miredo: add debian reproducibility patch

Refreshed other patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #14630 from sartura/sysrepo

Update sysrepo packages

Merge pull request #14629 from commodo/stress-ng

stress-ng: bump to version 0.12.02

Merge pull request #14628 from commodo/numpy

numpy: bump to version 1.20.0

Merge pull request #14631 from stangri/master-simple-adblock

simple-adblock: remove dependency on jsonfilter & old code

simple-adblock: remove dependency on jsonfilter & old code

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #14598 from 1715173329/xray

xray-core: add new package

sysrepo: Bump to 1.4.104

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

netopeer2: Bump to 1.1.53

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

libnetconf2: Bump to 1.1.36

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

libyang: Bump to 1.0.215

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

numpy: bump to version 1.20.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

stress-ng: bump to version 0.12.02

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

xray-core: add new package

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>

Merge pull request #14621 from har-riz/master

getdns: Fix TLS V1.3 Ciphersuites option in Stubby

python-execnet: update to version 1.8.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #14619 from lipnitsk/antfs

antfs: patch for linux >= 5.8.0

antfs: patch for linux >= 5.8.0

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

rtty: update to 7.3.1

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

getdns: Fix TLS V1.3 Ciphersuites option in Stubby

Description :
Fix typo in CMAKE getdns included files, so Stubby can use TLS v1.3 with chipersuites options ON.

This solve issue that's written in here :
https://github.com/getdnsapi/stubby/issues/240
https://github.com/getdnsapi/stubby/issues/257

Signed-off-by: Harris K Kusuma <igharris.kk@gmail.com>

Merge pull request #14609 from httpstorm/hwdata-0.343.fix-macos

hwdata 0.343: fix build error on macOS

hwdata: fix build error on macOS

The install command on macOS does not support the -T flag.
As suggested by Rosen Penev, this package does not compile anything,
so the contents can be installed directly.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>

Merge pull request #14522 from neheb/bt

btrfs-progs: update to 5.10

php8: introduce new major version package

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7: move into own submenu to prepare for upcoming php8

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7: rename PECLPackage to PHP7PECLPackage to prepare PHP8 transition

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7-pecl-propro: cleanup dead code

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #14618 from flyn-org/openldap

openldap: update to 2.4.57

Merge pull request #14602 from lipnitsk/master

libpfring: update to 7.8.0 (for kernel 5.10 compatibility)

openldap: update to 2.4.57

Fixes:

  * CVE-2020-36221
  * CVE-2020-36222
  * CVE-2020-36223
  * CVE-2020-36224
  * CVE-2020-36225
  * CVE-2020-36226
  * CVE-2020-36227
  * CVE-2020-36228
  * CVE-2020-36229
  * CVE-2020-36230

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libpfring: update to 7.8.0

Add patch to fix compilation with kernel 5.10

Also submitted upstream:
https://github.com/ntop/PF_RING/pull/687
https://github.com/ntop/PF_RING/pull/688

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

btrfs-progs: update to 5.10

Added libmount dependency as it's needed now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #14617 from morgenroth/libarchive-upgrade

libarchive: update to 3.5.1

Merge pull request #14608 from httpstorm/libgpg-error-1.39.fix-macos

libgpg-error: fix build error on macOS

python-uci: add package

Python bindings for libuci, useful for writing ansible modules to manage OpenWRT systems.
Reused Makefile from upstream: https://gitlab.nic.cz/turris/turris-os-packages/-/blob/develop/lang/python-uci/Makefile

Signed-off-by: Erik Larsson <who+github@cnackers.org>

libgpg-error: fix build error on macOS

src/gen-lock-obj.sh runs in /bin/sh which does not support echo -n on macOS,
and generates garbage. Resolved by using printf which is posix compliant.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>

snort3: update to 3.1.0.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libdaq3: update to 3.0.0

Signed-off-by: W. Michael Petullo <mike@flyn.org>

quota: update to 4.06

This includes a backport of quota commit 02b222a3, which removes the
use of reallocarray. The musl C library does not provide reallocarray.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libarchive: update to 3.5.1

Signed-off-by: Johannes Morgenroth <jm@m-network.de>

Merge pull request #14593 from neheb/udp

udpspeeded: add missing libatomic dependency

udpspeeder: add missing libatomic dependency

Signed-off-by: Rosen Penev <rosenp@gmail.com>

rtty: update to 7.3.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

bind: bump to 9.17.9

Drop obsolete patches

 - 001-no-tests.patch
 - 002-fix-cross-compilation.patch

Move several user-executable binaries from /usr/sbin to /usr/bin per
upstream.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Merge pull request #14601 from pprindeville/isc-dhcp-add-multihoming-domain

isc-dhcp: add multihoming domain

isc-dhcp: add support for multi-homing in 'domain' configs

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Merge pull request #14545 from PolynomialDivision/generate-ipv6-adddress-autorelease

generate-ipv6-address: use autorelease feature

Merge pull request #14544 from PolynomialDivision/libradiotap-use-autorelease

libradiotap: use autorelease feature

Merge pull request #14543 from PolynomialDivision/libuwifi-use-autorelease

libuwifi: use autorelease feature

Merge pull request #14542 from PolynomialDivision/sipcalc-use-autorelease

sipcalc: use autorelease feature

Merge pull request #14595 from jmarcet/docker-compose-update

docker-compose: Update to version 1.28.2

apk: fix compilation without deprecated OpenSSL APIs

Upstream Backport.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #14568 from PolynomialDivision/collectd-fix-snmp6

collectd: refactor snmp6

Merge pull request #14588 from TDT-AG/pr/20210127-keepalived

keepalived: update to version 2.1.1

gl-mifi-mcu: compatibility with linux >= 5.6

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

docker-compose: Update to version 1.28.2

Bugs:

- Revert to Python 3.7 bump for Linux static builds

- Add bash completion for docker-compose logs|up --no-log-prefix

Miscellaneous:

- CI setup update

Signed-off-by: Javier Marcet <javier@marcet.info>

Merge pull request #14592 from dobo90/socat_improvement

socat: allow more complex command line options

socat: allow more complex command line options

Current implementation of socat's init service doesn't allow to run more
complex configurations. As an example there's no possibility to execute
following command:

  socat TCP-LISTEN:8080,fork,reuseaddr,bind=192.168.1.1 \
    EXEC:"/sbin/ip netns exec somenetns socat STDIO TCP:10.0.0.1:80"

In such command the first line is argv[1] and the second line is
argv[2]. SocatOptions config option is a string. As as a consequence of
this each word will be passed as a separate argv element. Socat won't be
able to parse arguments correctly.

In order to mitigate this issue, we can also accept SocatOptions as a
list of strings. Following config file will work correctly:

config socat 'tunnel_8080_into_somenetns'
option enable '1'
list SocatOptions 'TCP-LISTEN:8080,fork,reuseaddr,bind=192.168.1.1'
list SocatOptions 'EXEC:"/sbin/ip netns exec somenetns socat STDIO TCP:10.0.0.1:80"'

While we're at it, pass stdout and stderr into logread.

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

python-pytest: update to version 6.2.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

python-pytest-xdist: update to version 2.2.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

rtty: update to 7.2.3

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

python-psutil: update to version 5.8.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #14584 from EdiTurn/master

ddns-scripts: make WGET_SSL executable

keepalived: use autorelease feature

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

keepalived: update to version 2.2.1

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

ddns-scripts: make WGET_SSL executable

Signed-off-by: Edi Turn <yyxstter@gmail.com>

sudo: update to version 1.9.5p2

Fixes: CVE-2021-3156 (known as Baron Samedit)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #14541 from PolynomialDivision/use-autorelease

dawn: use autorelease feature

dawn: use autorelease feature

Package version is automatically increased as described here:
https://github.com/openwrt/packages/issues/14537

Signed-off-by: Nick Hainke <vincent@systemli.org>

apk: add package

The Alpine Package Keeper is the default package manager for Alpine
Linux. They manage their own repositoriy with thousends of packages and
as musl is used for compilation, their binaries can directly run on
OpenWrt.

Signed-off-by: Paul Spooren <mail@aparcar.org>

Merge pull request #14515 from sartura/sysrepo

netopeer2: merge-config: listen on ipv6 and ipv4

netopeer2: merge-config: listen on ipv6 and ipv4

* The default local-adress makes Netopeer2-server listen on ipv4 only.
We change it to :: in order to listen on ipv6 as well as ipv4.

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Merge pull request #14494 from neheb/n

nfs-kernel-server: update to 2.5.2

Merge pull request #14520 from neheb/ato

atop: update to 2.6.0

Merge pull request #14578 from lucize/frrup

frr: update 7.5 to latest backports

Merge pull request #14576 from Andy2244/ksmbd-fix-#13758

ksmbd-tools: fix #13758

Merge pull request #14574 from Andy2244/samba-4.13.4

samba4: update to 4.13.4

frr: update 7.5 to latest backports

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

collectd: snmp6 further improvements

Return with "-1" if parsing fails in read function.
Reduce buffersize of splitstring function.

Signed-off-by: Nick Hainke <vincent@systemli.org>

ksmbd-tools: fix #13758

* fix for possible exploit #13758
* sanetize all external template/config inputs
* fix some shellcheck warnings

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

samba4: update to 4.13.4

* update to 4.13.4

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Merge pull request #14551 from geraldhansen/fix-ddns-provider

Fix ddns provider

ddns-scripts: Increase PKG_RELEASE

Signed-off-by: Gerald Hansen <gerald.hansen@posteo.de>

ddns-scripts: Remove not working ddns provider

I checked the hostname for existing DNS A and AAAA entries and these
ones didn't have an entry.

Signed-off-by: Gerald Hansen <gerald.hansen@cloud.ionos.com>

ddns-scripts: Change parameter for myonlineportal

As the default uclient-fetch doesn't support authentication header
and the ddns provider myonlineportal.net support also username and
passwort as url parameter this can be changed.

Signed-off-by: Gerald Hansen <gerald.hansen@cloud.ionos.com>

Merge pull request #14571 from neheb/j

pthsem: try to fix ARC compilation

Merge pull request #14566 from rs/nextdns-1.10.1-master

nextdns: Update to version 1.10.1

Merge pull request #14561 from ja-pa/libmaxminddb-1.5.0

libmaxminddb: update to version 1.5.0

pthsem: try to fix ARC compilation

Signed-off-by: Rosen Penev <rosenp@gmail.com>

collectd: fix snmp6 not showing all interfaces

Getifaddrs() is not working all the time (e.g. wireguard interfaces).
Instead we use if_nameindex() syscall as suggested in:
 https://stackoverflow.com/a/45796495/8474618

Signed-off-by: Nick Hainke <vincent@systemli.org>

zoneinfo: Updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>

nextdns: Update to version 1.10.1

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

libmaxminddb: update to version 1.5.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #14557 from jefferyto/golang-1.15.7

golang: Update to 1.15.7

Merge pull request #14555 from fatbob313/umurmur0.2.19

uMurmur: Update to 0.2.19. Patches required for 0.2.17 merged upstream.

Merge pull request #14553 from nickberry17/update_libqmi

libqmi: bump version

Merge pull request #14552 from nickberry17/update_libmbim

libmbim: bump version

Merge pull request #14539 from PolynomialDivision/owipcalc-default-route

owipcalc: fix contains not respect default route

golang: Update to 1.15.7

This includes fixes for:
* CVE-2021-3114: crypto/elliptic: incorrect operations on the P-224
  curve
* CVE-2021-3115: cmd/go: packages using cgo can cause arbitrary code
  execution on Windows

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

uMurmur: Update to 0.2.19. Patches required for 0.2.17 merged upstream.

Signed-off-by: Martin Johansson <martin@fatbob.nu>