libnpupnp: update to 5.1.1

Build with meson. Faster.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 36360b7406e3fe62b38d45990689bb524c8d5603)

Merge pull request #22851 from hnyman/irqfix

[23.05] irqbalance: Fix log spam and correct meson version

irqbalance: Fix log spam and correct meson version

Irqbalance 1.9.3 changed the handling of certain errors.
Specifically EINVAL, trying to set an invalid CPU core,
was changed to be a temporary error, causing log spam from
repeated balancing runs in some devices. See log and strace below.
Mark EINVAL as permanent.

Also correct the version in our own meson.build patch.

Log and strace:

Sat Dec  9 10:17:27 2023 daemon.warn irqbalance: Cannot change IRQ 48 affinity: Invalid argument

open("/proc/irq/48/smp_affinity", O_WRONLY|O_CREAT|O_TRUNC|O_LARGEFILE, 0666) = 6
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6ed9000
ioctl(6, TIOCGWINSZ, 0xbeb134e8)        = -1 ENOTTY (Not a tty)
writev(6, [{iov_base="00000001", iov_len=8}, {iov_base=NULL, iov_len=0}], 2) = -1 EINVAL (Invalid argument)
close(6)                                = 0
munmap(0xb6ed9000, 4096)                = 0
clock_gettime64(CLOCK_REALTIME, {tv_sec=1702109847, tv_nsec=340549081}) = 0
sendto(5, "<28>Dec  9 08:17:27 irqbalance: "..., 80, 0, NULL, 0) = 80
writev(1, [{iov_base="Cannot change IRQ 48 affinity: I"..., iov_len=47}, {iov_base="\n", iov_len=1}], 2Cannot change IRQ 48 affinity: Invalid argument
) = 48

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

dnsproxy: Update to 0.60.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3a708afd04cfa297b3749734f5f46a334a831732)

yq: Update to 4.40.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a18841e459195bd6ef27eb1062208f0df97b1d33)

rclone: Update to 1.65.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ac17302410dfa0958494b004e07d427cad7dd9cf)

v2raya: update to 2.2.4.3

Switched back to tar.gz archive to avoid potential permission issue.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 255e244980abf8c028d8ec72e3a15eddc3b63235)

python-cryptography: Update to 41.0.7

41.0.6 included a fix for CVE-2023-49083 (loading certificates from a
PKCS#7 bundle could lead to a null-pointer-dereference and segfault).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5f829ad1625901054c75eee0cd6bc970f57e04b7)

python-cryptography: Update to 41.0.5

This also adds a CPE ID for the package and updates the test.sh script
to use an assert.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c4a223ed8714d43a6e06d9c675447281f8c50127)

Merge pull request #22840 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: bugfixes: getsize/resolver

adblock-fast: bugfixes: getsize/resolver

* do not use standalone grep-package dependent syntax to get the remote
  file size
* various bugfixes to prevent attempts to change/commit if dnsmasq/smartdns
  are not installed

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 496d9b71ab83b1cfcc8c71c894de432ff841616c)

Merge pull request #22808 from jefferyto/ci-fix-helper-openwrt-23.05

[openwrt-23.05] CI: Fix CI_HELPER

iperf3-mt: remove package

This package was intended to provide the experimental multithreading
support for iperf3. With the update to 3.16, multithreading is available
in mainline iperf3. Thus, remove this package.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from 4fb1bdc86c)

iperf3: update to 3.16

notable changes:
- multithreading support

changelog: https://github.com/esnet/iperf/releases/tag/3.16

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from bdb6d2a37f)

fail2ban: Fix compatibility with Python 3.11

This backports 2 commits from upstream[1]; the other 3 are not strictly
necessary. One of the patches has been updated to remove a change to a
regex that does not exist in 0.11.2.

[1]: https://github.com/fail2ban/fail2ban/pull/3267

Fixes: https://github.com/openwrt/packages/issues/22736
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0d9cc4aed202c9126966f7a9e73eaa7f48d51b6b)

dhtd: udpate to 0.2.6

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 75d5ffd1677d4375996ce4d19de13cf4189c1f5f)

Merge pull request #22825 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: add smartdns ipset/nftset support

adblock-fast: add smartdns ipset/nftset support

* bugfix: correct URL to config-update file
* bugfix: check if uci configs exist before chacking for changes
* add support for smartdns ipset-based blocking
* add support for smartfns nftset-based blocking
* disallow non-ascii symbols for smartdns blocking
* add check wherever fw4 restart is needed before calling
  procd_set_config_changed firewall
* improve clean-up code in resolver()
* improve case code for different resolver settings
* modify load_validate_config to allow smartdns.ipset and smartdns.nftset

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 28cd5ecf6e29fedfbd8dfcb63ea5124dac69880c)

uspot: add package

uspot is an OpenWrt-native captive portal system.

It leverages existing OpenWrt tools such as uhttpd, dnsmasq, firewall4,
ucode, without needing any external kernel module.

It can achieve the maximum performance allowed by nftables (flow
offloading works).

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit e6e8e58ae0ca981a2301f8951f6416be3b74fbe5)

AriaNg: bump 1.3.2 to 1.3.6

    Fix the problem that cannot create new task after clearing checksum option
    Other bug fix and user interface optimization

    Support overriding aria2 global settings with empty content when create new download task (#712)
    Other bug fix and user interface optimization

    Update Traditional Chinese translation (#705, thx @ChiaYen-Kan)
    Other bug fix and user interface optimization

    Add check-integrity to task settings tab (#693, thx @raytrap)
    Fix a spelling mistake (#696, thx @rusq)

     fix due to the index.html (1.3.6) cite these 2 png files. To keep the page looks fine without 404, added these 2 png files.

Signed-off-by: Ariel Xiong <ArielHeleneto@outlook.com>
(cherry picked from commit 904438be39d2fb80573ab45ce606a20bb4fbe7e1)

netbird: update to version 0.24.3

Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.24.3

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 2dd3b1b17740740096539dfc88be80e2e7bedcba)

aardvark-dns: update to version 1.9.0

Changelog:
 - update trust-dns to hickory
 - never report an error when the syslog init fails
 - dependency updates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 88ed83a55b28127e336cd4636362e49a0c2104df)

netavark: update to version 1.9.0

Changes:
 - add firewalld-reload subcommand
 - bridge: force static mac on bridge interface
 - dependency updates
 - numerous fixes to test suite

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit aa3abde67e32e193e4fcc23ff6f27190440a3e94)

podman: update to version 4.8.0

Changelog: https://github.com/containers/podman/releases

I also updated containers.conf - it has gotten quite a many new
options. I added crun to depends, every other distribution
seems to ship it with podman, and after all it is a default
OCI Container Runtime for podman anyway and has a super low
footprint, so shouldn't be a problem for anyone running
containers, after all you need some storage for that anyway.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9ab2b8a04dfe250139799a8e51fc36232c3c4145)

crun: update to version 1.12

Changelog: https://github.com/containers/crun/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ff51a0b495148ac143deff5bf4e838a144aaeb8d)

CI: Fix CI_HELPER

Commit 18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10 caused CI_HELPER to be
set to "''" (two single quotes), leading to an error when test.sh tries
to source $CI_HELPER.

CI_HELPER is not set anywhere else and not passed into the container
environment, so there is no need to test if it has a value.

This fixes the value of CI_HELPER.

Fixes: 18d3c529fa4a ("github-ci: error on any shell errors")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 562f5df67fd9436dface35a410e9ce591d9a2894)

node: bump to v18.19.0

Notable Changes
* npm updated to v10
* ESM and customization hook changes
* New node:module API register for module customization hooks; new initialize hook
* import.meta.resolve unflagged
* --experimental-default-type flag to flip module defaults

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

postfix: Fix enabling PCRE support

After the change from PCRE to PCRE2 when enabling POSTFIX_PCRE the
resulting postfix build no longer reports pcre as an available module.
(postfconf -m). This is caused by using the wrong syntax for the
HAS_PCRE build flag (HAS_PCRE2 vs HAS_PCRE=2). This fixes the build flag
to use the correct syntax.

Signed-off-by: Felix Matouschek <felix@matouschek.org>

Merge pull request #22773 from stangri/openwrt-23.05-ngtcp2

[23.05] ngtcp2: update to 1.1.0

Merge pull request #22771 from stangri/openwrt-23.05-nghttp3

[23.05] nghttp3: update to 1.1.0

dhtd: update to 0.2.5

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit fd1892ef063de6b952ee28a76641d370c09205d0)

xray-core: Update to 1.8.6

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c0704be027f73c4c7d437a2f3807240b72228a7a)

netifyd: Updated to v4.4.7

Release notes: https://gitlab.com/netify.ai/public/netify-agent/-/releases/v4.4.7

Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
(cherry picked from commit 41c9155a802727a95d4c110752190c2a24611196)

external-protocol: rename and update cni-protocol

cni-protocol can be used for both cni and netavark
and also for many other things, such as vpn's that
lack customized protocol supports for openwrt as a
general externally managed protocol, so it was due
to rename it.

I also added one extra option, search domain, which
is optional and updated scripts retrieving ip address
and routing information.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit a0d7e404949170ee6f6307b64c8b14a6488f14d4)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e766690d131825d28552b2b5a56243ed8010e721)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 03a69f84bcf95bf2d54aa8c26814dbfe218e706a)

v2ray-core: Update to 5.12.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 11913a72cc7d6adf677b7ce932702be07d3cc0eb)

yq: Update to 4.40.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5fc95dce02547e8b70d24fe57c6e47447253c5fe)

dnsproxy: Update to 0.59.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a678f5891200e674792c42bf57799309bd1408be)

ngtcp2: update to 1.1.0

* Changelog: https://github.com/ngtcp2/ngtcp2/releases/tag/v1.1.0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 05cf7cff10d39429d8faa3bb05afeb3f09aab13b)

nghttp3: update to 1.1.0

* Changelog: https://github.com/ngtcp2/nghttp3/releases/tag/v1.1.0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 353bdb9cf08d3921bcae90d75a84665a329501db)

irqbalance: update to 1.9.3

Update irqbalance to version 1.9.3.
* remove upstreamed patch.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b8298a9b9114b20b1b104e36a40dc5769b26549d)

irqbalance: add banned_cpulist option

Configure CPUs to ignore with `IRQBALANCE_BANNED_CPULIST` environment variable

Signed-off-by: Hentioe Cl <meow.i5.br@gmail.com>
[added PKG_RELEASE bump]
(cherry picked from commit e1ff9619a3c6d3ae9f5cf04a3b6ce8d91d45ad83)

Merge pull request #22748 from stangri/openwrt-23.05-https-dns-proxy

[23.05] https-dns-proxy: fix unintentional call of service_stopped in boot()

Merge pull request #22754 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: bugfix: call to missing function

adblock-fast: bugfix: call to missing function

* fix call to is_number to is_integer
* improve boot()

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit ffb396bca93ba5675ec0f999cf2dc9397b28e138)

ddns-scripts: Fix Route53 provider

This fixes the Invalid Resource Record: FATAL problem: ARRDATAIllegalIPv4Address error message described in https://forum.openwrt.org/t/route53v1-script-error/160068

Maintainer: @chris5560, @maxberger, @dibdot
Tested: Checked on local system
Signed-off-by: Max Berger <max@berger.name>
(cherry picked from commit 86a620f644ae5a57022bddb6d7ee98a263143a35)

ddns-scripts: add new DDNS provider ipnodns.ru

Signed-off-by: Igor Baidasov <igorbay@bk.ru>
(cherry picked from commit a80fec48506260f77e1d325e481c664d0e2d731a)

banip: update 0.9.2-4

* fix: accidently upload a faulty urlhaus feed regex in the former commit

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit e7979d6b04e761e6b01a4eec7144841da1c8d9da)

banip: update 0.9.2-3

* fix the urlhaus regex
* fix a possible init race condition

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1557ddfe83fb1045237fb882b6a80860726b1d0f)

https-dns-proxy: fix unintentional call of service_stopped in boot()

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 2e9f6c44460a48876cd85cde3557ce373693df6b)

sing-box: update to 1.6.6

Changes: https://github.com/SagerNet/sing-box/compare/v1.6.0...v1.6.6

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

rust: Update to 1.74.0

- Bumped libc to 0.2.147 to align deps.
- Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 11279e54eda923782b587cf0a55e30e174ad283f)

Merge pull request #22741 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: bufgix: fix boot()

Merge pull request #22739 from stangri/openwrt-23.05-https-dns-proxy

[23.05] https-dns-proxy: bugfix: prevent erros from boot()

adblock-fast: bufgix: fix boot()

* fix boot()
* reintroduce procd_boot_delay variable to control delay of service
  start on boot
* introduce `check_lists` command to check enabled block-lists for
  domain(s)
* use config_get_bool instead of config_get for boolean options

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 96ad0ab6fda173b27d9392f7c16d1e9bea327662)

https-dns-proxy: bugfix: prevent erros from boot()

* fixes https://github.com/openwrt/packages/issues/22674
* rename resolver_health_check to is_resolver_running for readability
* reorder functions in the init file by name

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f519b68401b68f011091e83badadb54a43eae33d)

haproxy: update to v2.8.4

- Update haproxy PKG_VERSION and PKG_HASH
- See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog

Signed-off-by: Christian Lachner <gladiac@gmail.com>

dhtd: update to 0.2.4

* add option to execute a script for each result

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 0f3a2070dc85fc401efe53270c39e6a1e5437e17)

acme-acmesh: Update to 3.0.7

Signed-off-by: Kevin White <kwhite@kevbo.org>

dnsproxy: Update to 0.59.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 1ce0e4c14bb4b0eb95a8ae0b07fc28b3591d47e3)

tailscale: Update to 1.54.0

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit facf954779284217c1d82f6344d7fa695972bb2e)

tailscale: Update to 1.52.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 7e9ed3b117ce5fc1dbd46c19ecde14e4de655056)

tailscale: Update to 1.50.1

https://github.com/tailscale/tailscale/releases/tag/v1.50.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
(cherry picked from commit 5cd966ca4f44f9c98fe036cc4fd4933b695762bf)

gummiboot: release bump

Changes:
 - fixes conflicts with EFI headers mentioned in issue #22433

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 339360045328a3338c08dfe39e6105dac886bf4f)

netbird: update to version 0.24.2

Release notes: https://github.com/netbirdio/netbird/releases/tag/v0.24.2

Also fixes issue of not being able to build with musl (>1.2.4)

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 7b3d033ab651dd11e0db5fb099d106c9e09a2dc6)

netbird: update to 0.23.9

Changelog:
 - Add Pagination for IdP Users Fetch by @bcmmbaga in #1210
 - Rework peer connection status based on the update channel existence by @surik in #1213
 - Fix nil pointer exception in group delete by @pappz in #1211
 - Fix/key backup in config script by @pappz in #1206

Full changelog: https://github.com/netbirdio/netbird/compare/v0.23.8...v0.23.9

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 53dc7146f4623a99b62da5918b3f4ce002697a32)

netbird: update to 0.23.6

A lot of changes since previous packaged openwrt version of netbird,
changes available at: https://github.com/netbirdio/netbird/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 1efe76cee40e86153a6369628ab9dd34253369de)

dhtd: update to 0.2.1

Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 0e863b3f1f02597180d64d91dcfb9b88607969d3)

dhtd: new package

Co-authored-by: Tianling Shen <cnsztl@gmail.com>
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 6dc262aa41bffd74a7f46b2bfd2092d683734bf7)

crowdsec: new upstream release version 1.5.5

Update crowdsec to latest upstream release version 1.5.5

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Package tested. not able to test run due to limited space (package is big)

Description: update to latest version of upstream
(cherry picked from commit 6ff496d113a69a1a6a55cb0ac0ae46241007dddc)

Merge pull request #22670 from jefferyto/freeradius3-fix-pcre-openwrt-23.05

[openwrt-23.05] freeradius3: Fix build when pcre is present

Merge pull request #22668 from commodo/pymysql_sha256_23_05

[23.05] pymysql: add meta-package for sha256 support

pymysql: add meta-package for sha256 support

Replace the PYTHON3_PYMYSQL_SHA_PASSWORD_SUPPORT option, which is
causing circular dependencies, with a meta-package that installs both
python3-pymysql and python3-cryptography.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 79b173a0c5e7cbb610a510ab759af1de488196c5)

freeradius3: Fix build when pcre is present

If pcre is built before freeradius, then freeradius' configure will
detect pcre and freeradius will be built with pcre functionality
enabled. This causes a "missing dependencies" error at the end of
package build.

This passes --without-pcre to configure to disable this autodetection.

This also removes the dependency on libpcre2 as freeradius v3 does not
have support for pcre2.

Fixes: 19ec30255f13 ("freeradius3: switch to pcre2")
Fixes: https://github.com/openwrt/packages/issues/22574
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 92aadf7e4acfaf89ef83b43244027e10f7f80d1f)

golang: Update to 1.21.4

Includes fixes for CVE-2023-45283 and CVE-2023-45284 (path/filepath:
insecure parsing of Windows paths).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0ebc7159818acf40a8eada46058312d2aff0281d)

Merge pull request #22656 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: bugfix: ensure downloaded block-lists end with newline

adblock-fast: bugfix: ensure downloaded block-lists end with newline

* ensure downloaded block-lists end with newline
* turn free/total RAM checks into functions calls

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 3787b4135584ad2a6510dbd883406d30575dce5c)

Merge pull request #22547 from wigyori/openwrt-23.05-riscv

[23.05] perl: add support for riscv64

Merge pull request #22620 from stangri/openwrt-23.05-adblock-fast

[23.05] adblock-fast: update to 1.0.1-1

banip: update 0.9.2-2

* support backup/restore for remote allowlists
* report the used log variant in status message

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 2411bcffaf273b901e61193b18f1ca7355dc832f)

banip: release 0.9.2-1

* the log file monitor now supports standard log files used by other log daemons like syslog-ng
  Set 'ban_logreadfile' accordingly, by default it points to /var/log/messages
* removed logd dependency, closes #21932

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c4e814074003a1d45bb583e98cac435575e09ca4)

tang: set the right permissions to keys

Resolves: #22632

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

v2raya: Update to 2.2.4.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit eabb6b8a747acb2292b81ff59417310f12e319f7)

v2ray-core: Update to 5.11.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 56e29ed7daf39b683be49f06cb4bc065b2bdfd35)

adblock-fast: update to 1.0.1-1

* update Makefile copyright info
* organize functions shared between the init script, uci-defaults and
  luci app in alphabetical order
* update error, warning and status messaging
* use single quotes instead double quotes for static text labels
* better warning for missing recommended packages
* rename dns function to resolver to better reflect its purpose
* improve resolver cleanup code
* move _resolver_config function inside resolver function to improve code readlibity
* rename _process_file_url to process_file_url_wrapper to better reflect its purpose
* add preflight check for available RAM vs total size of block lists
* move _config_add_url_size function inside adb_sizes function to improve code readlibity
* remove uci validation from status_service function to improve performance
* source init script from uci-defaults to include shared functions

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 11df396a18733111a0801d3967142ec0014b564b)

Merge pull request #22611 from mhei/23.05-php8-update-to-8.2.12

[23.05] php8: update to 8.2.12

php8: update to 8.2.12

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 8d6a63df8ad0b8bdb4073e20774f34ae26791c5d)

php8: fix linking on riscv64 platform (again)

The initial fix was done in a2e76e497.
Later we could revert it with 5779ae4c5 since a global fix
in gcc was deployed.

But now, PHP itself applied a workaround/fix in 8.2.8,
so that we now require the initial fix again.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 43b10ad9c1c288e3bc034a1c2be3bb0bd2749634)

crowdsec-firewall-bouncer: add ujail

* added ujail for crowdsec-firewall-bouncer
* set nice to reduce priority for process

Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.0

(cherry picked from commit a8df73ce7277134c5bd318b3e63cc14e2c70e9a7)

perl: add support for riscv64

Required by sifiveu and upcoming riscv targets.

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
(cherry picked from commit cf59047d3c3f07baed76751e19f06db9c6541800)

nmap: backport fix to be able to compile it with OpenSSL 1.1

The latest nmap version 7.9.3 currently fails to compile with OpenSSL 1.1 [1],
it required to backport upstream patch to fix the compilation. [2]

[1] https://github.com/nmap/nmap/issues/2516
[2] https://github.com/nmap/nmap/commit/d6bea8dcdee36a3902cece14097993350306f1b6

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2c87004346f9456cfd5cc58559ab8ff4e94cd773)

iperf3-mt: new package

This adds a multithreaded variant of iperf3 as a package. This variant
is still experimental, developed in the mt branch of the iperf
repository and expected to be merged when it is considered stable.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from commit f369a2aaa9467c4ab91afeee382fe20088711735)

Merge pull request #22597 from muink/dnsproxy-23.05

[23.05] dnsproxy: add more options

dnsproxy: new features

1. Add new options:
  --http3    Enable HTTP/3 support (H3 first)
  --timeout  Timeout for outbound DNS queries to remote upstream servers in a human-readable form (default: 10s)

2. Allows listen on multiple interfaces and ports

Signed-off-by: Anya Lin <hukk1996@gmail.com>
(cherry picked from commit 47b4ebc5cb5d3bf24c8a15a8f5cb9a99faed5e1a)

aircrack-ng: backport patch and move package to pcre2

Backport patch merged upstream for PCRE2 support and move package to
pcre2.

Also add an additional patch pending to fix linking both pcre and pcre2
if autotools detect both library. (aircrack-ng prefer pcre2 in presence
of both)

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit cb1f7c7ee4e5e0978a3004a94af8016c85791eed)

aircrack-ng: bump to release 1.7

Bump aircrack-ng to release 1.7

Changelog from [1]

Airdecap-ng: Endianness fixes
Airdecap-ng: Output PCAP as little endian
Airodump-ng: Fixed blank encryption field when APs have TKIP (and/or CCMP) with WPA2
Airodump-ng: Updated encryption filter (-t/--encrypt) for WPA3 and OWE
Airodump-ng: Fixed out-of-order timestamp captures
Airodump-ng: Ignore NULL PMKID
Airodump-ng: Fixed dropping management frames with zeroed timestamp
Airodump-ng: Fixed sorting where sometimes it started with a different field
Airodump-ng: Allow setting colors only in AP selection mode
Airodump-ng: Fix crash on 4K Linux console
Airodump-ng: Fixed issue where existing clients not linked to an AP become hidden when hitting 'o'
Airodump-ng: Allow use of WiFi 6E 6GHz frequencies
Airodump-ng: Look for oui.txt in /usr/share/hwdata
Airgraph-ng: Fixed graphviz package conflict
Airgraph-ng: Fixed downloading OUI with python3
Airgraph-ng: Ensure support/ directory is created when installing
Aircrack-ng: Fixed static compilation
Aircrack-ng: Fix handshake replay counter logic
Aircrack-ng: Handle timeout when parsing EAPOL
Aircrack-ng: Fixed WEP display
Aircrack-ng: Fixed spurious EXIT messages
Aircrack-ng: Improved handshake selection by fixing EAPOL timing and clearing state
Aircrack-ng: Ignore NULL PMKID
Aircrack-ng: Added Apple M1 detection
Aireplay-ng: In test mode, detect tampering of sequence number by firmware/driver
Aireplay-ng: Fixed incorrectly rewritten loops affecting fragmentation attack, and in some cases, SKA fake auth
Aireplay-ng: Fixed a bunch of instances where packets had their duration updated instead of the sequence number
Airmon-ng: Fix avahi killing
Airmon-ng: rewrite service stopping entirely
Airmon-ng: Codestyle fixes and code cleanup
Airmon-ng: Added a few Raspberry Pi hardware revisions
Airmon-ng: Fixes for 8812au driver
Airmon-ng: Fix iwlwifi firmware formatting
Airmon-ng: Remove broken KVM detection
Airmon-ng: Show regdomain in verbose mode
Airmon-ng: Updated Raspberry Pi hardware revisions
Airmon-ng: Document frequency usage
Airmon-ng: Add a sleep to help predictable names due to udev sometimes renaming interface
Airmon-ng: Added warning for broken radiotap headers in kernel 5.15 to 5.15.4
Airmon-ng: shellcheck fixes
Airmon-ng: support systemctl as some systems don't support 'service' anymore
Airmon-ng: Fixes for pciutils 3.8, backward compatible
Airbase-ng: use enum for frame type/subtype
Airbase-ng: remove a few IE in association responses
Besside-ng: Support and detect all channels in 5GHz in Auto-Channel mode
OSdep: Search additional IE for channel information
OSdep: Android macro fixes
Patches: Add missing patches that were on https://patches.aircrack-ng.org but not in repo
Patches: Updated freeradius-wpe patch for v3.2.0
Patches: Updated hostapd-wpe patch for v2.10
Patches: Added docker containers to test WPE patches
Autotools: make dist now creates VERSION file
Autotools: Added maintainer mode
Autotools: Initial support for Link Time Optimization (LTO) builds
Integration tests: Added a new test, and improved some existing ones
Airgraph-ng: switch airodump-join to Python 3
Manpages: Fixes (typos, tools name, etc.) and improvements
README: Updated dependencies and their installation on various distros in README.md and INSTALLING
README: Fixed typos and spelling in README.md and INSTALLING
Packages: Packages on PackageCloud now support any distro using .deb and .rpm, however, it requires reinstalling repo (BREAKING CHANGE)
General: Fix compilation with LibreSSL 3.5
General: Fix issues reported by Infer
General: Updated buildbots
General: Add Linux uclibc support
General: Compilation fixes on macOS with the Apple M1 CPU
General: Removed TravisCI and AppVeyor
General: Use Github Actions for CI (Linux, Win, macOS, code style, and PVS-Studio)
General: Added vscode devcontainer and documentation
General: Fix warnings from PVS-Studio and build with pedantic (See PR2174)
General: Shell script fixes thanks to shellcheck
General: Fixes for GCC 10 and 11
General: Fixed cross-compilation
General: Code refactoring, deduplication, cleanup, and misc code improvements
General: Coverity Scan fixes, which includes memory leaks, race conditions, division by 0, and other issues
General: PVS Studio improvements,fixes and updates
General: Code formatting/style fixes
General: Various fixes and improvements (code, CI, integration tests, coverity)
General: Update bug reporting template and update the process

[1] https://aircrack-ng.blogspot.com/2022/05/aircrack-ng-17.html
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 41922f33b5f2cbc58e504469cdcd14ffa33ee5f3)

Merge pull request #22578 from lowjoel/backport-strongswan-5.9.11

strongswan: Update to 5.9.11

pyodbc: Fix segmentation fault

4.0.36 included a change to decimal parsing[1] that requires the decimal
module. Trying to load the pyodbc module without python3-decimal
installed would lead to a segmentation fault.

This adds python3-decimal as a dependency.

This also adds python3-uuid as a dependency as the module can accept and
return uuid objects[2].

[1]: https://github.com/mkleehammer/pyodbc/commit/6b107a2bcaf7379e5ba182007b6ecae1bc2fc931
[2]: https://github.com/mkleehammer/pyodbc/commit/2ad7a9ced7c9c33232c173668c0830a484cc92f3

Fixes: f02f3ee8c768 ("pyodbc: Update to 4.0.39")
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 668a0f9dd8baa2fb6275ff0e022b6f1bf390b7c2)

speedtestcpp: update to 1.20.3

changes:
 - fixes a bug where science notations (exponentials) are displayed during tests during high speed bursts

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 58d8f9272139f29ec63f8fdde74a835fe031dece)