Includes fixes for:
* CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr
* CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon
  as a query args separator

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Fixes spurious version bump done in 5c8fb42 and reported in #14815 and
switches source proto from git to codeload.

Upstream has changed daemon binary name to `/usr/sbin/mini-snmpd`.
Package and config/init script name stays unchanged.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>

Changes:
- add python-urllib dependency

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Hak <jan.hak@nic.cz>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jan Hak <jan.hak@nic.cz>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

ksmbd and ksmbd-tools 3.3.5

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>

A treewide script ran to find dirty patches, this was the only packages
found with issues. From now on the CI should no longer return false
positives on dirty patches.

Signed-off-by: Paul Spooren <mail@aparcar.org>

libwebp + libgd version bump

lttng-tools: fix linking with full language support enabled

Use AUTORELEASE to avoid having to bump it manually.

Remove old patch for kernel 4.14 compatibility.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

git-lfs: add new package

Remove upstreamed patch.

Use AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch to new upstream and switch package name.

Further disable features to avoid extra dependencies.

Build with PIC to avoid build failures with mips16.

Remove no longer needed patch. Upstream fixed it differently.

Use AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove upstreamed patches. Add one to fix finding libwebp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch to AUTORELEASE for easier changes.

Fix not having all of the libraries.

Remove upstream patches and refresh other one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove upstreamed patches.

Use autorelease to avoid bumping the release manually.

Fix bad linker variable on glibc.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

std::round was unavailable because of a wrong configure var from the
uClibc days. Fixed upstream with 1647790ae6

Refreshed patches with make package/sane-backends/refresh

Signed-off-by: Rosen Penev <rosenp@gmail.com>

There was a typo in the linker flags.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

zerotier: bump to 1.6.4

treewide: Run refresh on all packages

Signed-off-by: Moritz Warning <moritzwarning@web.de>

Fix typo Yuibco -> Yubico

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

* Changed from DROP to REJECT to be consistant with other firewall rules

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

* Moved logic out of config writing
* Made default config only specify OpenWrt dictated defaults
  Otherwise, docker defaults can be assumed

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Required to make CI happy.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

This fixes fallout after d18692c.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

openconnect: fix dependencies to iconv/intl (fixes #14734)

This fixes the issue raised after d18692c (libxml2: allow building with iconv support).

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Major changes for version 3.3.5 are:
- Rename "streams" parameter to "vfs objects = streams_xattr".
- Enable smb2 leases by default.
- Ignore ksmbd.subauth creation failure.
- Fix bugs that related to guest ok = yes.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>

Major changes for version 3.3.5 are:
- Add support for version 4 dos attribute structure of samba.
- Implement maximal allowed desired access.
- Fix several error handling.
- Fix a few smbtorture failures.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>

banip: update to 0.7.3

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

adguardhome: bump to 0.105.1

* fix search string/pipe preparation for the background service
* fix IPSet maxelem limitation, made it more flexible
* fix potential error during resume action
* add Cisco Talos IP blacklist
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

We should be using "00" to deal with alphabetical order.

Fixes: e9a126c145 ("rng-tools: start as early as possible")
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

rng-tools: start as early as possible

gost_engine: Add GOST2012 Engine for OpenSSL

Signed-off-by: Artur Petrov <github@phpchain.ru>