Signed-off-by: Michael Heimpold <mhei@heimpold.de>

openldap: update to 2.4.57

libpfring: update to 7.8.0 (for kernel 5.10 compatibility)

Fixes:

  * CVE-2020-36221
  * CVE-2020-36222
  * CVE-2020-36223
  * CVE-2020-36224
  * CVE-2020-36225
  * CVE-2020-36226
  * CVE-2020-36227
  * CVE-2020-36228
  * CVE-2020-36229
  * CVE-2020-36230

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Add patch to fix compilation with kernel 5.10

Also submitted upstream:
https://github.com/ntop/PF_RING/pull/687
https://github.com/ntop/PF_RING/pull/688

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

libarchive: update to 3.5.1

libgpg-error: fix build error on macOS

Python bindings for libuci, useful for writing ansible modules to manage OpenWRT systems.
Reused Makefile from upstream: https://gitlab.nic.cz/turris/turris-os-packages/-/blob/develop/lang/python-uci/Makefile

Signed-off-by: Erik Larsson <who+github@cnackers.org>

src/gen-lock-obj.sh runs in /bin/sh which does not support echo -n on macOS,
and generates garbage. Resolved by using printf which is posix compliant.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

This includes a backport of quota commit 02b222a3, which removes the
use of reallocarray. The musl C library does not provide reallocarray.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: Johannes Morgenroth <jm@m-network.de>

udpspeeded: add missing libatomic dependency

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

Drop obsolete patches

 - 001-no-tests.patch
 - 002-fix-cross-compilation.patch

Move several user-executable binaries from /usr/sbin to /usr/bin per
upstream.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

isc-dhcp: add multihoming domain

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

generate-ipv6-address: use autorelease feature

libradiotap: use autorelease feature

libuwifi: use autorelease feature

sipcalc: use autorelease feature

docker-compose: Update to version 1.28.2

Upstream Backport.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

collectd: refactor snmp6

keepalived: update to version 2.1.1

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

Bugs:

- Revert to Python 3.7 bump for Linux static builds

- Add bash completion for docker-compose logs|up --no-log-prefix

Miscellaneous:

- CI setup update

Signed-off-by: Javier Marcet <javier@marcet.info>

socat: allow more complex command line options

Current implementation of socat's init service doesn't allow to run more
complex configurations. As an example there's no possibility to execute
following command:

  socat TCP-LISTEN:8080,fork,reuseaddr,bind=192.168.1.1 \
    EXEC:"/sbin/ip netns exec somenetns socat STDIO TCP:10.0.0.1:80"

In such command the first line is argv[1] and the second line is
argv[2]. SocatOptions config option is a string. As as a consequence of
this each word will be passed as a separate argv element. Socat won't be
able to parse arguments correctly.

In order to mitigate this issue, we can also accept SocatOptions as a
list of strings. Following config file will work correctly:

config socat 'tunnel_8080_into_somenetns'
	option enable '1'
	list SocatOptions 'TCP-LISTEN:8080,fork,reuseaddr,bind=192.168.1.1'
	list SocatOptions 'EXEC:"/sbin/ip netns exec somenetns socat STDIO TCP:10.0.0.1:80"'

While we're at it, pass stdout and stderr into logread.

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

ddns-scripts: make WGET_SSL executable

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Edi Turn <yyxstter@gmail.com>

Fixes: CVE-2021-3156 (known as Baron Samedit)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

dawn: use autorelease feature

Package version is automatically increased as described here:
https://github.com/openwrt/packages/issues/14537

Signed-off-by: Nick Hainke <vincent@systemli.org>

The Alpine Package Keeper is the default package manager for Alpine
Linux. They manage their own repositoriy with thousends of packages and
as musl is used for compilation, their binaries can directly run on
OpenWrt.

Signed-off-by: Paul Spooren <mail@aparcar.org>

netopeer2: merge-config: listen on ipv6 and ipv4

* The default local-adress makes Netopeer2-server listen on ipv4 only.
We change it to :: in order to listen on ipv6 as well as ipv4.

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

nfs-kernel-server: update to 2.5.2

atop: update to 2.6.0

frr: update 7.5 to latest backports

ksmbd-tools: fix #13758

samba4: update to 4.13.4