samba4: update to 4.13.9

* update to 4.13.9

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
(cherry picked from commit 2057fc9ee4d9d33f2b0e48ec9c860945ae227394)

python-cryptography: bump to version 3.4.7

Dropped patches:
  0004-Replace-EVP_CIPHER_CTX_cleanup-with-EVP_CIPHER_CTX_r.patch
  0005-Switch-get_-Update-APIs-to-get0.patch

Reworked patches:
  0001-Add-new-ASN1_STRING_get0_data-API.patch
  0006-Add-X509_STORE_CTX_trusted_stack-compatibility-macro.patch
These 2 require that we keep only the CUSTOMIZATIONS stuff for now. Maybe
later we can drop this.

Ran 'make package/python-cryptography/refresh'.

Added patch:
  0004-disable-rust.patch
upstream did a sloppy job with the CRYPTOGRAPHY_DONT_BUILD_RUST logic; we
need to patch it, to make sure the setuptools-rust isn't installed.
We may need to carry this patch in our tree for a bit longer than upstream,
because in newer versions, CRYPTOGRAPHY_DONT_BUILD_RUST logic gets removed.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 01d1b4581e885bc878de6e075b19a1008ef93569)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

banip: refine/fix nginx search pattern

* fix issue with nginx search pattern reported in forum support thread

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 0c16840e26ed0a8a808f22a1f5f4dbd265e0a903)

nano: update to 5.8

Update nano editor version to 5.8.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 6f2ac237a18d0c8258ca838ff4df2245960b7aef)

auc: compare versions using dpkg/opkg's verrevcmp

Using strcmp() to compare a version string doesn't work well.
Use verrevcmp() function from opkg instead.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 794cf3ac59deb28b30f63aeb26f58726595cd885,
as it was previously skipped also switch PKG_REVISION back to manual
to keep it in sync with master branch)

django: bump to version 3.2.4

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 24a8f5874155398df8e64b29897a511d5d603e03)

auc: update to version 0.1.7

No longer fail in case a package is part of multiple lists (which may
happen temporarily in case it becomes 'nonshared').
Bump version to prepare for sync accross branches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 9150e82768c14785c17b77d406a5f9217edd5b5f)

auc: fix several issues

 * don't segfault if server reply is incomplete
 * always request 'generic' image on x86/generic and x86/64
 * make SNAPSHOT branches sticky, eg. stay on 21.02-SNAPSHOT and do
   not 'upgrade' to 21.02.0-rc2.
 * output requested server URL when debugging

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 02bc1fc929e285153dee318f858f6781bab49895)

auc: support queue_position status from server

Display position in queue while waiting for build.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 5b7ff1ad655e78d9f3c9ed51ecec1a4f91ac2404)

dockerd: refactoring uciadd and ucidel handling

This change makes the handling of adding and deleting interface, device
bridge and firewall more robust.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 0fded274ecf7af94ac3fa00d5cc22c686789ba3b)

python3: Add readline to dependency finder script

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 1eeeba60d8cffc2f655c1ecbb277ca6734ac46b7)

mg: bump to 6.9

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #15857 from jefferyto/python3-readline-openwrt-21.02

[openwrt-21.02] python3: add python3-readline subpackage

banip: update 0.7.9

* add switch 'ban_fetchinsecure' to allow insecure downloads
  without certificate check (disabled by default)
* better explain 'ban_fetchparm' in readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 945513860dcf39a9976659a9458574cd9e38ac3b)

adblock: update 4.1.3

* fix a small json syntax issue in adblock.sources
* add easylist addon to reg_fr source
* add switch 'adb_fetchinsecure' to allow insecure downloads
  without certificate check (disabled by default)
* better explain 'adb_fetchparm' in readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 74dec65b616a72109eb64132d0bd4df13c000d5f)

python3: add python3-readline subpackage

Python3 comes with a built-in readline module. It wasn't included up until
now; mostly because it wasn't considered.

This change introduces it as a sub-package of the main Python3 package.
readline support is included in Python.

libreadline pulls libncursesw as a package, so python3-ncurses was
updated to pull libncursesw as well.
It should be the same package; mostly done for consistency.

Resolves the issue reported here:
  https://forum.openwrt.org/t/python3-repl-missing-readline/90039

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 49faf5d7cacf91aeb0c72447f0f5a069c891c3a9)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

btrfs-progs: update to 5.11

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 95935f2baf21e3a763e017fdfc33c140755a96c6)

shairport-sync: update to 3.3.8

Explicitly add libdaemon configure flag. It seems the default was
changed.

Add AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 94bc8a127c7d3a623bcd88af51ce11dc4e684f1a)

Merge pull request #15840 from jefferyto/python-twisted-tls-conch-openwrt-21.02

[openwrt-21.02] python-twisted: Add tls/conch dependencies

python-twisted: Add tls/conch dependencies

By adding these dependencies, it is much easier for users (both
applications that use Twisted and end users) to have secure
communications by default.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 8349546208fc9474bbd89cc2263c6d61d552ed1d)

Merge pull request #15836 from jefferyto/python-twisted-21.2.0-openwrt-21.02

[openwrt-21.02] python-twisted: Update to 21.2.0, redo patches

python-twisted: Update to 21.2.0, redo patches

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4b6e05d1fdd886133c982247f616115ef401e38c)

Merge pull request #15827 from jefferyto/python-package-updates-openwrt-21.02

[openwrt-21.02] python-six,et_xmlfile, django: bump package versions

Merge pull request #15834 from jefferyto/python-incremental-21.3.0-openwrt-21.02

[openwrt-21.02] python-incremental: Update to 21.3.0, refresh patch

Merge pull request #15831 from jefferyto/python-zope-interface-5.4.0-openwrt-21.02

[openwrt-21.02] python-zope-interface: Update to 5.4.0

Merge pull request #15829 from jefferyto/python-attrs-21.2.0-openwrt-21.02

[openwrt-21.02] python-attrs: Update to 21.2.0

python-incremental: Update to 21.3.0, refresh patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit b2738e9da63cd8a0e5638b1d1fc9541bbce3b247)

python-zope-interface: Update to 5.4.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit ffbde739c6a5d10505a12a37b5cb7496a49ef797)

net/mosquitto: Update to 2.0.11

This is a security and bugfix release.

Full release notes: https://mosquitto.org/blog/2021/06/version-2-0-11-released/

Fixes a remotely triggered memory leak
Fixes broker reconnections in certain failure situations
Fixes (non-standard) qos0 queuing

Signed-off-by: Karl Palsson <karlp@etactica.com>

python-attrs: Update to 21.2.0

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0dbb3769f3c93b05af10555d961e0c505501297a)

python-idna: bump to version 3.2

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit fe698b5fca2e7aca7f4c207ae6e8cdbaf0ffac53)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

django: bump to version 3.2.3

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 5a70c9e826e9b1729510ba820cd073667a6a1563)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

et_xmlfile: bump to version 1.1.0

Updating Eneas' email as requested on Github:
  https://github.com/openwrt/packages/pull/15622

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 6185156e69aab78528ad9db640ca519640d90827)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-six: bump to version 1.16.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit cf368395d0a291535e00cfbcb2f48e7f7a93fc4b)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

django: bump to version 3.2

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit c01d0f16cf91be39d19bd1c60c0360213eb8e560)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #15824 from jefferyto/golang-1.16.5-openwrt-21.02

[openwrt-21.02] golang: Update to 1.16.5

golang: Update to 1.16.5

1.16.1 included fixes for:

* CVE-2021-27918 - encoding/xml: infinite loop when using
  xml.NewTokenDecoder with a custom TokenReader
* CVE-2021-27919 - archive/zip: can panic when calling Reader.Open

1.16.4 included fixes for:

* CVE-2021-31525 - net/http: ReadRequest can stack overflow due to
  recursion with very large headers

1.16.5 includes fixes for:

* CVE-2021-33195 - net: Lookup functions may return invalid host names
* CVE-2021-33196 - archive/zip: malformed archive may cause panic or
  memory exhaustion
* CVE-2021-33197 - net/http/httputil: ReverseProxy forwards Connection
  headers if first one is empty

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit fe3c49fe07dfcdd3794c588af916ba6a2c03db28)

samplicator: add samplicator

Samplicator receives UDP datagrams on a given port and resends those
datagrams to a specified set of receivers.

Use Cases:
- replicate Flow Samples to multiple receivers
- use with conntrackd to synchronize via unicast to multiple targets

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 41534e5a19dc8350c1aa27ec926b34f779914ac4)

Merge pull request #15812 from G-M0N3Y-2503/docker-20.10.7-backport

Docker 20.10.7

docker: Updated to 20.10.7

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Updated to 20.10.7

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

libnetwork: Updated to 2021-05-25 for docker 20.10.7

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

containerd: Updated to 1.4.6 for docker 20.10.7

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

runc: Updated to 1.0.0-rc95 for docker 20.10.7

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Merge pull request #15782 from blocktrron/pr-2102-xr_usb_serial_common

xr_usb_serial_common: fix kernel 5.4 builds

Merge pull request #15799 from PolynomialDivision/gpsd-2102

[21.02] Pull latest changes from gpsd

gpsd: fix compilation with x86 glibc

The sysroot has to point to the toolchain directory. The directory
includes libraries like libm. However, the STAGING_DIR needs to be
added to the CFLAGS.

Fixes #15773

[As suggested by jow]

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 35b18ddfc4d5a9e065bb0730523ad338229398de)

gpsd: Add a new package gpsd-utils to add gpsdctl

gpsd-utils include management tools for GPS daemon - and this commmit
particularly introduces gpsdctl to add/remove device from the GPS
daemon's device list over control socket.

Signed-off-by: ekathva advaita <ekathva@hotmail.com>
(cherry picked from commit a86c3666f3bef77dd7002ca0c4f55b543695d534)

Merge pull request #15790 from DeathCamel58/libnet-config-21.02

[21.02] libnet-1.2.x: Export libnet-config in development environments

libnet: Export `libnet-config` in development environments
Affects: libnet
Ref: Issue #15767, PR#15770

Signed-off-by: Dylan Corrales <deathcamel58@gmail.com>

Merge pull request #15779 from stangri/21.02-https-dns-proxy

[21.02] https-dns-proxy: update to 2021-06-03-1

xr_usb_serial_common: fix kernel 5.4 builds

Building the xr_usb_serial module fails for Kenel 5.4 with CONFIG_PM
enabled:

xr_usb_serial_common.c:1574:15: error: 'ASYNCB_INITIALIZED' undeclared
(first use in this function); did you mean 'RCU_INITIALIZER'?

Use tty_port_initialized in order to determine the status of the TTY
port.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 69cf7836df9e226b4d596d057ca6ad846201e0d0)

https-dns-proxy: update to 2021-06-03-1

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #15776 from 1715173329/xray-2102

[openwrt-21.02] xray-core: bump geodata to latest version

xray-core: bump geodata to latest version

Also removed `fullcone` option as this is outdated.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 53bbfe4de590ff1dbb88d9b84bd7c507cd442338)

Merge pull request #15764 from jamesmacwhite/iperf-3.10.1-21.02

[21.02] iperf3: Update to version 3.10.1

iperf3: Update to version 3.10.1

Signed-off-by: James White <james@jmwhite.co.uk>

Merge pull request #15760 from stangri/21.02-miniupnpd

miniupnpd: disable ext_ip_reserved_ignore by default; fix grammar

ocserv: updated to 1.1.3

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>

Merge pull request #15727 from stangri/21.02-https-dns-proxy

[21.02] https-dns-proxy: 2021-05-14 bugfix: fallback to HTTP/1 by default

miniupnpd: disable ext_ip_reserved_ignore by default; fix grammar

Signed-off-by: Stan Grishin <stangri@melmac.net>

https-dns-proxy: 2021-05-14 bugfix: fallback to HTTP/1 by default

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #15658 from mattreeve/openwrt-21.02

[21.02] rsync: Add rrsync script

msmtp: update to version 1.8.15

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 110abfb9f6a1718d1817a27cab96c28db4ee6012)

hwinfo: fix compilation with ARC

Added a small patch to fix compilation.

Renamed patch files to have a .patch suffix. Makes them easier to read
with vim and probably IDEs.

Remove UCLIBC depend since it's no longer present.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6af7fbbf016332acb7c0f3475e77724d3ffb5eae)

luajit: for powerpc, add FPU dependency

powerpc support as of 2.1 does not work with soft float.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d23ca0010c7c67bd6883a00cf92e90e0bbd08c77)

nginx-util: do not use fallthrough attribute

fixes issue #15653

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
(cherry picked from commit 49a84e9b226c617929e3ad30aad27ab35712f096)

Merge pull request #15638 from ErwanMAS/2102_tinc_allow_more_param_in_uci

[21.02] tinc: allow more parameter in uci

Merge pull request #15716 from stangri/21.02-https-dns-proxy

[21.02] https-dns-proxy: update to 2021-05-14-1; bugfixes for dhcp server backup

https-dns-proxy: update to 2021-05-14-1; bugfixes for dhcp server backup

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #15700 from nxhack/2102_reduce_npm_size

[21.02] node: Reduce node-npm package size

bind: bump to 9.17.13

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 2e02d899ae99cd4af2ae286554fb16c8affcce37)

node: Reduce node-npm package size

Reduce package size by about 1MB.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

python-cryptodomex: update to version 3.10.1

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d6cb4edb4ac16eefe697976708ea79d748f44cb1)

gitlab-runner: update to version 13.12.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit cbb572534c633e0a75eecf6251b4788984b23721)

curl: update to version 7.77.0 (security fix)

Fixes:
CVE-2021-22897
CVE-2021-22898
CVE-2021-22901

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit ff58fc3a9c4513e88211d5927d8470867cac7b01)

yq: Update to 4.9.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 499aba939d229f96c8e14a06bec244a23ff840d4)

Merge pull request #15655 from mhei/21.02-php7-update

[21.02] php7: backports updates and fixes

rsync: Add rrsync script

Rrsync is a perl script that is supplied as an extra with the rsync program.
It must be used in conjunction with openssh-server or openssh-server-pam
as it requires ~/.ssh/authorized_keys which is not supported by dropbear.

Rrsync allows selective access to subdirectories in either read-only, write-only or read-write mode,
depending on settings in authorized_keys. This allows for safer, restrictive access.
It's particularly useful for automated backup purposes.

An example usage would be this entry:

command="/usr/bin/rrsync -ro /home" <public key here>

This would allow a system connecting with this public key to be able to rsync FROM the
/home directory tree only. It could not write to this directory, nor read from any other directory.

Signed-off-by: Matt Reeve <matt@mreeve.com>
(cherry picked from commit 081229aa09e28435d3d8802ce053a5d4eee8978a)

php7: update to 7.4.19

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 4e39d9fc7c2a20f04005cdeadddbe1b01b1e57ec)

php7: update to 7.4.18

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit aaaeef8b6374ee1dda58f68e4d0626c3167ddc65)

php7-pecl-imagick: configure --with-imagick=...

Add --with-imagick=$(STAGING_DIR)/usr so that configure picks
MagickWand-config from there, before it finds an eventual host-installed
version.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit f434a33a13454d09fcc287477193b4626c387deb)

vnstat2: update to version 2.7

Signed-off-by: Jan Hoffmann <jan@3e8.eu>

yq: Update to 4.9.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2a7114a1aa0abc40f5bf0cfd63c05d3972a50d97)

tinc: Add possibility to populate more config variables via uci

Signed-off-by: Erwan MAS <erwan@mas.nom.fr>

python3: bump version to 3.9.5

Refreshed Python patches.
Updated pip & setuptools version.

For pip, patch '001-pep517-pyc-fix.patch' was reworked.

Also, the current version of the bundled pip (21.1.1) no longer supports
Python2, so the 'py2.py3' suffix gets replaced with just py3.

For setuptools, there is no longer a script/module:
  https://github.com/pypa/setuptools/pull/2544

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e312275dd9c25c4032b4d2d3623b042905c8bf16)

python3: introduce libpython3 with ABI_VERSION flag

Related to discussion:
  https://github.com/openwrt/packages/pull/14060

Every once in a while a version bump will occur that requires an ABI
change. Example: Python 3.8 to 3.9. When this happens some Python packages
would need to be rebuilt. In setups where everything gets rebuilt, this
isn't a problem.

It's usually a bigger problem when needing to upgrade something via
opkg.
To accommodate for this, we add a libpython with it's own ABI_VERSION
flag. If this ABI_VERSION changes, then this should propagate forward.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 27aee1fbf09a6230836d191d1138c9ed805373eb)

python3: bump to version 3.9.4

For some reason Python3 jumped from 3.9.2 to 3.9.4 in about a week.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 156e2e354e0a4eaa576daa70785aeddaabca7636)

Bluez: Update to 5.56

Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>
(cherry picked from commit 7299ba0517bc0b8fedcf9bcaac687614b04cafa1)

Bluez: Update to 5.55

Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>
(cherry picked from commit d653862bd7e91e0b47b0f57e937f7344955df99f)

znc: update to 1.8.2

Switch to CMake + Ninja to fix parallel compilation.

Switched PKG_BUILD_DIR to use PKG_INSTALL_DIR for easier readability.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit b92f2c2bee23c54cfc673af3bec4e614c1f95312)

Merge pull request #15631 from nxhack/2102_node_14170

[21.02] node: bump to v14.17.0

knot-resolver: update to version 5.3.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 112af34ff3c8b97bf7eb1dbb7fb26b055898e47b)

syslog-ng: update to 3.32.1

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f93ef647932aa05a7a4eab69ffd9f49441076f81)

knot: update to version 3.0.6

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d578f60818b9dd53cc3285cc4deff32fb09f7a89)

knot: update to version 3.0.5

Signed-off-by: Jan Hak <jan.hak@nic.cz>
(cherry picked from commit d92a2cd21bbc41ceba9ac2b7a8ccc96a0bd2a249)

atlas-sw-probe: fix missing link on sysupgrade

Recreate symbolic link if it's missing after a sysupgrade with a private and public key present in /etc/atlas/

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
(cherry picked from commit 603133074920d845c10bedf02cb79c23e9115244)

hplip: bump to 3.21.2

Patches refreshed:
* 010-libusb_fix.patch
* 020-remove_cups_dep_on_scan.patch
* 060-fix-uclibc.patch renamed to 060-fix-glibc.patch

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 2014f1fd0b5a746ed6e6b959739977f59c2bbc13)

libtalloc: add Python3/host dependency
Otherwise, Package/Configure won't find distutils module from python3/host

Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
(cherry picked from commit d9879cb20009268857b2f9b81fb948ae2e2e4a88)

chrony: update to 4.1

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>