libreswan: update to 4.6

this update also fixes a CVE

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit ec252c20cc635fb65f972facfcdc8756099a21dd)

libreswan: update to 4.5

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit b2efa063d2c244fcf4f1defb635ece6e6460a8b3)

nss: update to 3.67

Switch to AUTORELEASE for simplicity.

Disable parallel compilation as there's something wrong with NSS' build
system. Reliably fails with make -j 12 on a ryzen 3600.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1b9e2047007b675d8f40565f3586589f3bedc29c)

nss: update to 3.65

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 0f5eadf362ab3cbd3c89a5aa6828265bcc3bc1cd)

cgi-io: update to latest Git HEAD

901b0f0 main: fix two one-byte overreads in header_value()

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 443c6c1c17e29466cc81f44504602d66d993bf86)

yq: Update to 4.27.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 82a45b28b736642d263038e0b596c620fa5102e7)

gcc: enable parallel building

Even though PKG_BUILD_PARALLEL is set for the package, the package calls
$(MAKE) without $(PKG_JOBS), so it was always built with only one job.

Fix this by adding $(PKG_JOBS) to the $(MAKE) call, and calling make
install only after make all is finished.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 1f91016ac35ee4ef007578b0d4bbe78eaeb9db67)

gcc: add cc symlink

fixes #14755

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit 55cb4d1aee0055e26f19b968beaed83a2668ee51)

Pulseaudio: update to 14.2; avahi-variant: Restore Bluez functionality

Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>
Pulseaudio: update to 14.2; avahi-variant: Restore Bluez functionality

Signed-off-by: Johnny Vogels <35307256+jmv2009@users.noreply.github.com>

Merge pull request #19121 from autobakterie/libgpg-error_1-45

libgpg-error: update to 1.45

luajit: patch: PPC/e500 SPE: use soft float instead of failing

makes LuaJit builds for mpc85xx targets with SPE ISA extension
enabled possible

Quoting inner commit message:

This allows building LuaJit for systems with Power ISA SPE
extension[^1] support by using soft float on LuaJit side.

While e500 CPU cores support SPE instruction set extension
allowing them to perform floating point arithmetic natively,
this isn't required. They can function with software floating
point to integer arithmetic translation as well,
just like FPU-less PowerPC CPUs without SPE support.

Therefore I see no need to prevent them from running LuaJit
explicitly.

[^1]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Signed-off-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
(cherry picked from commit a4a484fbca5c185456cf5ac26e6f47c03ca426e9)

libgpg-error: update to 1.45

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit c4842bdd2081748dbb8d12dd8856e870f73a3108)

libgpg-error: update to 1.43

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit d6000af907b9f517f27deef8b303e3474ee63f37)

rclone: update to 1.59.0

Release note: https://rclone.org/changelog/#v1-59-0-2022-07-09

Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
(cherry picked from commit 05df1fe4f170342ffb0e8cbd5e1414ecf737469f)

nano: update to 6.4

Update nano editor to version 6.4.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0aed2021800de9f567f2301716287f225220e1ba)

ksmbd: update to 3.4.5

Major changes are:

Add support for smbd-direct multi-desctriptor.
Add support for dkms.
Add support for key exchange.
Fix seveal bugs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ksmbd-tools: update to 3.4.5

Major changes are:

Add support for Heimdal as the Kerberos 5 implementation.
Add smbd max io size parameter.
Accept global share options.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ksmbd-tools: update to 3.4.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ksmbd: set stoplevel

to allow graceful stop of the daemon

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
(cherry picked from commit 28ed2b82c5f6f73f2e41357b39a89714959d2a82)

telegraf: Update to version 1.23.3

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 281d156a35830003e3844af6f195958715731dfb)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

knot: update to 3.1.8

- Release notes:
https://www.knot-dns.cz/2022-04-28-version-318.html

- Refreshed patch to avoid offset

Signed-off-by: Jan Hák <jan.hak@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added commit message, refresh patch]
(cherry picked from commit db12181940e0136adaa20edb8923e90166847e3a)

dockerd: Update to v20.10.17

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

docker: Update to v20.10.17

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

libnetwork: Update to f6ccccb for Docker v20.10.17

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

containerd: Update to v1.6.6 for Docker v20.10.17

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

runc: Update to v1.1.2 for Docker v20.10.17

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dawn: update to 2022-07-24

edca4d2 network: rework network status callbacks

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 28ca76d29bc0703474fd44815ceca6bd7b28efe6)

dawn: update to 2022-07-22

10fb043 network: dump detail on ping pong received

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 1f60c232966b12b2f6e35a2705dc63883eec61c2)

Merge pull request #18965 from commodo/django-update-21-02

[21.02] django: bump to version 3.2.14

dawn: update to 2022-07-21

bb362db datastorage: fix ap_array_unlink_entry always returns NULL
47e98ef network: ping pong keepalive for tcp connections
eba0354 network: add timeout for client connections

In the dawn config the con_timeout needs to be added:
  option con_timeout '60'

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 204fd77bbc810e64602bbd758af4bef6c76844b1)

golang: Update to 1.17.12

Includes fixes for:

* CVE-2022-1705: net/http: improper sanitization of Transfer-Encoding
  header
* CVE-2022-1962: go/parser: stack exhaustion in all Parse* functions
* CVE-2022-28131: encoding/xml: stack exhaustion in Decoder.Skip
* CVE-2022-30630: io/fs: stack exhaustion in Glob
* CVE-2022-30631: compress/gzip: stack exhaustion in Reader.Read
* CVE-2022-30632: path/filepath: stack exhaustion in Glob
* CVE-2022-30633: encoding/xml: stack exhaustion in Unmarshal
* CVE-2022-30635: encoding/gob: stack exhaustion in Decoder.Decode
* CVE-2022-32148: net/http/httputil: NewSingleHostReverseProxy - omit
  X-Forwarded-For not working

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

yq: Update to 4.26.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 4df4b8eae7f65960ca18c364b37f089b018a8dce)

xray-core: Update to 1.5.9

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 25922c6afdc344e2e402e482d3318219006451c5)

dawn: update to 2022-07-18

e596ff1 ubus.c: only add nr entries matching our own SSID

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit bb0d45ed355264ca606d01699ca59edaf6848eab)

django: bump to version 3.2.14

Fixes https://nvd.nist.gov/vuln/detail/CVE-2022-34265

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

postfix: fix download failure

cdn.postfix.johnriley.me serves a certificate for a different domain
name.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit d4feef97e6ee7b6477d53c28c9b151ae0c8974d8)

dawn: update to 2022-07-16

0689b5e ubus: add missing lock for ubus hearing_map
4b7db09 CONFIGURE.md: fix typo
b3f61d4 CONFIGURE.md: adjust documentation about log levels

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit eef9ee0b83afe45bdf83f966e9532f83acf08ef0)

libuwsc: fix compiltation with wolfSSL

wolfssl/options.h needs to be included before the other wolfssl headers
to enable OpenSSL API required to build the package.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8fb3fd3dac586ccb38a3a30aa4d0e1656aea2dc3)

telegraf: Update to version 1.23.2

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 591f8cad333b36962aefbeccc6b0fa77e5826429)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

telegraf: Update to version 1.23.1

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit 9b1cdb7b52a29d8923a68234dd6ca068e245c6d0)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

xr_usb_serial_common: bump to 2022-03-30

This is the latest commit that touches the xr_usb_serial_common-1a dir.
The changes are restricted to whitespace fixes and kernel version
adaptations:
ecc6ebe xr_usb: Use tty_driver_kref_put for kernel 5.15 and above
caf6d25 xr_usb: Use tty_alloc_driver for kernel 5.15 and above
a42b7e6 xr_usb: Compilation fixes for kernel 5.14
497adb7 #39 fix compilation for newer linux kernels
9103471 xr_usb: fix some whitespace errors

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit eadab32450857dcb98ceb55fbddc8b2a30660a7c)

fio: update to 3.29

Fixes compilation with kernel 5.15

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit d1edd7677a8af4c286cc47ca6ffc37e573ef15fc)

libarchive: fix ext2fs build race error condition

libarchive looks for ext2fs headers during configure, and if it finds
them it will expect to find them during compile, or on the rare occasion
when they aren't it will fail:

 libarchive/archive_entry.c:59:55: fatal error: ext2fs/ext2_fs.h: No such file or directory

As we just need headers for some type constants, let's re-use headers
from tools/e2fsprogs package which are always available.

Reported-by: Adam Dov <adov@maxlinear.com>
Suggested-by: Paul Eggleton <paul.eggleton@linux.intel.com>
References: https://git.yoctoproject.org/poky/commit/?id=f0b9a7cf9f80be1917e45266fa201f464a28c1e5
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 797945dfaa0e7de8d6b0ada472bda63bb27f0cdc)

node: July 7th 2022 Security Releases

Update to v14.20.0

Release for the following issues:
HTTP Request Smuggling - Flawed Parsing of Transfer-Encoding (Medium)(CVE-2022-32213)
HTTP Request Smuggling - Improper Delimiting of Header Fields (Medium)(CVE-2022-32214)
HTTP Request Smuggling - Incorrect Parsing of Multi-line Transfer-Encoding (Medium)(CVE-2022-32215)
DNS rebinding in --inspect via invalid IP addresses (High)(CVE-2022-32212)

https://nodejs.org/en/blog/vulnerability/july-2022-security-releases/

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

python-cryptography: Fix failing build

Fixes https://github.com/openwrt/packages/issues/18876.
Fixes https://github.com/openwrt/packages/issues/18879.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 9e3b7d78837b7181b859472894aa243a2eae595b)

nft-qos: simplify ifname retrieval

network_get_device should be enough, and since https://git.openwrt.org/?p=openwrt/openwrt.git;a=commitdiff;h=4b9a67362d70c544b85078b8d5c661f43f7472d9
uci network config interface sections use 'device' instead of 'ifname',
rendering the fallback useless

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 76b750d7201e953b99b5f2600d2f616acf226405)

unbound: update to 1.16.0

Signed-off-by: Stijn Segers <foss@volatilesystems.org>
(cherry picked from commit 695e0dbaa43aac589f4c2044fa77ced1055c89b7)

Merge pull request #18828 from nemesisdesign/openwrt-21.02

[21.02] openwisp-config: update to 1.0.1

Merge pull request #18847 from nemesisdesign/monitoring-openwrt-21

[21.02] openwisp-monitoring: added 0.1.1

openwisp-monitoring: added 0.1.1

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit 0419a797ae7442dff8a1536de404a2fc38337f2f)

openwisp-config: update to 1.0.1

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>
(cherry picked from commit abb75e3a7ba54e75407970341c6070695928e40d)

Merge pull request #18839 from TDT-AG/pr/collectd-fix-smart

collectd: fix smart plugin segfault

collectd: smart: add patch to check udev_enumerate_scan_devices return value

The function udev_enumarte_scan_devices returns a value less than 0 on
failure. If this is the case then we terminate the read for this smart
information.

This change was already send upstream. And could be delete in feature
collectd versions.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 896a0f0db66950b984f89b7f41bfdf60a47bc499)

collectd: remove not needed fix

This was not a real fix but a workaround. It is no longer clear to me
why this was necessary. Deleting the patch restores the upstream
behaviour of the collected for the smart plugin. I have tested it and on
my system the hard disk to be monitored is recognised.

root@system ~ # cat /sys/class/block/sda/uevent
MAJOR=8
MINOR=0
DEVNAME=sda
DEVTYPE=disk

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit a9ea1cf6ed08940be08c6d0170514665ac41d6c1)

Merge pull request #18838 from 1715173329/y2

[openwrt-21.02] yq: Update to 4.25.3

yq: Update to 4.25.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 15aff102319f1405ace9f50aed42f6c3ce2cbbe9)

protobuf: fix 022aef6

The cherry-pick done in 022aef6 includes changing the build setup from
cmake to ninja, but it was overlooked that this was actually reverted in
2e654b1.

The ninja build results in headers not being installed for the host pkg,
so protobuf-c/host can't be build.

This commit reverts the package back to cmake.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

syslog-ng: update to version 3.37.1

- Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.37.1

- Bump config version

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ae7aefe111382630c7046cfb4539b3f1a72ff402)

Revert "lxc: export systemd cgroups after install"

The postinst script is sourced during image build, which causes the
follow failure:
/home/stijn/Development/OpenWrt/openwrt/build_dir/target-x86_64_musl/root-x86/etc/init.d/lxc-auto: line 3: /lib/functions.sh: No such file or directory
postinst script ./usr/lib/opkg/info/lxc-auto.postinst has failed with exit code 1

Sourcing /lib/functions.sh is not needed, as /etc/rc.common does so
already. Unfortunately removing that line from the init script is not
enough to fix the problem. The postinst script should also check
IPKG_INSTROOT. As these two changes are unrelated, they should go in
separate commits, and the solution to the image build problem is to
revert the commit that introduced the breakage.

This reverts commit 2cde10b95053bf958a4001fb0a82c4563bf345e2.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 039912dec5d3ba2b0f6f53ab8330ab9fea2f7adf)

lxc: export systemd cgroups after install

otherwise, a user would have to either manually run /etc/init.d/lxc-auto
boot or reboot the system to start using lxc.

originally committed in 2cde10b95053bf958a4001fb0a82c4563bf345e2
reverted in 039912dec5d3ba2b0f6f53ab8330ab9fea2f7adf

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 7da73565399f915f516c6cdd74a58f984d519e4b)
(cherry picked from commit 345ae974bcd7ef27cfdfb7c7bf55a0241ea482de)

libreswan: update to 4.4

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit b8c2ab47e1ebe1dac76aace0d31262269e10cba0)

libreswan: update to 4.3

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
(cherry picked from commit 7087177bb03066e1952b8efa4b75cbd15021ea3e)

nfdump: update to 1.6.24

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit d3b96a4b26ef278b3d38d47b88ae221aa967492f)

knot-resolver: update to version 5.5.1

Changelog for versions:
- 5.4.4 [1]
- 5.5.0 [2]
- 5.5.1 [3]

[1] https://www.knot-resolver.cz/2022-01-05-knot-resolver-5.4.4.html
[2] https://www.knot-resolver.cz/2022-03-15-knot-resolver-5.5.0.html
[3] https://www.knot-resolver.cz/2022-06-14-knot-resolver-5.5.1.html

And refresh patch to avoid offset

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f74754fac189d7315db3b615da2afc8c95e920bb)

Merge pull request #18795 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.20

Merge pull request #18794 from mhei/21.02-php7-update

[21.02] php7: update to 7.4.30

luajit: backport softfloat ppc support

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 24c0007ea2561611776e50c8876a7b040ffd6fdc)

luajit: fix build on macos (ldconfig issue)

fix ldconfig build issue. This patch is a backport from upstream:
https://github.com/LuaJIT/LuaJIT/commit/18c9cf7d3788a8f7408df45df92fc4ae3bcc0d80

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
(cherry picked from commit 42c4d254552c04f41a2b93811147ef56af45bf9c)

php8: update to 8.0.20

This fixes:
    - CVE-2022-31625
    - CVE-2022-31626

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7: update to 7.4.30

This fixes:
    - CVE-2022-31625
    - CVE-2022-31626

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #18699 from stangri/openwrt-21.02-curl

[21.02] curl: bump to 7.83.1

xray-core: Update to 1.5.8

Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c6103fe402822e91050b427fcb981e725e681f45)

dawn: update to 2022-06-13

88c78b4 memory_utils: fix reallocation

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 4a9eaecf5812561499c30f74095e450a9992a657)

dawn: update to 2022-06-11

4cf9d0b treewide: code and documentation cleanup
48b12ee datastorage: Minor chnages to kicking algorithm to tidy up some handling.
7b615b6 treewide: improve beacon/probe logging
185f31b treewide: improve beacon request handling
0c2e713 datastorage/ubus: Add "soft" kicking algorithm
38f60c5 treewide: RSSI / RCPI handling updates
aba3e81 documentation: Parameter defaults and documentation
3979fdf treewide: cleanup code
e3b3753 scoring: improve scoring algorithm
33f380f treewide: cleanup code
b42193f kicking: improve kicking algorithm
16deab3 treewide: improve mutex handling
31f0a37 test: cleanup tests and add some test scripts
43ca8b8 treewide: fix bugs from Coverity Scan
8ae2a42 utils/storage: improve descriptions
9a9b4dd ubus: Simplify loops and scans in generating hearing map
c833064 treewide: rework mutex
1df5bc5 (master) network: cleanup and improve network handling
3bd349a utils: cleanup
a855087 utils/storage: cleanup
439fe95 ubus/datastorage/msghandler: cleanup
335ace2 datastorage: improve linked list
40ebf48 ubus/datastorage: cleanup
c13c285 utils: cleanup
0e4fc50 documentation: Heavily revised Markdown documentation files

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 0c74ab9a790c81ff57ad1d7741489bf5e1839839)

dawn: update to 2022-06-09

850a75c fix compilation with GCC12
2ac7b9d workflow: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 96975a1f785f4b0a8fae2b97feb6df0753c96ee7)

telegraf: update to version 1.23.0

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>
(cherry picked from commit e8f6600851557f89a77389db7840ce0a45494df7)
Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

libprotobuf-c: update to 1.4.0

Remove patch. Upstream fixed it.

Add AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 40d2b7c43e7cd93ea0879030c198eb55f14a33a7)

protobuf: update to 3.17.3

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0c3ee90b076409b0af94e910e90bac6adb4c7b6b)

protobuf: update to 3.17.2

Refreshed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 11acce8fa9747d90d05223b84e90a2cecf8a3d25)

lighttpd: update to lighttpd 1.4.65 release hash

* update to lighttpd 1.4.65 release hash
* specify lua version w/ -Dlua_version=lua to avoid patching meson.build

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit db8205e5458e27152b02c57609f2224586843271)

irqbalance: upstream patch to fix segfault

Apply post-1.9.0 patch from upstream to fix a segfault.
savedptr can be NULL, so guard for that.

Fixes #18741

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ab7a23102e85aaab1e0ff2ba6874e7d6b09f45d5)

irqbalance: upstream patch to fix irq-module relation

Apply post-1.9.0 patch from upstream to fix the irq-->module
relation detection.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 358c2293fabe8c12baa4b9d9788790594cc606a4)

mosh-full: Add perlbase-text dependency

Fixes https://github.com/openwrt/packages/issues/18182

Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit 17d7efe7e74f04415f17a96de156bed4964ff0c2)

mosh-full: Sort dependencies alphabetically

Signed-off-by: Jottr Doe <jottr@users.noreply.github.com>
(cherry picked from commit eaa37d2e8d2424f347aa582841aebbbdcc015041)

beep: change git repository to fix CVE-2018-0492 and CVE-2018-1000532

1. Changed Git repository, which is used for Fedora packaging
https://github.com/johnath/beep/issues/11#issuecomment-450277122

Fixed CVEs:
CVE-2018-0492 - https://nvd.nist.gov/vuln/detail/CVE-2018-0492
CVE-2018-1000532 - https://nvd.nist.gov/vuln/detail/CVE-2018-1000532

2. Fixed SPDX License Identifier

3. Add patch to comment out -D_FORTIFY_SOURCE
Otherwise, it can not be built by default.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6488eaf2502c75ffc8ac11fffd539f5c070f77c3)

xray-core: increase nofile limitation

This fixes "too many open files" error caused by max-file limitation
when xray processes large traffic.

Reported-by: Terry Ding <terryding77@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d98fd528652c58e106a9bb4becd5ac8bb19a0ffb)

xray-core: Update to 1.5.7

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a60ebb597a9023f5a3f27690b0fa61ed2899efe1)
[Removed upstreamed patch]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

htop: update to 3.2.1

Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 6d73b8a09a1978519e8f2c1e5b77cad4190fa218)

curl: bump to 7.83.1

* https://curl.se/changes.html#7_83_1

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b0f213a726a019fa864420fc9d50523ab8ec8901)

golang: Update to 1.17.11

Includes fix for CVE-2022-30634 (crypto/rand: Read hangs when passed
buffer larger than 1<<32 - 1).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Merge pull request #18695 from jefferyto/python-3.9.13-openwrt-21.02

[openwrt-21.02] python3: Update to 3.9.13

netatalk: backport pending PR to fix segfaults

This commit backports pending PR, which solves segfaults:
- https://github.com/Netatalk/Netatalk/pull/174

To fix issues with segfaults described here:
- https://github.com/openwrt/packages/issues/18571
- https://github.com/Netatalk/Netatalk/issues/175

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>

python3: Update to 3.9.13

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

CircleCI: Add 21.02 GPG and usign public keys and update to Debian 10

Debian 9 (stretch) comes with Python 3.5 by default and End of Life is going to be
on 30th June 2022, let's update it to Debian 10 (buster).

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 599e41c14b8d5ab513a6a7581458a60e06543f89)

irqbalance: remove local patch for socket directory

Upstream has finally patched the UI communication socket
creation to happen only if the irqbalance UI is enabled.

As we do not use the irqbalance UI, we can remove
our local fix implemented by 4f0c847828.
(If you want to enable irqbalance UI, the fix is still needed.)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 8e71e0ad972ddb105264bdce3fffd0622edbd59b)

irqbalance: update to 1.9.0

Update irqbalance to version 1.9.0
* adopt AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit e9002ff3d956c719b3b57707f1ef690aeb4d707c)

protobuf-c: don't build shared host library

No point and can avoid rpath hacks.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 89c2971c6effb3c1b3525cdb26e20c95013f6701)

protobuf: update to 3.15.6

Remove upstreamed patch.

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1d0d8e057cab2a2fb573c3952b88b26a9def5d96)

openwisp-config: update to 1.0.0

Signed-off-by: Federico Capoano <f.capoano@openwisp.io>

xray-core: fix build in go 1.17

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>