https://nvd.nist.gov/vuln/detail/CVE-2020-12823

Signed-off-by: Donald Hoskins <grommish@gmail.com>

Signed-off-by: Donald Hoskins <grommish@gmail.com>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

I propose to carry this patch until a new upstream
release includes it. For forther references see:

https://github.com/openwrt/packages/issues/12403
and
https://github.com/kkos/oniguruma/pull/196

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Update haveged to version 1.9.11

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

libcap: update to 2.36

libxerces-c: update to 3.2.3

Small adjustments for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove outdated patches. A different solution was applied upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

unbound: make option interface_auto default on

simple-adblock: racially-neutral names

mariadb: move some binaries

Signed-off-by: Stan Grishin <stangri@melmac.net>

Unbound has a quirk and may reply on a different device address.
When Unbound answers with from-address different than it
received queries on, it may cause trouble for select VPN and
firewall configurations. Ensure Unbound replies with the same
address by changing this default.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

Even though I think that mysql_upgrade is a client package (it depends
on the mysql client and it's in the "client" directory in the source
tree, for instance), upstream laid it out differently. Since upstream
commit ec586f5 mysql_upgrade is to be considered a part of the server,
because the COMPONENT argument in the MYSQL_ADD_EXECUTABLE macro is set
to "Server".

That means that mysql_upgrade is only installed when the server is. So
we need to move it back to the server package, otherwise we will have a
build failure when mariadb-client is selected while mariadb-server is
not. This particular build failure was recently a topic on
openwrt-devel.

Some more binaries are moved, following the layout visible in
"man/CMakeLists.txt", to make sure we follow upstream's vision with
regards to how the binaries are packaged.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

docker-compose: fix depends after merge in master and move to utils

adblock: update 4.0.6

vpn-policy-routing: fix README .ovpn instructions

* add anti_ad blocklist source
* made SafeSearch provider configurable, you can limit
  SafeSearch to certain providers
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

samba4: update to 4.12.3

* update to 4.12.3
* update/remove patches
* disable netbios port 139 on 'DISABLE_NETBIOS' option or missing 'nmbd'

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

perl-parse-yapp: new package

- Update project website

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* add new perl-parse-yapp (dep for samba-4.12)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Includes:
-  test_storage: further refactoring, added test functionality, and TESTING.md to describe testing approach
-  tcpsocket: implement client_read_cb with ustream_read my wheels are much worse than offical wheels.
-  Revert "tcpsocket: implement client_read_cb with ustream_read my wheels are much worse than offical wheels."
-  uci: fix arm64 compiling

Fixes: #12488
Signed-off-by: David Woodhouse <dwmw2@infradead.org>

Signed-off-by: Javier Marcet <javier@marcet.info>

ffmpeg: update to 4.2.3

mpd: update to 0.21.24

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Stan Grishin <stangri@melmac.net>

* add regional list source for czech/slovak
* add regional list source for korea
* adapt oisd_nl changes, switch to adb-syntax domains

Signed-off-by: Dirk Brenken <dev@brenken.org>

python: Readme updates

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

This also removes a link to pypi.org; the previous sentence already
links to pypi.org, a second link in the same paragraph isn't necessary.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Just as Rosen did for cereal in #12477.

Likewise, clean up the CMAKE_OPTIONS onto separate lines for readability.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>

Build variants are no longer necessary.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Added miscellaneous fixes.

Fixed PKG_NAME to a sane one as v$(PKG_VERSION) can conflict with
others.

Separate CMAKE_OPTIONS in lines for clarity.

Add JUST_INSTALL_CEREAL to fix compilation with mips64.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

erlang: upgrade opt 23.0

google-authenticator-libpam: update to 1.09

pciutils: update to 3.7.0

also update the pci.ids

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

haproxy: Update HAProxy to v2.1.7

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>