modemmanager: bump to 1.16.6

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 5bfe8ed2dffb8b8af37b78d8399b19344ba49311)

libqmi: bump to 1.28.8

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 4e67af0cc1f96217a483e5196edf06cb1d216573)

libqmi: bump to 1.28.6

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 875e7a759de89cb86f44cace9622549d7e9855af)

lxc: remove legacy cgroups from common.conf

I am unaware of any kernel currently provided that retains cgroup v1 support.
This patch removes these lines in /usr/share/lxc/config/common.conf to allow
for error free usage.

Providing common.conf as-is will result in failure to start. One solution is to
comment out the legacy lines.[1] This requires users to either provide a custom
version of this file on their builds or to manually edit it with each update.

Since many do not build their own, the first option is not available to them.
Manually editing the file with each update will cause a failure to start
containers set to auto-start upon rebooting into the update.

1. https://forum.openwrt.org/t/openwrt-arm64-quick-lxc-howto-guide-lms-in-debian-system-in-lxc-container/99835

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 049cf1e1b0fef97f98ad77a8a26d0fa1b6dad174)

syncthing: update to 1.18.2

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9a172a52fbd293c742d02cdb49f77ddf06928c7f)

python-astral: update to version 2.2

Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1deaf6dbbeb1247ff34c1b569ccd922a0e656511)

fail2ban: patch CVE-2021-32749

* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 273a6d19c5aa29b84873a765a942b204b4249200)

Merge pull request #16635 from mhei/21.02-php7-update

[21.02] php7: update to 7.4.23

Merge pull request #16633 from 1715173329/yq-2102

[openwrt-21.02] yq: Update to 4.13.0

php7: fix config file upgrade issue (fixes #14623)

The addressed issue is related to #6893 as its resolution
is actually causing the problem.

When changing the priority of the config file it happens
that after a sysupgrade the previous file is restored
and the new file is added, ending up in a situation
like this:

/etc/php7/15_openssl.ini
/etc/php7/20_openssl.ini

Causing a double extension=openssl.so to be parsed,
which is not appropriate and leads to error message.

The same problem might also occur for mysqli since there
was also a priority change - let's take care about this
at the same time.

The solution is to remove one of the files. Since it is
a configuration file, the user might have adjusted it, so
lets just use the previous version to replace the new
installed version.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit e51a04930153dad8f7bf74fbde4cfd8e8bd4d0f8)

php7: update to 7.4.23

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fb9e05615b40a8015168d8e6d8ab1cb9eb636fd5)

yq: Update to 4.13.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 993315f90a0f632803e5d0da923f000176ff7818)

travelmate: update to 2.0.7-2

* removed the newly introduced wpa-supplicant dependency as it makes trouble with a circular dependency

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 40f1071a393a6606eca262b386d2266b4fa931b4)

openpyxl: bump to version 3.0.8

And switch to AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

adguardhome: bump to 0.106.3

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.3

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 3626cc96f8c0bb91078e2be5f793de99d770441f)

adguardhome: bump to 0.106.2

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.2

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit b7048446586ce34ad958381d89dd67bcc80b7665)

adguardhome: bump to 0.106.1

* Create working directory when it is not present. Apparently
  some recent change made adguardhome fail to start when working
  directory is missing.
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.1

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 350ba8cbbd7d24dfabd7ecdec6f264265b37d368)

adguardhome: bump to 0.106.0

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.0
* Add build time LDFLAG introduced in commit [1].

[1]: https://github.com/AdguardTeam/AdGuardHome/commit/1d07afb30ee9ff00de72182200b7e1c6d1606d77#diff-82ef468ec5547f1ed424776755a7f87dfec4eba9838d2c2ac02c9881bb67d737R67

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit 48bf0f8e81dc10d63ac1072ae3e17915f7fe58ab)

adguardhome: bump to 0.105.2

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.2

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit d12c6658e4419637f703f2978a83fb849f315a76)

adguardhome: bump to 0.105.1

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.0
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.1
* Add node-yarn/host dependency as it is needed since [1].
* Adjust LDFLAGS to the new ones introduced in [2].
* Invoke targets from make instead of manually running npm and yarn.
* Replace GO_PKG_EXCLUDES with GO_PKG_BUILD_PKG as our intention is to
  build only one specific package (a cosmetic change).

[1]: https://github.com/AdguardTeam/AdGuardHome/commit/5e20ac7ed5de861ea5c945d1775f75312d62b69f#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R140
[2]: https://github.com/AdguardTeam/AdGuardHome/commit/0d67aa251d18f8ab47cfd90072e9d0387dff4224#diff-82ef468ec5547f1ed424776755a7f87dfec4eba9838d2c2ac02c9881bb67d737R60

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
(cherry picked from commit d208610b8d56be1845b26605c34589ed79414bd3)

Merge pull request #16621 from jefferyto/golang-1.17.1-openwrt-21.02

[openwrt-21.02] golang: Update to 1.17.1

Merge pull request #16627 from acooler15/add_parted-21.02

[21.02]parted: add new package

autoconf: fix shebang

Fix shebang errors for autom4te, autoreconf, autoheader, autoscan, autoupdate, ifnames.

resolve openwrt/packages#16604

Signed-off-by: Ren Zongjia <acooler15@foxmail.com>
(cherry picked from commit 72f3dfcb0e1c2acb225d282c6968e42852df6cef)
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>

parted: add new package

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 5ad56ca3407973980109a42c66995cd31fe1f456)
Signed-off-by: Ren Zongjia <acooler15@foxmail.com>

golang: Update to 1.17.1

Includes fix for CVE-2021-39293 (archive/zip: overflow in preallocation
check can cause OOM panic).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit aa96b8408f84a42142e44e930191a33143914b0d)

banip: update 0.7.10-3

* Updated firehol ipset URLs

Signed-off-by: Richard Gering <rg4github@dutchies.us>
(cherry picked from commit e803f3d75f383929426b4e17331b9d5f80ffdcc8)

travelmate: update to 2.0.7

* add wpa-supplicant package dependency
* removed no longer working 'db-bahn.login' and 'wifionice.login' auto-login scripts
* added the new 'wifibahn.login' script for auto-logins to captive portals WIFI@BAHN (DE),
  run tested on a single ICE (station logins are currently unsupported!)
* vodafone.login prepared to support free/time limited logins (still WIP!)
* change return code handling in login scripts and travelmate
* refine f_wifi function
* fix a few conercase issues

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 3167e00aff44c1ae5172f4c5547b3136caef6088)

Merge pull request #16524 from paper42/hplip-no-aslr-21

[21.02] hplip: add a patch to fix PIE builds

ntfs-3g: patch CVE-2019-9755

* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

python3: bump version to 3.9.7

Refreshed patches.
And apply hack for line-endings in pep517 (from pip).

Hack comment:
  # FIXME: [1] get rid of this asap; 'patch' doesn't like Windows endings, and this file is full of them...
  #        I actually tried this in a number of ways and the only way to fix this is to implement
  #        a poor-man's dos2unix using sed.
  #        The issue is with the pip package; it seems that it throws in some Windows line-endings
  #        and 'patch' won't handle them. So, we do a "dos2unix" and then patch.
  #        We can get rid of this once this is solved upstream and in pip:
  #            https://github.com/pypa/pep517/pull/130

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 26988f905f1f78ee0fd67dc90c3c7b112ac1817d)

fail2ban: fix hotplug when disabled

Avoid restarting fail2ban by hotplug when the service is disabled.
Related issue: https://github.com/openwrt/packages/issues/16601

Signed-off-by: Vladislav Grigoryev <vg.aetera@gmail.com>
(cherry picked from commit 57aab9f1d15fd694ffdf6a83d73d15497d1a5f08)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>

django: bump to version 3.2.7

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

fail2ban: fix package for fail2ban v0.11.2

fail2ban v0.11.2 package version 2

Following PR #15098, add fixes to build fail2ban package:
- remove use of fail2ban-python (directly use python3 in script)
- remove link to python3 in /usr/bin (break the package build)
- remove python-tests (reduce the package size)

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 56a084d3922c84e936ef660a67a2156439223393)

fail2ban: initial package of fail2ban version 0.11.2
python3-pyinotify: initial package version 0.9.6 of pyinotify for python3

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit bcb8775e48eb8f99a76b05a8539a0140513e4158)

nextdns: Update to version 1.37.2

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

unbound: backport fix for permission denied error

Currently there is a problem with log spam when ipv6 network
is dropped. Fix this by backporting a patch to silence these errors
when verbose logging is not enabled.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit f2f05088a5a12bf9963b83d9613bb96335a27e66)

unbound: update to 1.3.2

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 17c25269d75c5cfedb68aec20d2f9cffa977bc62)

unbound: fix build on non-linux systems

Override places that call uname to detect target features

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit cc1d0aa3d2e83252b1e85e65ce6eb6c7a4c4e98b)

cgi-io: update to latest Git HEAD

98cef9d Retry splice() syscall on EINTR

Fixes: https://github.com/openwrt/luci/issues/5342
Fixes: https://bugs.openwrt.org/index.php?do=details&task_id=4006
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit db8e0fdea454c3b07d859935de5a7d3714fd72ac)

haproxy: Update HAProxy to v2.2.17

- This update fixes CVE-2021-40346; see: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

wsdd2: update to git (2021-08-09), switch to Netgear repo

* update to git (2021-08-09)
* switch to Netgear repo

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

samba: update to 4.14.7

* update to 4.14.7
* remove domain if fqdn was set
* allow disabling wsdd2 in menuconfig

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

tor: update to version 0.4.5.8

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5c9ab1ff67fddee8ec34ed55c1b0123d3c6d371f)

Merge pull request #16559 from 1715173329/xray-2102

[openwrt-21.02] xray-core: Update to 1.4.3

nextdns: Update to version 1.37.1

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

xray-core: Update to 1.4.3

- Updated geodata to latest version
- Removed upstreamed patches

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3f448adabba3c36f13fab9463bd405463df79464)

banip: update 0.7.10-2

* optimize dns resolve function
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit f6300370430da8402fc7fd24b0eafe352ef1e7a3)

nextdns: Update to version 1.37.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

pillow: bump to version 8.2.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit afdcfb525c488e4d153fd06535bc2a434a6ea3d4)

acme: Fix uhttpd restart to load new certificates

Fixes issue #16256

Bump PKG_RELEASE to 6.

Signed-off-by: Dennis Schüsselbauer <scde@users.noreply.github.com>
(cherry picked from commit d69534751e2cf15aa7add8e8db713fd7131edd1f)

python-certifi: update to version 2021.5.30

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 571326bd48273a8a845cad4cd97730fa0011958f)

squashfs-tools: bump to version 4.5

Drop GCC 10 build patch
Adds 2 more utilities which are symlinks to mksquashfs,unsquashfs.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 399bb7f9920572a9acb7bf01e6174098f636db06)

hplip: add a patch to respect CFLAGS

* fixes build with PIE
* use AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

collectd: sensors plugin - depend on lm-sensors

Change the sensors plugin's dependency from libsensors
to lm-sensors, so that also the /usr/sbin/sensors executable
gets installed if the plugin is selected.

Although that is not needed for collectd itself,
the LuCI statistics app expects to find the sensors executable
if the plugin has been installed.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 210ff7e9537601f572d00148a101131aeb539f40)

mwan3: Use shebang in /etc/mwan3.user

To allow the script to define what it should be run with.
This let's the user use bash if it's available, or python, or perl, etc.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
Update PKG_VERSION to 2.10.12
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 3d824ea288d907a31729c3629e884ea122c30da0)

perlbase-data: Add dependency on perlbase-scalar

Data::Dumper requires Scalar::Util -> add missing dependency.

Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>

lttng-tools: fix linking with full language support enabled

This fixes fallout after d18692c.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit ce4701cc922bd118a6da00409d4be89b6ad46faa)

stoken: fix compilation with BUILD_NLS

Fixes linking issue as libxml2 uses iconv.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 60682c02357077ba13d0993bdb5c1b81d18939e1)

augeas: fix compilation with BUILD_NLS

Needs nls.mk because of libxml2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 80a0261a5dc0863c6acf5f0d55e8ae8029c9814e)

Merge pull request #16517 from jefferyto/golang-packages-remove-strip-ldflags-openwrt-21.02

[openwrt-21.02] treewide: Remove GO_PKG_LDFLAGS for stripping binaries

treewide: Remove GO_PKG_LDFLAGS for stripping binaries

The "-s -w" flags in GO_PKG_LDFLAGS tells the Go compiler to strip the
binaries it produces. Since the default Go package build process will
strip binaries when CONFIG_USE_STRIP or CONFIG_USE_SSTRIP are selected,
these flags are unnecessary.

When CONFIG_NO_STRIP is selected, these flags override the user's
intention of building unstripped packages.

This removes these flags for all relevant packages.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

openvpn: add OpenVPN option push-peer-info

This will allow the server to know more info about the client like
HWADDR, very useful for managing IoT devices.

See: https://www.mankier.com/8/openvpn#--push-peer-info

Signed-off-by: Nguyen Quang Minh <minhnq31@fpt.com.vn>

Merge pull request #16514 from jefferyto/python-cryptography-3.4.8-openwrt-21.02

[openwrt-21.02] python-cryptography: Update to 3.4.8

python-cryptography: Update to 3.4.8

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 69ae9c29a206856af5e737737fcb691c8bce7f08)

tailscale: update to version 1.12.3

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 23d90cabd2b7fcb8a2d75a96a00b4653988f8af6)

tailscale: update to version 1.12.1

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit bb419b3227a7ac191fe2403899aacd71b791e7c0)

tailscale: update to version 1.8.7

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit fabaf9f184ee90eacec9515dd9fd61ecdaaf9c22)

tailscale: update to version 1.8.1

Add readme with simple tailscale howto.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 791de7b5d07e54556888f3c6689b8bf6d29c184d)

Merge pull request #16512 from paper42/libssh-21

[21.02] libssh: update to 0.9.6

libssh: update to 0.9.6

* fixes CVE-2021-3634

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

htop: Add HTOP_LMSENSORS config option

Enabled by default for x86, this enables lm-sensors support in htop.
Also add --enable-linux-affinity to avoid autodetecting it

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 37ca4e923d2efe21a4c6c8d8d9ab8b6720a4cd3a)

banip: update 0.7.10

* switch to unencrypted http downloads for ipdeny.com due to persistant certificate issues
* compact json generator code (tested with report files > 2MB)
* various code cleanups and optimizations

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 8ac0103cbdb74e2ec9ea2986c4b80bf83ba00211)
Signed-off-by: Dirk Brenken <dev@brenken.org>

Merge pull request #16494 from 1715173329/xray-2102

[openwrt-21.02] xray-core: fix build under go 1.17

xray-core: fix build under go 1.17

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit dcd3f288e441dac264f4c34e19270e75d38933eb)

golang: Update to 1.17

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit d0aab6b8bc1a687f0c7b62ac2c92be36e2bdd8bd)

gpsd: bump to 3.23

Contains fix for time jumping back 1024 weeks after 23-October-2021.

Changes:

- Between current version and 3.23 the ABI version changed from 27 to
  29. Add ABI_VERSION variable to package as the jumps occur often.
- 0001-no-distutils-import.patch: removed because current patch doesn't
  work with new release and host python3-distutils is a build
  requirement anyway.
- 0002-ncurses6_detection.patch: fixed the patch. Currently the first
  "elif" checks for "ncurses6-config". But this is only provided by
  ncurses/host package, so the CFLAGS then contain includes that point
  into $(STAGING_DIR_HOSTPKG). The ncurses target package only installs
  "ncursesw6-config" into the staging area. So this is the only tool of
  interest. Also, the hunk moved from SConstruct to SConscript.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #16478 from 1715173329/yq-2102

[openwrt-21.02] yq: Update to 4.12.1

yq: Update to 4.12.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8dfc2e06c6b89fe5783fc67c4091a2171c8ed1af)

auc: update to version 0.2.4

 * Brings support for future connexion based API.
 * read `detail` not `message` from server
 * use regular verrevcmp for branch names, fixes update indication
 * break out usage() from main() function
 * require '-f' in case installed package is missing in remote lists
 * don't use ENETUNREACH for unlrelated error
 * Fix check for mandatory fields (stray parenthesis)
 * Don't even fetch package lists if checking only for release.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 8486f64fea140dddb7ca92333ed956f2966e444a)
(cherry picked from commit 23ce5b0e6feb141b272d277a0b72a12add67d9b6)
(cherry picked from commit 2edbc4c805d61d859f5e2af84293cdfb051f7f56)
(cherry picked from commit bd4ad7b0baa3c95c5c8ee88c1aa372030fc6a47a)

yq: Update to 4.12.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c881b29cfdfd274b721775d1d0de71eb02a27201)

apr: patch CVE-2021-35940

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 0777e40b7472a0b0b77531b6797448f8c15bd586)

Merge pull request #16456 from rs/nextdns-1.36.0-openwrt-21.02

[21.02] nextdns: Update to version 1.36.0

nextdns: Update to version 1.36.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

mosquitto: allow auth options with per listener settings

Some settings can be either global or per listener, and we need to
support both forms in UCI.

Signed-off-by: Karl Palsson <karlp@etactica.com>

mosquitto: init: support more UCI options

Recent versions of mosquitto have added a lot more fine grained control
of various options.  Add UCI support for all of them, and fix a couple
of things that were configured as per listener, that are actually global
settings.

Signed-off-by: Karl Palsson <karlp@etactica.com>

airos-dfs-reset: add airos-dfs-reset

Ubiquitis airmax based gear does not fallback to original port after DFS
event is over. This tool triggers the fallback automatically by soft-restarting
unconditionally, whenever the configured freq differs from the running.

Signed-off-by: Simon Polack <spolack+git@mailbox.org>
(cherry picked from commit e36e8a6a3ba5b5fe103b19f6aab9dc1af9a224fa)

Merge pull request #16443 from nwidger/delve-1.7.1-openwrt-21.02

[openwrt-21.02] delve: Update to 1.7.1

[openwrt-21.02] delve: Update to 1.7.1

See
https://github.com/go-delve/delve/blob/master/CHANGELOG.md#171-2021-08-18
for changes.

Signed-off-by: Niels Widger <niels@qacafe.com>
(cherry picked from 3583fd1c2)

phantap: update to latest commit

26bd876 Switch from ifname to device
d8d3d5f Fix blog post link

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit ac2b796704e02a1332c468c9dd9354426142ab7d)

travelmate: update to 2.0.6

* replaced pipe input for a while/read-loop with a here document/variable as input
  (fix various subshell related bugs and oddities)
* further improve abort and re-connection handling
* prevent alleged detected connection failures (false positives) with an additional gw check,
  to stabilize VPN connections in particular

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 1c0fcbd28b01c0af2013fb4ef4ec5e0ad1c881fd)

travelmate: update to 2.0.5-3

* simplify the scan logic, to get rid of nifty IFS tricks
* limit the nearby scan results to process only the strongest uplinks, set 'trm_maxscan' accordingly (default '10')
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 58a3cf1f01f7d29a69f5e3aa82fe5aa060470c47)

https-dns-proxy: patch CMakeList.txt to use OpenWrt CFLAGS

This fixes compilation issues with ASLR PIE enabled

We were compiling with '-g -DDEBUG'

https-dns-proxy_2021-07-29-*_arm_cortex-a9_vfpv3-d16.ipk
shrink from 19514 to 19095

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 374e1dd56e1742273b261f25a69fd3d46741e357)

dnscrypt-proxy2: Upgrade to 2.1.0

Adjust build opts to force GOPATH mode by setting GO111MODULE off.
Ref: https://go.dev/blog/go116-module-changes

Signed-off-by: Ted Hess <thess@kitschensync.net>
(cherry picked from commit 6981009f4847b1f46ef69ae813f7154b7946e47e)

c-ares: update to version 1.17.2

Missing input validation of host names returned by Domain Name Servers
in the c-ares library can lead to output of wrong hostnames (leading to
Domain Hijacking).

The Common Vulnerabilities and Exposures (CVE) project has assigned the
name CVE-2021-3672 to this issue.

References: https://c-ares.haxx.se/adv_20210810.html
Signed-off-by: Petr Štetiar <ynezz@true.cz>

mc: add a missing Syntax file

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 312caff03b17241d2e383eb254b41d35e9225294)
Signed-off-by: Dirk Brenken <dev@brenken.org>

mblaze: new package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 80f7a8ec8b5bb208503b89f19e689e372d2c7b5b)

hwdata: update to version 0.350

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d5bed38e8e554b39081496d44eed8befb9f1f5f)

tvheadend: update to v4.2.8, remove static ffmpeg

 - refresh patches
 - add missing dependency: libffi

Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
[edited commit message and the maintainer line]

(cherry picked from commit 326da3dbbc57b6c44bc0d0401529531c7d5dfb89)

tvheadend: fix compilation with GCC 9 and 10

Without this, compilation fails because of a fortify-source header.
There's something defining and undefining _GNU_SOURCE somewhere.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 57c6c5e73fd9a3e367364466ea1b7ec1ed8e69c4)

python3-setuptools: add _distutils_hack

I tried to install matplotlib by using pip and it failed with the following output:

2021-08-18T11:52:26,171 Collecting matplotlib
2021-08-18T11:52:26,173   Created temporary directory: /tmp/pip-unpack-wuth2u0e
2021-08-18T11:52:26,565   Using cached matplotlib-3.4.3.tar.gz (37.9 MB)
2021-08-18T11:52:38,659   Added matplotlib from https://files.pythonhosted.org/packages/21/37/           197e68df384ff694f78d687a49ad39f96c67b8d75718bc61503e1676b617/matplotlib-3.4.3.tar.                       gz#sha256=fc4f526dfdb31c9bd6b8ca06bf9fab663ca12f3ec9cdf4496fb44bc680140318 to build tracker '/tmp/pip-   req-tracker-u30x8pht'
2021-08-18T11:52:38,660     Running setup.py (path:/tmp/pip-install-afiyiers/                            matplotlib_8e717e38862f4976a3d6cb1832ba3261/setup.py) egg_info for package matplotlib
2021-08-18T11:52:38,661     Created temporary directory: /tmp/pip-pip-egg-info-kbtiezxq
2021-08-18T11:52:38,662     Running command python setup.py egg_info
2021-08-18T11:52:38,831     Traceback (most recent call last):
2021-08-18T11:52:38,832       File "<string>", line 1, in <module>
2021-08-18T11:52:38,832       File "/usr/lib/python3.9/site-packages/setuptools/__init__.py", line 8, in <module>
2021-08-18T11:52:38,833     ModuleNotFoundError: No module named '_distutils_hack'

More details about it:
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968410

Once I applied the patch from the bug tracker, I got further to install
it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit feaaacc10fff283505ff261ed6886a4936fbe7f5)