ddns-scripts: make WGET_SSL executable

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Edi Turn <yyxstter@gmail.com>

Fixes: CVE-2021-3156 (known as Baron Samedit)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

dawn: use autorelease feature

Package version is automatically increased as described here:
https://github.com/openwrt/packages/issues/14537

Signed-off-by: Nick Hainke <vincent@systemli.org>

The Alpine Package Keeper is the default package manager for Alpine
Linux. They manage their own repositoriy with thousends of packages and
as musl is used for compilation, their binaries can directly run on
OpenWrt.

Signed-off-by: Paul Spooren <mail@aparcar.org>

Use PKG_INSTALL for consistency between packages.

Use PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

netopeer2: merge-config: listen on ipv6 and ipv4

* The default local-adress makes Netopeer2-server listen on ipv4 only.
We change it to :: in order to listen on ipv6 as well as ipv4.

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

nfs-kernel-server: update to 2.5.2

atop: update to 2.6.0

frr: update 7.5 to latest backports

ksmbd-tools: fix #13758

samba4: update to 4.13.4

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Return with "-1" if parsing fails in read function.
Reduce buffersize of splitstring function.

Signed-off-by: Nick Hainke <vincent@systemli.org>

* fix for possible exploit #13758
* sanetize all external template/config inputs
* fix some shellcheck warnings

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 4.13.4

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Fix ddns provider

Signed-off-by: Gerald Hansen <gerald.hansen@posteo.de>

I checked the hostname for existing DNS A and AAAA entries and these
ones didn't have an entry.

Signed-off-by: Gerald Hansen <gerald.hansen@cloud.ionos.com>

As the default uclient-fetch doesn't support authentication header
and the ddns provider myonlineportal.net support also username and
passwort as url parameter this can be changed.

Signed-off-by: Gerald Hansen <gerald.hansen@cloud.ionos.com>

pthsem: try to fix ARC compilation

nextdns: Update to version 1.10.1

libmaxminddb: update to version 1.5.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Getifaddrs() is not working all the time (e.g. wireguard interfaces).
Instead we use if_nameindex() syscall as suggested in:
 https://stackoverflow.com/a/45796495/8474618

Signed-off-by: Nick Hainke <vincent@systemli.org>

Signed-off-by: Vladimir Ulrich <admin@evl.su>

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

golang: Update to 1.15.7

uMurmur: Update to 0.2.19. Patches required for 0.2.17 merged upstream.

libqmi: bump version

libmbim: bump version

owipcalc: fix contains not respect default route

This includes fixes for:
* CVE-2021-3114: crypto/elliptic: incorrect operations on the P-224
  curve
* CVE-2021-3115: cmd/go: packages using cgo can cause arbitrary code
  execution on Windows

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Martin Johansson <martin@fatbob.nu>

Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>

Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>

yq: Update to v4.4.1

Add Eoip packege

add eoip package,this can create ethernet
tunnels compatible with Mikrotik EoIP tunnel.
At current moment it is easiest way
to create stateless tunnel with Mikrotik.

Signed-off-by: Bogdan Shatik <bogdikxxx@mail.ru>

- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

ooniprobe: update to version 3.4.0

In IPv4 the default route can be written as
 0.0.0.0/0

In IPv6 the default route can be written as
 ::/0

If u try
  owipcalc 0.0.0.0/0 contains 1.1.1.1
or
  owipcalc ::/0 contains ::1
owipcalc will respond with 0 meaning that the "default prefixes" do not
contain the routes.
That is why we check now for 0 prefix.

Furthermore, if the prefix is 0, i will be 16. We will access a negative
array entry in the line:
 uint8_t net1 = x->s6_addr[15-i] & m;

Divide by % 16 to prevent i becoming 16:
 uint8_t i = ((128 - a->prefix) / 8) % 16;

Signed-off-by: Nick Hainke <vincent@systemli.org>

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>