screen: backport fix for CVE-2021-26937

Security reports:
- https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html
This issue can be reproduced even on OpenWrt
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982435

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #14872 from neheb/bon

bonnie++: update to 2.00a

Merge pull request #14871 from luizluca/sane-backends-1.0.32

sane-backends: update to 1.0.32

bonnie++: update to 2.00a

Add custom meson build since the Makefile requires too much patching
anyway.

Stop using uClibc++. It will be removed in the near future.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #14854 from luizluca/hplip-3.21.2

hplip: bump to 3.21.2

sane-backends: update to 1.0.32

Dropped 102-pixma_Restore_old_behaviour_in_case_XML_support_is_missing.patch (merged)

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

Merge pull request #14865 from neheb/lou

loudmouth: update to 1.5.4

hplip: bump to 3.21.2

Patches refreshed:
* 010-libusb_fix.patch
* 020-remove_cups_dep_on_scan.patch
* 060-fix-uclibc.patch renamed to 060-fix-glibc.patch

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

loudmouth: update to 1.5.4

Remove upstreamed patches.

Fix license.

Use AUTORELEASE to avoid bumping the release.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #14849 from 1715173329/yq-mter

yq: bump to 4.6.0, remove myself from maintainters

Merge pull request #14823 from neheb/gdbn

gdbm: update to 1.19

Merge pull request #14842 from marcin1j/pr/20200221-fix-mini_snmpd-source-repo

mini_snmpd: fix spurious version bump to 1.6

Merge pull request #14826 from jjm2473/master-fix-icu-macos

libs/icu:  fix host compile in macOS

Merge pull request #14817 from neheb/sn

sane-backends: remove outdated C++ patch

Merge pull request #14832 from TDT-AG/pr/20210222-stunnel

stunnel: update to 5.58

Merge pull request #14853 from BKPepe/netdata-1.29.2

netdata: update to version 1.29.2

Merge pull request #14844 from ja-pa/python-more-itertools-8.7.0

python-more-itertools: update to version 8.7.0

Merge pull request #14837 from ja-pa/libmaxminddb-1.5.2

libmaxminddb: update to version 1.5.2

Merge pull request #14833 from jefferyto/golang-1.16

golang: Update to 1.16

unbound: update to 1.13.1

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

netdata: update to version 1.29.2

Release notes:
https://github.com/netdata/netdata/releases/tag/v1.29.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #14847 from jefferyto/python-3.9.2

python3: Update to 3.9.2, refresh patches

yq: Update to 4.6.0

Signed-off-by: Tianling Shen <cnsztl@gmail.com>

yq: remove myself from maintainters

Signed-off-by: Tianling Shen <cnsztl@gmail.com>

python3: Update to 3.9.2, refresh patches

Includes fixes for:
* CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr
* CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon
  as a query args separator

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-more-itertools: update to version 8.7.0

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

mini_snmpd: fix spurious version bump to 1.6

Fixes spurious version bump done in 5c8fb42 and reported in #14815 and
switches source proto from git to codeload.

Upstream has changed daemon binary name to `/usr/sbin/mini-snmpd`.
Package and config/init script name stays unchanged.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>

libmaxminddb: update to version 1.5.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

golang: Update to 1.16

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

stunnel: update to 5.58

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Merge pull request #14811 from xdarklight/ksmbd-3.3.5

ksmbd and ksmbd-tools 3.3.5

libs/icu:  fix host compile in macOS

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>

fdk-aac: refresh patches

A treewide script ran to find dirty patches, this was the only packages
found with issues. From now on the CI should no longer return false
positives on dirty patches.

Signed-off-by: Paul Spooren <mail@aparcar.org>

Merge pull request #14821 from neheb/gd

libwebp + libgd version bump

Merge pull request #14813 from mhei/lttng-tools-iconv-fix

lttng-tools: fix linking with full language support enabled

libevdev: update to 1.11.0

Use AUTORELEASE to avoid having to bump it manually.

Remove old patch for kernel 4.14 compatibility.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #13929 from ja-pa/git-lfs

git-lfs: add new package

gdbm: update to 1.19

Remove upstreamed patch.

Use AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libgd: update to 2.3.1

Remove upstreamed patches. Add one to fix finding libwebp.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libwebp: update to 1.2.0

Switch to AUTORELEASE for easier changes.

Fix not having all of the libraries.

Remove upstream patches and refresh other one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

sane-backends: remove outdated C++ patch

std::round was unavailable because of a wrong configure var from the
uClibc days. Fixed upstream with 1647790ae6202bd70b199e2aa44f8eb43e8d3af1

Refreshed patches with make package/sane-backends/refresh

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libv4l: fix glibc compilation

There was a typo in the linker flags.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #14818 from mwarning/zt

zerotier: bump to 1.6.4

Merge pull request #14646 from lipnitsk/refresh

treewide: Run refresh on all packages

zerotier: bump to 1.6.4

Signed-off-by: Moritz Warning <moritzwarning@web.de>

Merge pull request #14814 from stintel/yubico

Fix typo Yuibco -> Yubico

treewide: Run refresh on all packages

The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

treewide: s/Yuibco/Yubico/

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

ykpers: refresh patches

Required to make CI happy.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

lttng-tools: fix linking with full language support enabled

This fixes fallout after d18692c.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #14741 from mhei/openconnect-iconv-intl

openconnect: fix dependencies to iconv/intl (fixes #14734)

openconnect: fix dependencies to iconv/intl (fixes #14734)

This fixes the issue raised after d18692c (libxml2: allow building with iconv support).

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

ksmbd-tools: update to 3.3.5

Major changes for version 3.3.5 are:
- Rename "streams" parameter to "vfs objects = streams_xattr".
- Enable smb2 leases by default.
- Ignore ksmbd.subauth creation failure.
- Fix bugs that related to guest ok = yes.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>

ksmbd: update to 3.3.5

Major changes for version 3.3.5 are:
- Add support for version 4 dos attribute structure of samba.
- Implement maximal allowed desired access.
- Fix several error handling.
- Fix a few smbtorture failures.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>

Merge pull request #14806 from dibdot/banip

banip: update to 0.7.3

ooniprobe: update to version 3.5.2

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #14717 from dobo90/adguardhome_v0.105.0

adguardhome: bump to 0.105.1

banip: update to 0.7.3

* fix search string/pipe preparation for the background service
* fix IPSet maxelem limitation, made it more flexible
* fix potential error during resume action
* add Cisco Talos IP blacklist
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>

rng-tools: fix init START

We should be using "00" to deal with alphabetical order.

Fixes: e9a126c14509 ("rng-tools: start as early as possible")
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

Merge pull request #14801 from Noltari/rng-tools

rng-tools: start as early as possible

Merge pull request #14800 from 6ec123321/master

gost_engine: Add GOST2012 Engine for OpenSSL

gost_engine: added new line in the end of file

Signed-off-by: Artur Petrov <github@phpchain.ru>

Merge pull request #14791 from ja-pa/tor-0.4.5.6

tor: update to version 0.4.5.6

Merge pull request #14804 from apple-etan/feature/ek/libnetfilter-queue/ipv6

libnetfilter-queue: fix IPv6 header handling

libnetfilter-queue: fix IPv6 header handling

Import 51f25df304aeaa6c1b02ef7456a61278ee70c102 from upstream.

Signed-off-by: Etan Kissling <etan_kissling@apple.com>

Merge pull request #14797 from apple-etan/feature/ek/libnetfilter-queue/icmp

libnetfilter-queue: add pkt_buff function for ICMP

libnetfilter-queue: add pkt_buff function for ICMP

Import 662c8f44d53492d2e0ebd430dadef12d580ec330 from upstream.

Signed-off-by: Etan Kissling <etan_kissling@apple.com>

Merge pull request #14792 from jmarcet/python_docker_update

python-docker: Update to 4.4.3

Merge pull request #14793 from jmarcet/docker-compose-update

Docker compose update

Merge pull request #14794 from zhaojh329/rtty

rtty: update to 7.4.0

Merge pull request #14796 from ja-pa/dnstap-0.4.0

dnstap: update to version 0.4.0

reptyr: Don't build for mipsel

The package does not support any mips archs, including mipsel.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

rng-tools: start as early as possible

Raspberry Pi devices (bcm2708) need this to get from:
[  102.310494] random: crng init done
to:
[   12.539744] random: crng init done

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

gost_engine: add support GOST2012

Signed-off-by: Artur Petrov <github@phpchain.ru>

rtty: update to 7.4.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

python-docker: Update to 4.4.3

Bugfixes:

- Fix SSH port parsing when shelling out to the ssh client

Signed-off-by: Javier Marcet <javier@marcet.info>

docker-compose: Update to version 1.28.4

Bugs:

- Fix SSH port parsing by bumping docker-py to 4.4.3

Miscellaneous:

- Bump Python to 3.7.10

Signed-off-by: Javier Marcet <javier@marcet.info>

docker-compose: Update to version 1.28.3

Bugs:

- Fix SSH hostname parsing when it contains leading 's', 'h', and remove the quiet
option that was hiding the error (via docker-py bump to 4.4.2)

- Fix key error for --no-log-prefix option

- Fix incorrect CLI environment variable name for service profiles: COMPOSE_PROFILES
instead of COMPOSE_PROFILE

- Fix fish completion

Miscellaneous:

- Bump cryptography to 3.3.2

- Remove log driver filter

Signed-off-by: Javier Marcet <javier@marcet.info>

tor: update to version 0.4.5.6

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Merge pull request #14790 from Noltari/bcm27xx-eeprom

bcm27xx-eeprom: update to latest version

bcm27xx-eeprom: update to latest version

New eeprom firmwares support recently added RPi 400 and CM4.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>

Merge pull request #14786 from apple-etan/feature/ek/libnetfilter-queue/fixup

libnetfilter-queue: re-add PKG_FIXUP to fix build

Merge pull request #14789 from zhaojh329/libuhttpd

libuhttpd: Update to 3.9.0

libuhttpd: Update to 3.9.0

Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>

Merge pull request #14750 from neheb/pyreq

python-requests: split up patches into two files

libnetfilter-queue: re-add PKG_FIXUP to fix build

Currently when trying to build this package a build error is produced:

WARNING: 'automake-1.16' is missing on your system.
         You should only need it if you modified 'Makefile.am' or
         'configure.ac' or m4 files included by 'configure.ac'.
         The 'automake' program is part of the GNU Automake package:
         <https://www.gnu.org/software/automake>
         It also requires GNU Autoconf, GNU m4 and Perl in order to run:
         <https://www.gnu.org/software/autoconf>
         <https://www.gnu.org/software/m4/>
         <https://www.perl.org/>

This error is due to an attempt to use the native host tools instead of
the OpenWrt build system generated ones. By re-adding PKG_FIXUP it is
ensured that the correct version of the host tools are used.

Signed-off-by: Etan Kissling <etan_kissling@apple.com>

bind: bump to 9.17.10

Add build dependency on libnghttp2 for DNS-over-HTTPS support

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Merge pull request #14709 from stangri/master-https-dns-proxy

https-dns-proxy: support for force DNS/DNS hijacking

Merge pull request #14779 from dibdot/banip

banip: update to 0.7.2

Merge pull request #14775 from ye-holmes/libs/zmq-openpgm-depend

zmq: add optional dependency on openpgm

Merge pull request #14767 from jefferyto/python-config-macos

python3: Fix target python-config when building on macOS

banip: update to 0.7.2

* add scanning for suspicious nginx events
* add a log counter to track the number of the failed requests
  or login repetitions of the same ip in the log before banning,
  defaults are: ssh (3), luci (3), nginx (5)
* optimize the background service handling
* add 'greensnow' as a new source
* update readme and LuCI frontend regarding the new log count options

Signed-off-by: Dirk Brenken <dev@brenken.org>

owipcalc: change maintainer

As suggested by others, I would like to take care of this tool. I am
developing certain tools that rely on the library and also owipcalc.

Signed-off-by: Nick Hainke <vincent@systemli.org>

zmq: add optional dependency on openpgm

And add a patch for CMakeList.txt to configure
correctly with openpgm enabled.

Signed-off-by: Ye Holmes <yeholmes@outlook.com>

Merge pull request #14776 from br101/pingchcheck-PKG_SOURCE

pingcheck: Remove unnecessary PKG_SOURCE and _SUBDIR

pingcheck: Remove unnecessary PKG_SOURCE and _SUBDIR

Adressing issue #14773

Signed-off-by: Bruno Randolf <br1@einfach.org>

adguardhome: bump to 0.105.1

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.0
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.1
* Add node-yarn/host dependency as it is needed since [1].
* Adjust LDFLAGS to the new ones introduced in [2].
* Invoke targets from make instead of manually running npm and yarn.
* Replace GO_PKG_EXCLUDES with GO_PKG_BUILD_PKG as our intention is to
  build only one specific package (a cosmetic change).

[1]: https://github.com/AdguardTeam/AdGuardHome/commit/5e20ac7ed5de861ea5c945d1775f75312d62b69f#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52R140
[2]: https://github.com/AdguardTeam/AdGuardHome/commit/0d67aa251d18f8ab47cfd90072e9d0387dff4224#diff-82ef468ec5547f1ed424776755a7f87dfec4eba9838d2c2ac02c9881bb67d737R60

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>

Merge pull request #14770 from nxhack/node_host_yarn

node-yarn: add new package - for building adguardhome

Merge pull request #14769 from nxhack/node_host_icu

node: make hostpkg icu-enabled

Merge pull request #14729 from ye-holmes/libs/openpgm

openpgm: Add Pragmatic General Multicast library