ksmbd-tools: use ksmbd.conf

smb.conf is deprecated.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

ksmbd-tools: update to 3.4.6

Switch to git tarball as the meson files did not get added to the
official one.

Backport busybox style binaries. Saves on size.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mosh: update to 1.4.0

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

samba4: update to 4.17.2

update samba to 4.17.2

* CVE-2022-3437: There is a limited write heap buffer overflow in the GSSAPI
unwrap_des() and unwrap_des3() routines of Heimdal (included in Samba).
https://www.samba.org/samba/security/CVE-2022-3437.html

* CVE-2022-3592: A malicious client can use a symlink to escape the exported
directory.
https://www.samba.org/samba/security/CVE-2022-3592.html

Signed-off-by: Andrew Sim <andrewsimz@gmail.com>

libuhttpd: update to 3.14.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

irqbalance: update to 1.9.2

Update irqbalance to version 1.9.2.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Merge pull request #19834 from neheb/7

libxslt: update to 1.1.37

libgpg-error: install gpg-error-config again

Upstream deprecated it while not fixing libgcrypt not to use it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libdrm: update to 2.4.114

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libxslt: update to 1.1.37

Upstream URL changed. There's also a cmake build now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libdnet: update to 1.16.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libfido2: update to 1.12.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libshout: update to 2.4.6

Signed-off-by: Rosen Penev <rosenp@gmail.com>

log4cplus: update to 2.0.8

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libaio: update to 0.3.113

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libcap-ng: update to 0.8.3

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libgee: update to 0.20.6

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libgpg-error: update to 1.46

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libvpx: update to 1.12.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19822 from neheb/8

libseccomp: update to 2.5.4

libseccomp: update to 2.5.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libupnpp: update to 0.22.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19707 from stangri/master-https-dns-proxy

https-dns-proxy: rename options

lxc-auto: made init script compatible with image builder

Signed-off-by: Marc Benoit <marcb62185@gmail.com>

syncthing: update to 1.22.1

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

syncthing: add stdiscosrv and strelaysrv

Signed-off-by: Van Waholtz <brvphoenix@gmail.com>

dos2unix: add new package

dos2unix - text file format converters

includes:
dos2unix - DOS/Mac to Unix text file format converter (dos2unix/mac2unix)
unix2dos - Unix to DOS/Mac text file format converter (unix2dos/unix2mac)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

sms-tool: SMS Tool for 3G/4G modem

Co-authored-by: Cezary Jackiewicz <cezary@eko.one.pl>
Co-authored-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Andrey Butirsky <butirsky@gmail.com>

zoneinfo: updated to the latest release

Updated zoneinfo-all meta-package to fix warnings on build
Removed zoneinfo-simple from dependencies of zoneinfo-all as its contents are included in other packages.

Signed-off-by: Vladimir Ulrich <admin@evl.su>

nload: add new package

Signed-off-by: Jacky Guo <leickwell@hotmail.com>

mini_snmpd: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

lynx: trim trailing space

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

librespeed-cli: add package

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

squid: trim trailing space

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

owntone: Update to 28.5

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

libunistring: Update to 1.1

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

libtins: update to 4.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libidn: update to 1.41

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libidn2: update to 2.3.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

liblz4: update to 1.9.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libarchive: update to 3.6.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libmad: update to 0.16.3

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libnpupnp: update to 5.0.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libpng: update to 1.6.38

Remove upstream backports.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19797 from neheb/12

libtasn1: update to 4.19.0

zerotier: update to 1.10.2

Signed-off-by: Moritz Warning <moritzwarning@web.de>

xray-core: Update to 1.6.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsdist: update to 1.7.3

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

libjpeg-turbo: update to 2.1.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libtasn1: update to 4.19.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

pdns: update to 4.7.2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #19773 from stintel/announce

announce: trim trailing spaces

Merge pull request #19779 from stintel/hub-ctrl

hub-ctrl: trim trailing spaces

luaexpat: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Merge pull request #19783 from turris-cz/pulseaudio-fix-conffiles

pulseadio: fix conffiles for pulseadio-daemon-avahi package

Merge pull request #19756 from TDT-AG/pr/20221031-ovpn-compress

openvpn: add possibility to set param "compress" without algorithm

mpd: depend the full variant on pulseaudio instead of pulseaudio-daemon

The full variant of mpd depends on pulseaudio-daemon, so it was not
possible to use the other pulseaudio variant with avahi.

Both pulseaudio daemons provides package pulseaudio, so users can choose
which variant suits them best.
Let's change the dependency to pulseaudio.

Fixes: #19187
Fixes: 2ed62adc5914 ("mpd: enable pulseaudio in full package")
Signed-off-by: Szabolcs Hubai <szab.hu@gmail.com>

pulseadio: fix conffiles for pulseadio-daemon-avahi package

Fixes: 60ac7dd751240fa096a85794023b18f26a8317da ("pulseaudio: simplify
and rework Makefile")

Reported-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #19769 from mhei/php8-update-8.1.12

php8: update to 8.1.12

hub-ctrl: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

announce: trim trailing spaces

Found with modified Kconfiglib.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Merge pull request #19770 from stangri/master-curl

curl: bugfix: building as selected package doesn't break build

curl: bugfix: building as selected package doesn't break build

* Reported-by: Chen Minqiang <ptpt52@gmail.com>
* details [here](https://github.com/openwrt/packages/commit/88009b2d5e394c1822ec55734b63b434981a2a9d#commitcomment-88604318)

Signed-off-by: Stan Grishin <stangri@melmac.ca>

php8: update to 8.1.12

This fixes:
    - CVE-2022-31630
    - CVE-2022-37454

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

knot: update to version 3.2.2

Signed-off-by: Jan Hák <jan.hak@nic.cz>

pulseaudio: change homepage URLs to freedesktop.org

The previous used domain http(s)://pulseaudio.org redirects to
https://www.freedesktop.org/wiki/Software/PulseAudio/

This change enforces to use HTTPS everywhere for homepage URLs

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

pulseaudio: use AUTORELEASE variable

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

pulseaudio: daemons should conflict to each other

It should not be possible to install pulseaudio-daemon and
pulseadio-daemon-avahi at the same time as they have the same files.
Let's avoid that situation by adding conflict.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

pulseaudio: simplify and rework Makefile

There were two conffiles sections and both of them were same, but for
different variants. We can have just one conffile section and use it also
for the other variant.

The same applies for the install section for different variants.
- We have two install sections, but we call the first one with the same
  files and then add something more for the second variant.

- While at it to make it easier, let's change those three rows for
  copying packages into the single one to make sure that I did not miss
anything. Also, we create a directory first and then move files.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

libedit: update to version 20221030-3.1

Signed-off-by: Jan Hák <jan.hak@nic.cz>

sudo: bump to version 1.9.12

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

kadnode: fix newlines in config file

Signed-off-by: Moritz Warning <moritzwarning@web.de>

rclone: Update to 1.60.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

ibrdtnd: run through dos2unix

This patch uses CRLF line endings for some reason...

Signed-off-by: Rosen Penev <rosenp@gmail.com>

cloudflared: Update to 2022.10.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

yq: Update to 4.29.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

openobex: remove CXX patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>

knxd: bump to new upstream version 0.14.54

Signed-off-by: Othmar Truniger <github@truniger.ch>

apcupsd: remove header file patch

Seems to be from a time when pkgconfig returned the wrong path.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #19747 from stangri/master-curl

curl: include nls.mk

openvpn: add possibility to set param "compress" without algorithm

In some situations you need to set the compress param without an
algorithm. Compression will be turned off, but the packet framing for
compression will still be enabled, allowing a different setting to be
pushed later.

As it is not possible to have options with optional values at the
moment, I've introduced a pseudo value "frames_only" which will be
removed in the init script.

Signed-off-by: Martin Schiller <ms@dev.tdt.de>

curl: include nls.mk

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #19745 from stangri/master-curl

curl: update to 7.86.0

python3-pytz: bump to version 2022.5

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

pillow: bump to version 9.3.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

curl: update to 7.86.0

* update to 7.86.0: https://curl.se/changes.html#7_86_0
* remove 300-curl-wolfssl.m4-error-out-if-wolfSSL-is-not-usable.patch as
  it was fixed upstream: https://github.com/curl/curl/pull/9682
* update configure options for OpenSSL as --without-ssl is breaking build
* remove --without-libidn configure arg as it's no longer recognized

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Merge pull request #19736 from champtar/phantap-lacp

phantap: update to latest commit

phantap: update to latest commit

815c312 Forward 01:80:C2:00:00:0{1,2} using nftables

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

attendedsysupgrade-common: update ASU CA pubkey

The old key was overwritten during a machine migration and the current
worker key is no longer valid. To create new valid worker certificates
this commit adds a new CA pubkey.

To update running OpenWrt devices via a client one needs to force
install it or upgrade to the latest version of
`attendedsysupgrade-common` - I'm sorry for the inconvenience.

This change is only related to the `usign` pubkey and `ucert`
certificate which is used to sign all created images on the server.

While at it, use INSTALL_DATA instead of INSTALL_BIN.

Signed-off-by: Paul Spooren <mail@aparcar.org>

rsync: update to 3.2.7

Bump to latest upstream release.

Signed-off-by: John Audia <therealgraysky@proton.me>

Merge pull request #19693 from turris-cz/ffmpeg-conflicts-provides

ffmpeg: add conflicts and provides

gdbm: configure with `--without-readline`

By default, gdbm configures/builds with readline and curses support
if they exist.

This can cause race conditions when compiling gdbm and ncurses in
parallel, as gdbm may try to link to ncurses when it doesn't exist.

This commit forces gdbm to skip using readline/ncurses, since it's
unlikely that anybody is using the line-editing feature of gdbm.

See [gdbm's README][1] for more info.

[1]: https://git.gnu.org.ua/gdbm.git/tree/README?h=v1.21#n50

Signed-off-by: Alois Klink <alois@aloisklink.com>

Merge pull request #19704 from Ansuel/fix-atlas

atlas-probe: fix SIGSEGV error on 32bit system

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: Update to 1.6.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

xray-core: remove orphan xray-geodata definition

Fixes: 975153f93da132 ("v2ray-geodata: split from xray-geodata")
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

dnsproxy: Update to 0.46.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

samplicator: update to latest master commit 2021-10-11

The newest master branch has important fixes. However, no new release is
published [0]. Switch to git and update to latest master commit.
This introduces new version scheme by using YYYY-MM-DD of the commit.

In addition, add necessary "PKG_FIXUP" and "PKG_REMOVE_FILES" to allow
compile the new version. Also add enable "PKG_BUILD_PARALLEL".

Further, use a pidfile and remove outdated patches.

https://github.com/sleinen/samplicator/issues/73

Signed-off-by: Nick Hainke <vincent@systemli.org>

Merge pull request #19714 from turris-cz/libwebsockets-dependency

libwebsockets: fix recursive dependency

libwebsockets: fix recursive dependency

While running `make menuconfig`, it was discovered then there is a
recursive dependency like this:
tmp/.config-package.in:59138:error: recursive dependency detected!
tmp/.config-package.in:59138: symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls
tmp/.config-package.in:59122: symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl

It is not possible with the recently added conflicts that two packages
(OpenSSL and full variant, which uses OpenSSL as well), which are almost the same
provides the same named package libwebsockets as their conflict - Mbed
TLS.

Fixes: 676c5c72b5eeb583da2603e399fac085fa442c59 ("libwebsockets: OpenSSL
and mbedTLS variants should conflict")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>