libudev-zero: update to version 0.5.2

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 50bb46baaa54146b3135921722edb7585f43518f)

libudev-zero: update to version 0.4.8

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7341e397681a39fe87249716430c04905d879e64)

Merge pull request #17113 from paper42/cve-2019-19906-21

[21.02] cyrus-sasl: patch CVE-2019-19906

php8: Clean up and update distributed php.ini for php 8.0.12

Details:
- Cleaned up whitespace and removed comments (refer to official PHP documentation for that)
- Removed directives that no longer exist as of PHP 8.0.12
- Added newly existing directives commented out
- Added '~E_DEPRECATED' to 'error_reporting'

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
(cherry picked from commit f54b987c8f1bbc8b908f14d7616dd417d18cc887)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>

cyrus-sasl: patch CVE-2019-19906

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit f7717bd382d4f03c6353beaaf198d29a34c8e6ab)

Merge pull request #17111 from thg2k/pr/21_php74_ini_1

[21.02] php7: Update and clean up distributed php7.ini

dockerd: Update to 20.10.10

Signed-off-by: Ren Zongjia <acooler15@foxmail.com>

docker: Update to 20.10.10

Signed-off-by: Ren Zongjia <acooler15@foxmail.com>

containerd: Update to 1.4.11

Signed-off-by: Ren Zongjia <acooler15@foxmail.com>

runc: Update to 1.0.2

Signed-off-by: Ren Zongjia <acooler15@foxmail.com>

php7: Clean up and update distributed php.ini for php 7.4.25

Details:
- Cleaned up whitespace and removed comments (refer to official PHP documentation for that)
- Removed directives that no longer exist as of PHP 7.4.25
- Added '~E_DEPRECATED' to 'error_reporting'

Directives removed that no longer exist as of PHP 7.4.25:
- zend.ze1_compatibility_mode
- y2k_compliance
- register_globals
- register_long_arrays
- magic_quotes_gpc
- magic_quotes_runtime
- magic_quotes_sybase
- always_populate_raw_post_data

Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>

nano: enable showing line numbers with M-N (Alt-n)

Backport new upstream patch to enable toggling the display of
the line numbers with the shortcut key M-N (Alt-n).

Also the cmdline option "-l" works.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 9023845d500cbaf6be4ce5c20794d11445c8e120)

Merge pull request #17099 from mhei/php7-pecl-updates

[21.02] Pull latest php7 pecl package updates from master

nano: enable line numbers (from cmdline)

Enable showing line numbers, which makes it easier to find
the correct place in long files. Due to the "tiny" build,
the functionality is only available from cmdline with "-l"
option.
For example:  nano -l /etc/banner

Key shortcut M-n is disabled due to "tiny".
See https://savannah.gnu.org/bugs/?61441 for explanation.

Also
* remove without-slang config option, deprecated in Dec 2020
* adopt AUTORELEASE

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit ae7f62d637d86b8fe6ae03cdce948ab2d25ff19b)

mosquitto: bump to 2.0.13

Security and bugfix releases.

Changelogs:
https://mosquitto.org/blog/2021/10/version-2-0-13-released/
https://mosquitto.org/blog/2021/08/version-2-0-12-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>

php7-pecl-redis: update to 5.3.4

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 82f115bded1a6399f743070a6fbab70bd30e5d16)

php7-pecl-imagick: update to 3.5.1

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 755e3c2eb6255160e5cc1c1e3d8020f006324316)

php7-pecl-http: update to version 3.2.4

This is the latest version, which still has support for PHP 7.x.

It's an intermediate step in the transition to PHP 8.x.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 5fe58d00021e5d92d01d9ad877a5c642e68d4560)

Merge pull request #17052 from mhei/21.01-php8-icu-compat

[21.02] php8: Support for icu 70.1

Merge pull request #17053 from mhei/21.01-php7-icu-compat

[21.02] php7: Support for icu 70.1

xray-core: remove dead jail files

It never works... And Xray-core needs root access to work.

Bump geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ab540e6990a26950a8bee31ae306928f573f0874)

afuse: Add new package

This commit add new package afuse into packages feed.

afuse is an automounting file system implemented in user-space using
FUSE. It implements the most basic functionality that can be expected by
an automounter; that is it manages a directory of virtual directories.
If one of these virtual directories is accessed and is not already
automounted, afuse will attempt to mount a filesystem onto that
directory. If the mount succeeds the requested access proceeds as
normal, otherwise it will fail with an error.

Signed-off-by: Michal Hrusecky <michal@hrusecky.net>
(cherry picked from commit 3d0f73ea676b7e1e0bb1184f9f1e0d1b7f18a3fe)

Merge pull request #17017 from miska/mariadb-21.02

mariadb: Update to version 10.4.21

php7: Support for icu 70.1

This PR prepares PHP for a few minor changes that cause PHP builds to fail when using --enable-intl with ICU 70.1.

Change UBool to bool for equality operators in ICU >= 70.1

https://github.com/php/php-src/pull/7596

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit bc13112a7c180dfad51db065c74438017fc8a8c7)

php8: Support for icu 70.1

This PR prepares PHP for a few minor changes that cause PHP builds to fail when using --enable-intl with ICU 70.1.

Change UBool to bool for equality operators in ICU >= 70.1

https://github.com/php/php-src/pull/7596

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 4da149b68a10e121eb0ef5c19d2d18020828ec24)

tvheadend: add patch to update hdhomerun

Tarball with libhdhomerun_20171221 [1] was removed from upstream repository
and as it can not be found.

[1] http://download.silicondust.com/hdhomerun/libhdhomerun_20171221.tgz

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit dacda65d376df03e12936f74e896a012ce0d45c4)

rclone-ng: initial package

Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 9b7e817f93720dbfb3e02229d9ad6e2f3fbd8f43)

rclone-webui-react: initial package

Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5204e148b337cc835a96999a9921046cb07289c5)

rclone: add test script

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e475df4b7972da5045fed6ae1996be9b0e86092c)

rclone: fix logic err in service file

- Corrected `enable` detection.
- Granted config/log write permission for `rclone` user.

Fixes: d51823988847fc ("rclone: initial package")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 00747f7b97e68df3a475601606e7e403551d36d8)

rclone: initial package

Signed-off-by: Elon Huang <elonh@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit d51823988847fcaf598f8f547cfac2c2099b5a16)

yq: Update to 4.14.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 06bb78cf4db6543c9d33b3066373837ffb9ee1dc)

mariadb: Update to version 10.4.21

Update to the latest stable version. Also contains minor Makefile
polishing - better source RL and correctly formatted license.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>

lighttpd: update to lighttpd 1.4.61 release hash

also remove patches incorporated upstream into lighttpd 1.4.61

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 9786df13a82e58e36d4730e209ea6849fa27a113)

lighttpd: update to lighttpd 1.4.60 release hash

also remove patches incorporated upstream into lighttpd 1.4.60

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 07446a73cabefb9f0afeb3c2fcf3d4159be68191)

bind: Bump to 9.17.19

The following CVE updates are included:

* CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
  effectively disables the lame server cache, as it could previously be
  abused by an attacker to significantly degrade resolver performance.

* CVE-2021-25218: An assertion failure occurred when named attempted
  to send a UDP packet that exceeded the MTU size, if Response Rate
  Limiting (RRL) was enabled.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry-picked from commit c2de702cbdb0034a84550589195fe95df25572b9)

nginx: fix compilation with BUILD_NLS

Requires nls.mk because of libxml2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de176d6f6f7bbe8abd8ae26c9b2350a9f9f38916)

generate-ipv6-address: fix PIC compilation

This is a single C file. Don't bother using the Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 6123f3b48e3bd89ee7731ba442c21367558e372f)

Merge pull request #16989 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.12

Merge pull request #16991 from mhei/21.02-php7-update

[21.02] php7: update to 7.4.25

php7: update to 7.4.25

This fixes:
    - CVE-2021-21703

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 1df333bfb0e67fe879fde51b0ca9ab6f2127692e)

php8: update to 8.0.12

This fixes:
    - CVE-2021-21703

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fb7a33a114c27bc127e10bffca01e3ec3c6c0bdc)

dawn: set symm_enc default to 0

User mpeleshenko reported that symm encryption breaks hearing map.
Set the default to 0.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 8b7fb614dd35a5fc88aa1d7d6e539aa5be50c7cd)

mariadb: update to 10.4.18

Remove uClibc depends. It's gone now.

Remove CMAKE_INSTALL to avoid installing to InstallDev.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 8a62f2ea6b8462fea85905490099290983914cc5)

python-websockets: new package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bc10fbaebffb036731b4e9a1fdc40c9d1f535ba0)

atlas-probe: allow parallel build

Set PKG_BUILD_PARALLEL:=1

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 9e8f127c31384da55473b81693fcecf7200b0c78)

atlas-probe: Fix compilation with gcc11

This uses some definitions from <sys/cdefs.h> in gcc 8.4.0, not present
in musl or gcc11.

Also use clock_gettime() instead of syscall(__NR_clock_gettime,...),
which is not currently defined.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 281df4bcf5bb36f44f7163d045df74c6144b7daf)

knot-resolver: update to 5.4.2

* refresh patches
* disabling kres_gen_test is not required anymore for cross compilation, it was fixed upstream with the 5.4.1 release

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 2b3b2ffe42cab96504e4e56683317ff1cb6dc4f6)

git: update to version 2.33.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 972e6ed2e7073f3c1adc2e9ffab705ce36b2f0c4)

msmtp: update to version 1.8.17

- Use AUTORELEASE fce
It helps when someone forgets to bump PKG_RELEASE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 18261fcd313b073e36a5ba39eeaf0aef808a1694)

syslog-ng: update to version 3.34.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d8e88ef51ec85c3f459fb4e8bf0e08fa26cffb29)

dnscrypt-proxy2: update to version 2.1.1

Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 6b37a1523043f0488fedae8c38e995c4f206b5be)

checksec: update to version 2.5.0

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit db358e8a89b363dca2fe17130a6f058ce6ce3ae9)

miniflux: new package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 9697b69609b10aed8ca1a92859d1dce460144884)

redis: update to version 6.2.6

Fixes:
- CVE-2021-41099
- CVE-2021-32762
- CVE-2021-32687
- CVE-2021-32675
- CVE-2021-32672
- CVE-2021-32628
- CVE-2021-32627
- CVE-2021-32626

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 766a5b285e169a438b7b0642eec00be00fc610b9)

redis: update to version 6.2.5

Fixes CVE-2021-32761

Signed-off-by: Jan Pavlinec <jan.pavlinec1@gmail.com>
(cherry picked from commit 3cc8a1f37e6dfd6297e550956a3570726f7f3236)

redis: update to version 6.2.4

Fixes CVE-2021-32625

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit c7ffa391f19b6d5292969d697511853446f27a8d)

redis: update to version 6.2.3

Fixes CVE-2021-29477

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5f47bec5e8505d609917d41fdf0f089f87558fe5)

redis: update to version 6.2.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5894ca38b2177d15dcfee5881c740e6335548345)

redis: update to version 6.2.1

Changes:
-remove zmalloc patch which is part of release

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d4ead62706cac0d1b5a9d4bdcc3def6a9d038111)

redis: update to version 6.2.0

Fixes CVE-2021-21309

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 4e0962e8f484fa64381f9b12f176e66bb8723ded)

knot: update to version 3.1.3

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 175087bf250d1e1043ecad1ee352297398816d51)

dawn: update to 2021-10-26

ddc007e32ced ubus: avoid use after free in handle_probe_req()
e1275713c057 github: fix workflow

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 2e02deb5a95c75012d4078425417fc3c960db744)

dawn: respawn dawn in case of crash

Some users report that DAWN sometimes crashes after a while. Mostly
this happens after the new update has been rolled out.

Since I would not like to go back to the older version, I add as
a workaround for now that DAWN automatically respawned.

Workaround for:
https://github.com/berlin-open-wireless-lab/DAWN/issues/151

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit c1490175d3e47319235ab47fa8e4184d46698265)

dawn: update to 2021-10-13

d222d12bcb58 ubus: use local blub_buffer definitions and free

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 147c401d195218f12822ee292c9d07fcf0d92758)

dawn: update to 2021-08-05

* c70773a - datastorage: use signal strength as a metric
* 14e0f83 - Don't display debugging output with DAWN_NO_OUTPUT
* 97e5de1 - uci: add neighbor list priority options
* 2b1a53c - dawn_uci: set default values
* 6eb747b - Use separate configs for 802.11g & 802.11a bands
* 1e34357 - Verify compatibility before parsing config message
* a7a8309 - List all neighbors with same score when kicking
* 3ba0fa4 - Change beacon request fields to appropriate values
* 009aab9 - Change mode config parameter from int to string

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit 2039e3fce068d39ff51cf2be514bf50f66468043)

docker: update to 20.10.9

* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

dockerd: update to 20.10.9

* switch to AUTORELEASE
* fixes CVE-2021-41089

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

yq: Update to 4.13.5

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 336577fe29f569d8a7455603ba92cdde14dde300)

nextdns: Update to version 1.37.3

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

ksmbd-tools: update to 3.4.2

Signed-off-by: Marcos Del Sol Vives <marcos@orca.pet>
(cherry picked from commit 212f057df74b3937ebaf8b347852c937484ee7bb)

ksmbd-tools: update to 3.4.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit ac5097af94a6e63a4089c7c4bc1ecd443c6248e7)

ksmbd: use hostname only as name

even if a fqdn (with domain) is set by user

Signed-off-by: Fritz D. Ansel <fdansel@yandex.ru>
(cherry picked from commit 47e87e1b75dfd5286a7e87cbfee25db3d9c78f8a)

ksmbd-tools: update to 3.4.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 0162bd3a9f449ee92ee73232db10f541576be162)

django: bump to version 3.2.8

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #16930 from stangri/openwrt-21.02

[21.02] vpn-policy-routing: bugfixes: killall and tmpfs params

vpn-policy-routing: bugfixes: killall and tmpfs params

* bugfix: change killall param from -HUP to -s HUP
* bugfix: change tmpfs param from status to gateway

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 2b6c8d827369a29d3546c6bae27121aeb93e7f9a)

node: bump to 14.18.1 / October 12th 2021 Security Releases

October 12th 2021 Security Releases:
 HTTP Request Smuggling due to spaced in headers (Medium)(CVE-2021-22959)
 HTTP Request Smuggling when parsing the body (Medium)(CVE-2021-22960)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #16924 from stangri/openwrt-21.02

[21.02] vpn-policy-routing: revert to 0.3.4-8

vpn-policy-routing: revert to 0.3.4-8

* there are reports that 0.3.5-x versions do not work on some configs
* the development of the new features moved to the new package (pbr)
* revert to the last known good version of vpn-policy-routing

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 77514c10a7795a395167213f02cb9669ea9a1d77)

msgpack-c: Update to 4.0.0

- Fixed typo error in PKG_LICENSE_FILES.
- Updated CMAKE_OPTIONS.
- Refreshed the patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e4d463b89d300bb6148a4e232667bb5838cd718a)

msgpack-c: don't check for GTest

Not available with OpenWrt. Fixes compilation when host GTest is
present.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7f34b03356e770d6aa14a9fa5152ac4020338b93)

nnn: update to 4.2

* switch to AUTORELEASE

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit 42bf46039c48d7a7b03c292e1975870b1d360269)

fakepop: fix compilation with PKG_ASLR

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 15d2ed15caa23003447e83d1de219b7968919088)

lxc: update to 4.0.10

Remove getline patch. It seems to be for uClibc, which is no longer in
the tree.

Remove commands patch. Issue was fixed upstream. Same with the tests
patch.

Remove gpg patch. It's an upstream backport.

Refreshed others.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 3df43e2f66a8f089e7b0b2af9c012a2e300229b0)

Merge pull request #16899 from stangri/openwrt-21.02

[21.02] simple-adblock: update to 1.8.8-1

simple-adblock: update to 1.8.8-1

* update 'check' function

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit d11f310230497ea81cf207f9214528bd9d221eee)

Merge pull request #16896 from stangri/openwrt-21.02

[21.02] curl: update to 7.79.1

curl: update to 7.79.1

* update to [7.79.1](https://curl.se/changes.html#7_79_1)

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #16889 from paper42/knot-3.1.2-21

[21.02]: knot: update to 3.1.2

knot: update to 3.1.2

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

crowdsec-firewall-bouncer: initial package v0.0.15

/net/crowdsec-firewall-bouncer/

crowdsec-firewall-bouncer will fetch new and old decisions from
 a CrowdSec API to add them in a blocklist used by supported firewalls.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 676a621647000c2618360a7752151c7110bd6c58)

crowdsec: initial package v1.2.0

/net/crowdsec/

Crowdsec - An open-source, lightweight agent to detect
 and respond to bad behaviours.
 It also automatically benefits from a global community-wide
 IP reputation database.

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 8903d1b7ca403bcffaead372ac288213252d5d75)

yq: Update to 4.13.4

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 2f51a0188c36ed99b21d53fa9ddb123458b935e8)

Merge pull request #16884 from stangri/openwrt-21.02

[21.02] https-dns-proxy: update to 2021-09-27

https-dns-proxy: update to 2021-09-27

* update to [2021-09-27](https://github.com/aarond10/https_dns_proxy/commit/da2501f542a732167a78f1851a511d9c0abc2fd8)
* fixes https://github.com/aarond10/https_dns_proxy/issues/125
* restart instead of reload on interface hotplug
* fixes https://github.com/openwrt/packages/issues/16794
* produce output and log entries on service start/stop
* prevent unnecessary dnsmasq restarts if service has previously updated dnsmasq settings
* allow both named and typed dnsmasq instance settings to be updated
* update 010-fix-cmakelists patch file

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit f8d16338da979ad20908bd2a16ca62857a902e91)

tor: update to 0.4.5.10

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

acme: update to 3.0.1

On September the 29th, the certificate for R3, the intermediate
CA of Let's Encrypt expired, followed by the root CA expiration
on September the 30th. Update the acme client to 3.0.1,
to make sure newly generated certificates are using the new CA.
This is a backport of 468fc5fca429ca4276dfcfb4136a0d741ed9038b.
https://github.com/openwrt/packages/pull/16801

Default to letsencrypt because the upstream default may change.
Passing --staging is no longer needed, since --serever will
select a staging server if needed.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
Tested-by: Georgi Valkov <gvalkov@abv.bg>
Acked-by: Toke Høiland-Jørgensen <toke@toke.dk>

golang: Update to 1.17.2

Includes fix for CVE-2021-38297 (passing very large arguments to WASM
module functions can cause portions of the module to be overwritten).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit dd986cde7fba08b7c01e3c2a7e25ae612319041f)

Merge pull request #16806 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.11