Stan Grishin <stangri@melmac.net>

Commit cb058bf changed gstreamer1's build options, and this broke some
applications.

First, -Doption-parsing=false is intended for very specific embedded
applications rather general packages. Please see:

https://github.com/openwrt/packages/pull/8847
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/388

Second, -Dregistry=false seems to break plugin discovery. Symptoms of
this include broken applications and gst-inspect-1.0 listing zero plugins.

Fixes #13180.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

dawn: bump to latest version