openldap: update to 2.4.57

Fixes:

  * CVE-2020-36221
  * CVE-2020-36222
  * CVE-2020-36223
  * CVE-2020-36224
  * CVE-2020-36225
  * CVE-2020-36226
  * CVE-2020-36227
  * CVE-2020-36228
  * CVE-2020-36229
  * CVE-2020-36230

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Merge pull request #14617 from morgenroth/libarchive-upgrade

libarchive: update to 3.5.1

Merge pull request #14608 from httpstorm/libgpg-error-1.39.fix-macos

libgpg-error: fix build error on macOS

python-uci: add package

Python bindings for libuci, useful for writing ansible modules to manage OpenWRT systems.
Reused Makefile from upstream: https://gitlab.nic.cz/turris/turris-os-packages/-/blob/develop/lang/python-uci/Makefile

Signed-off-by: Erik Larsson <who+github@cnackers.org>

libgpg-error: fix build error on macOS

src/gen-lock-obj.sh runs in /bin/sh which does not support echo -n on macOS,
and generates garbage. Resolved by using printf which is posix compliant.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>

snort3: update to 3.1.0.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libdaq3: update to 3.0.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

quota: update to 4.06

This includes a backport of quota commit 02b222a3, which removes the
use of reallocarray. The musl C library does not provide reallocarray.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libarchive: update to 3.5.1

Signed-off-by: Johannes Morgenroth <jm@m-network.de>

Merge pull request #14593 from neheb/udp

udpspeeded: add missing libatomic dependency

udpspeeder: add missing libatomic dependency

Signed-off-by: Rosen Penev <rosenp@gmail.com>

rtty: update to 7.3.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

bind: bump to 9.17.9

Drop obsolete patches

 - 001-no-tests.patch
 - 002-fix-cross-compilation.patch

Move several user-executable binaries from /usr/sbin to /usr/bin per
upstream.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Merge pull request #14601 from pprindeville/isc-dhcp-add-multihoming-domain

isc-dhcp: add multihoming domain

isc-dhcp: add support for multi-homing in 'domain' configs

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #14545 from PolynomialDivision/generate-ipv6-adddress-autorelease

generate-ipv6-address: use autorelease feature

Merge pull request #14544 from PolynomialDivision/libradiotap-use-autorelease

libradiotap: use autorelease feature

Merge pull request #14543 from PolynomialDivision/libuwifi-use-autorelease

libuwifi: use autorelease feature

Merge pull request #14542 from PolynomialDivision/sipcalc-use-autorelease

sipcalc: use autorelease feature

Merge pull request #14595 from jmarcet/docker-compose-update

docker-compose: Update to version 1.28.2

apk: fix compilation without deprecated OpenSSL APIs

Upstream Backport.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #14568 from PolynomialDivision/collectd-fix-snmp6

collectd: refactor snmp6

Merge pull request #14588 from TDT-AG/pr/20210127-keepalived

keepalived: update to version 2.1.1

gl-mifi-mcu: compatibility with linux >= 5.6

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

docker-compose: Update to version 1.28.2

Bugs:

- Revert to Python 3.7 bump for Linux static builds

- Add bash completion for docker-compose logs|up --no-log-prefix

Miscellaneous:

- CI setup update

Signed-off-by: Javier Marcet <javier@marcet.info>

Merge pull request #14592 from dobo90/socat_improvement

socat: allow more complex command line options

socat: allow more complex command line options

Current implementation of socat's init service doesn't allow to run more
complex configurations. As an example there's no possibility to execute
following command:

  socat TCP-LISTEN:8080,fork,reuseaddr,bind=192.168.1.1 \
    EXEC:"/sbin/ip netns exec somenetns socat STDIO TCP:10.0.0.1:80"

In such command the first line is argv[1] and the second line is
argv[2]. SocatOptions config option is a string. As as a consequence of
this each word will be passed as a separate argv element. Socat won't be
able to parse arguments correctly.

In order to mitigate this issue, we can also accept SocatOptions as a
list of strings. Following config file will work correctly:

config socat 'tunnel_8080_into_somenetns'
option enable '1'
list SocatOptions 'TCP-LISTEN:8080,fork,reuseaddr,bind=192.168.1.1'
list SocatOptions 'EXEC:"/sbin/ip netns exec somenetns socat STDIO TCP:10.0.0.1:80"'

While we're at it, pass stdout and stderr into logread.

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

python-pytest: update to version 6.2.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

python-pytest-xdist: update to version 2.2.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

rtty: update to 7.2.3

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

python-psutil: update to version 5.8.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #14584 from EdiTurn/master

ddns-scripts: make WGET_SSL executable

keepalived: use autorelease feature

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

keepalived: update to version 2.2.1

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

ddns-scripts: make WGET_SSL executable

Signed-off-by: Edi Turn <yyxstter@gmail.com>

sudo: update to version 1.9.5p2

Fixes: CVE-2021-3156 (known as Baron Samedit)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #14541 from PolynomialDivision/use-autorelease

dawn: use autorelease feature

dawn: use autorelease feature

Package version is automatically increased as described here:
https://github.com/openwrt/packages/issues/14537

Signed-off-by: Nick Hainke <vincent@systemli.org>

apk: add package

The Alpine Package Keeper is the default package manager for Alpine
Linux. They manage their own repositoriy with thousends of packages and
as musl is used for compilation, their binaries can directly run on
OpenWrt.

Signed-off-by: Paul Spooren <mail@aparcar.org>

Merge pull request #14515 from sartura/sysrepo

netopeer2: merge-config: listen on ipv6 and ipv4

netopeer2: merge-config: listen on ipv6 and ipv4

* The default local-adress makes Netopeer2-server listen on ipv4 only.
We change it to :: in order to listen on ipv6 as well as ipv4.

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Merge pull request #14494 from neheb/n

nfs-kernel-server: update to 2.5.2

Merge pull request #14520 from neheb/ato

atop: update to 2.6.0

Merge pull request #14578 from lucize/frrup

frr: update 7.5 to latest backports

Merge pull request #14576 from Andy2244/ksmbd-fix-#13758

ksmbd-tools: fix #13758

Merge pull request #14574 from Andy2244/samba-4.13.4

samba4: update to 4.13.4

frr: update 7.5 to latest backports

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

collectd: snmp6 further improvements

Return with "-1" if parsing fails in read function.
Reduce buffersize of splitstring function.

Signed-off-by: Nick Hainke <vincent@systemli.org>

ksmbd-tools: fix #13758

* fix for possible exploit #13758
* sanetize all external template/config inputs
* fix some shellcheck warnings

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

samba4: update to 4.13.4

* update to 4.13.4

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Merge pull request #14551 from geraldhansen/fix-ddns-provider

Fix ddns provider

ddns-scripts: Increase PKG_RELEASE

Signed-off-by: Gerald Hansen <gerald.hansen@posteo.de>

ddns-scripts: Remove not working ddns provider

I checked the hostname for existing DNS A and AAAA entries and these
ones didn't have an entry.

Signed-off-by: Gerald Hansen <gerald.hansen@cloud.ionos.com>

ddns-scripts: Change parameter for myonlineportal

As the default uclient-fetch doesn't support authentication header
and the ddns provider myonlineportal.net support also username and
passwort as url parameter this can be changed.

Signed-off-by: Gerald Hansen <gerald.hansen@cloud.ionos.com>

Merge pull request #14571 from neheb/j

pthsem: try to fix ARC compilation

Merge pull request #14566 from rs/nextdns-1.10.1-master

nextdns: Update to version 1.10.1

Merge pull request #14561 from ja-pa/libmaxminddb-1.5.0

libmaxminddb: update to version 1.5.0

pthsem: try to fix ARC compilation

Signed-off-by: Rosen Penev <rosenp@gmail.com>

collectd: fix snmp6 not showing all interfaces

Getifaddrs() is not working all the time (e.g. wireguard interfaces).
Instead we use if_nameindex() syscall as suggested in:
 https://stackoverflow.com/a/45796495/8474618

Signed-off-by: Nick Hainke <vincent@systemli.org>

zoneinfo: Updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>

nextdns: Update to version 1.10.1

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

libmaxminddb: update to version 1.5.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #14557 from jefferyto/golang-1.15.7

golang: Update to 1.15.7

Merge pull request #14555 from fatbob313/umurmur0.2.19

uMurmur: Update to 0.2.19. Patches required for 0.2.17 merged upstream.

Merge pull request #14553 from nickberry17/update_libqmi

libqmi: bump version

Merge pull request #14552 from nickberry17/update_libmbim

libmbim: bump version

Merge pull request #14539 from PolynomialDivision/owipcalc-default-route

owipcalc: fix contains not respect default route

golang: Update to 1.15.7

This includes fixes for:
* CVE-2021-3114: crypto/elliptic: incorrect operations on the P-224
  curve
* CVE-2021-3115: cmd/go: packages using cgo can cause arbitrary code
  execution on Windows

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

uMurmur: Update to 0.2.19. Patches required for 0.2.17 merged upstream.

Signed-off-by: Martin Johansson <martin@fatbob.nu>

libmbim: bump version

Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>

libqmi: bump version

Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>

Merge pull request #14546 from 1715173329/new-yq

yq: Update to v4.4.1

Merge pull request #14334 from bogdik/master

Add Eoip packege

eoip: Add package

add eoip package,this can create ethernet
tunnels compatible with Mikrotik EoIP tunnel.
At current moment it is easiest way
to create stateless tunnel with Mikrotik.

Signed-off-by: Bogdan Shatik <bogdikxxx@mail.ru>

python-flask-seasurf: update to version 0.3.0

- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

youtube-dl: update to version 2021.1.16

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #14529 from ja-pa/ooniprobe-3.4.0

ooniprobe: update to version 3.4.0

owipcalc: fix contains not respect default route

In IPv4 the default route can be written as
 0.0.0.0/0

In IPv6 the default route can be written as
 ::/0

If u try
  owipcalc 0.0.0.0/0 contains 1.1.1.1
or
  owipcalc ::/0 contains ::1
owipcalc will respond with 0 meaning that the "default prefixes" do not
contain the routes.
That is why we check now for 0 prefix.

Furthermore, if the prefix is 0, i will be 16. We will access a negative
array entry in the line:
 uint8_t net1 = x->s6_addr[15-i] & m;

Divide by % 16 to prevent i becoming 16:
 uint8_t i = ((128 - a->prefix) / 8) % 16;

Signed-off-by: Nick Hainke <vincent@systemli.org>

yq: Update to v4.4.1

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>

generate-ipv6-address: use autorelease feature

Package version is automatically increased as described here:
https://github.com/openwrt/packages/issues/14537

Signed-off-by: Nick Hainke <vincent@systemli.org>

libradiotap: use autorelease feature

Package version is automatically increased as described here:
https://github.com/openwrt/packages/issues/14537

Signed-off-by: Nick Hainke <vincent@systemli.org>

libuwifi: use autorelease feature

Package version is automatically increased as described here:
https://github.com/openwrt/packages/issues/14537

Signed-off-by: Nick Hainke <vincent@systemli.org>

sipcalc: use autorelease feature

Package version is automatically increased as described here:
https://github.com/openwrt/packages/issues/14537

Signed-off-by: Nick Hainke <vincent@systemli.org>

Merge pull request #14538 from zpc0/hwdata-0343

hwdata: update to 0.343

Merge pull request #14531 from adschm/calcmove

owipcalc/maccalc: import from base

hwdata: update to 0.343

Signed-off-by: Yanase Yuki <dev@zpc.sakura.ne.jp>

Merge pull request #14530 from TDT-AG/pr/20210122-iperf

iperf: import iperf3 and iperf from base

Merge pull request #14500 from stangri/master-https-dns-proxy

https-dns-proxy: bugfix: high CPU utilization

Merge pull request #14506 from neheb/spm

perl-mail-spamassassin: change perl dependency to not use select

Merge pull request #14528 from ja-pa/tor-hs-update

tor-hs: fix rpcd

Merge pull request #14527 from ja-pa/czmq-4.2.1

czmq: update to version 4.2.1

maccalc: import from base

This is a helpful utility, but it does not have any dependencies
in base repository. Move it to packages feed.

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>

owipcalc: import from base

This is a helpful utility, but it does not have any dependencies
in base repository. Move it to packages feed.

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>

iperf3: import from base

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

iperf: import from base

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

ooniprobe: update to version 3.4.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

tor-hs: fix rpcd

Changes:
- add rpcd dependecy
- handle rpcd in post inst/rm sections

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

czmq: update to version 4.2.1

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #14510 from zhanhb/ddns-scripts

ddns-scripts: fix wget-ssl path

Merge pull request #14489 from pprindeville/isc-dhcp-add-other-rfc1918-nets

isc-dhcp: support dynamic dns for 10/8 and 172.16/12