switch to codeload for latest patches applied to stable branch

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

docker-ce: Added firewall.extra_iptables_args

openvpn: import from base

graphicsmagick: fix compilation with GCC 10

snort: update to 2.9.17

lighttpd: meson.build linker fix for TLS modules

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

Major change for version 3.3.1 are:
* Fix a segfault issue in ksmbd.mountd.
* Reorganize ndr write functions.

Major changes for version 3.3.0 are:
* Add samr and lsarpc RPC support.
* Generate subauth values for domain.
* Add Kerberos support.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>

Major change for version 3.3.1 are:
- Fix insmod failure if CONFIG_FS_POSIX_ACL is not set in config.

Major changes for version 3.3.0 are:
- Add ACLs support
- Add Kerberos support
- Add query info/query dir/statfs for smb3.1.1 posix extension.
- Fix warnings from checkpatch.pl
- Fix racy issue reported and warnings from KSAN by OpenWRT.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>

miniupnpd: Pass ipv6 addr to ipv6_listening_ip

Unlike ipv4, this option is supposed to be an IP address, otherwise, an
error occurs on startup:

    can't parse "br-lan" as valid IPv6 listening address

Signed-off-by: Jitao Lu <dianlujitao@gmail.com>

syslog-ng: update to version 3.30.1

Updated live555 to 2020.11.29.

Backported upstream patch to fix compilation.

Fixed up LIVE555 CFLAGS to avoid passing twice.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

open-vm-tools: update to 11.2.0

protobuf: update to 3.14.0

pdns-recursor: update to 4.4.1

unixodbc: update to 2.3.9

tcsh: update to 6.22.03

wavemon: update to 1.9.2

This adds basic checks for php7 core and module packages.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

sumo: update to 1.7.0

unrar: update to 6.0.2

udpxy: update to 1.0-25.0

lighttpd: build and bugfix patches

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Add PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove upstreamed patch

Refresh others.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Add *BUILD_PARALLEL for faster compilation.

Rearrange variable for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove CMAKE_INSTALL as there is no need for InstallDev.

Remove unneeded patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove pointless CMAKE_INSTALL. There's an InstallDev section.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Bump version also in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

OpenVPN recommends disabling compression, as it may weaken the security
of the connection. For users who need compression, we build with LZ4
support by default. LZO in OpenVPN pulls in liblzo at approx. 32 kB.

OpenWrt users will no longer be able to connect to OpenVPN peers that
require LZO compression, unless they build the OpenVPN package themselves.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>

New features:
* Per client tls-crypt keys
* ChaCha20-Poly1305 can be used to encrypt the data channel
* Routes are added/removed via Netlink instead of ifconfig/route
  (unless iproute2 support is enabled).
* VLAN support when using a TAP device

Significant changes:
* Server support can no longer be disabled.
* Crypto support can no longer be disabled, remove nossl variant.
* Blowfish (BF-CBC) is no longer implicitly the default cipher.
  OpenVPN peers prior to 2.4, or peers with data cipher negotiation
  disabled, will not be able to connect to a 2.5 peer unless
  option data_fallback_ciphers is set on the 2.5 peer and it contains a
  cipher supported by the client.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

crelay: backport patch for use gpio >255

libfmt: bump to release 7.1.3

zerotier: update to 1.6.2

Signed-off-by: Othmar Truniger <github@truniger.ch>

Signed-off-by: Pawel Dembicki <paweldembicki@gmail.com>

Signed-off-by: Moritz Warning <moritzwarning@web.de>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>