kplex: add support for Sierra Wireless Gobi GPS

Sierra Wireless modems need the string '$GPS_START' to be sent to the
GPS tty device as only then the modem firmware starts emitting
NMEA-0183 sentences.
Add an option 'sierragpsstart' to kplex' serial driver to support that
quirk as kplex can be very useful to spread GPS data over the network
while also supplying 'ugps' using a PTY, allowing for correct system
time to be set automatically on boot up from GPS.

This patch is also PR'ed at the upstream project:
https://github.com/stripydog/kplex/pull/54

Signed-off-by: Daniel Golle <redacted>

bind: bump to 9.17.13

Signed-off-by: Noah Meyerhans <redacted>

curl: update to version 7.77.0 (security fix)

Fixes:
CVE-2021-22897
CVE-2021-22898
CVE-2021-22901

Signed-off-by: Jan Pavlinec <redacted>

adguardhome: bump to 0.106.3

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.3

Signed-off-by: Dobroslaw Kijowski <redacted>

gpsd: Add a new package gpsd-utils to add gpsdctl

gpsd-utils include management tools for GPS daemon - and this commmit
particularly introduces gpsdctl to add/remove device from the GPS
daemon's device list over control socket.

Signed-off-by: ekathva advaita <redacted>

Merge pull request #15687 from blocktrron/xr-usb-serial-fix

xr_usb_serial_common: fix kernel 5.10 builds

xr_usb_serial_common: fix kernel 5.10 builds

Building the xr_usb_serial module fails for Kenel 5.10 with CONFIG_PM
enabled:

xr_usb_serial_common.c:1574:15: error: 'ASYNCB_INITIALIZED' undeclared
(first use in this function); did you mean 'RCU_INITIALIZER'?

Use tty_port_initialized in order to determine the status of the TTY
port. This is compatible with Kernel 5.10 and at least Kernel 5.4.

Signed-off-by: David Bauer <redacted>

Merge pull request #15625 from ja-pa/python-cryptodomex-update

python-cryptodomex: update to version 3.10.1

Merge pull request #15690 from ja-pa/gitlab-runner-13.12.0

gitlab-runner: update to version 13.12.0

gitlab-runner: update to version 13.12.0

Signed-off-by: Jan Pavlinec <redacted>

yq: Update to 4.9.3

Signed-off-by: Tianling Shen <redacted>

netifyd: update to 3.07

Signed-off-by: Darryl Sokoloski <redacted>

podman: change permissions on /etc/containers

Running podman as users other than root seems to require that those
users can read the configuration files in /etc/containers. This change
sets the permissions of /etc/containers and its contents to match those
used on Fedora.

Signed-off-by: W. Michael Petullo <redacted>

libassuan: remove gpgrt-config workaround

After the recent libgpg-error update, the workaround for gpgrt-config
is no more necessary.

Reverts 63481e619 ("libassuan: fix linking of host's libgpg-error").

Signed-off-by: Alexander Egorenkov <redacted>

Merge pull request #15678 from mhei/libxml-update

libxml2: update to 2.9.12

miniupnpd: bump to 2.2.2

Signed-off-by: Stijn Tintel <redacted>

miniupnpd: add missing dependencies

Fixes the build problem below.

Package miniupnpd is missing dependencies for the following libraries:
libmnl.so.0
libnetfilter_conntrack.so.3

Signed-off-by: Stijn Tintel <redacted>

miniupnpd: reformat dependencies

Use multiple lines and order alphabetically for improved readability.

Signed-off-by: Stijn Tintel <redacted>

libreswan: update to 4.4

Signed-off-by: Lucian Cristian <redacted>

nss: update to 3.65

Signed-off-by: Lucian Cristian <redacted>

nspr: update to 4.30

Signed-off-by: Lucian Cristian <redacted>

Merge pull request #15664 from looi/fix_ddns_dash

ddns-scripts: Fix for domains with dash

ddns-scripts: Fix for domains with dash

Signed-off-by: Wenli Looi <redacted>

tor: update to version 0.4.5.8

Signed-off-by: Jan Pavlinec <redacted>

crun: bumb to version 0.19.1

Signed-off-by: Oskari Rauta <redacted>

Merge pull request #15657 from looi/fix_ddns_wildcard

ddns-scripts: Fix for wildcard subdomain

ddns-scripts: Fix for wildcard subdomain

Signed-off-by: Wenli Looi <redacted>

libxml2: update to 2.9.12

Signed-off-by: Michael Heimpold <redacted>

vnstat2: update to version 2.7

Signed-off-by: Jan Hoffmann <redacted>

sudo: bump to version 1.9.7

Refresh  patch 010-cross-compile-fixes.patch
Re-apply patch 020-no-owner-change.patch

Also we need to explicitly disable OpenSSL support.
We may enable it later if needed/requested.

Signed-off-by: Alexandru Ardelean <redacted>

podman: bumb version to 3.1.2

Signed-off-by: Oskari Rauta <redacted>

yq: Update to 4.9.1

Signed-off-by: Tianling Shen <redacted>

django: bump to version 3.2.3

Signed-off-by: Alexandru Ardelean <redacted>

et_xmlfile: bump to version 1.1.0

Updating Eneas' email as requested on Github:
  https://github.com/openwrt/packages/pull/15622

Signed-off-by: Alexandru Ardelean <redacted>

python-six: bump to version 1.16.0

Signed-off-by: Alexandru Ardelean <redacted>

haproxy: Update HAProxy to v2.4.0

- New upstream major release with tons of new features and LTS (see: https://www.haproxy.com/blog/announcing-haproxy-2-4/)
- Update haproxy download URL and hash
- Activate promtheus exporter support the new way (using USE_PROMEX=1)
- Cleaned up haproxy-specific CFLAGS
- Changed the halog build to make use of the new Makefile target (admin/halog/halog)

Signed-off-by: Christian Lachner <redacted>

Merge pull request #15630 from nxhack/node_14170

node: bump to v14.17.0

Merge pull request #15601 from pprindeville/strongswan-make-swanctl-default

strongswan: make default bundle use swanctl

rsync: Add rrsync script

Rrsync is a perl script that is supplied as an extra with the rsync program.
It must be used in conjunction with openssh-server or openssh-server-pam
as it requires ~/.ssh/authorized_keys which is not supported by dropbear.

Rrsync allows selective access to subdirectories in either read-only, write-only or read-write,
depending on settings in authorized_keys. This allows for safe, restrictive access.
It's particularly useful for automated backup purposes.

An example usage would be this entry:

command="/usr/bin/rrsync -ro /home" <public key here>

This would allow a system connecting with this public key to be able to rsync FROM the
/home directory tree only. It could not write to this directory, nor read from any other directory.

Signed-off-by: Matt Reeve <redacted>

libpqxx: update to version 7.5.2

Signed-off-by: Igor Bezzubchenko <redacted>

python-cryptodomex: update to version 3.10.1

Signed-off-by: Jan Pavlinec <redacted>

atlas-sw-probe: fix missing link on sysupgrade

Recreate symbolic link if it's missing after a sysupgrade with a private and public key present in /etc/atlas/

Signed-off-by: Ansuel Smith <redacted>

chrony: update to 4.1

Signed-off-by: Miroslav Lichvar <redacted>

Merge pull request #15618 from Payne-X6/master

knot: update to version 3.0.6

Merge pull request #15615 from flyn-org/libgpg-error

libgpg-error: patch to fix cross-compile

Fixes #15621

knot: update to version 3.0.6

Signed-off-by: Jan Hak <redacted>

docker-compose: Update to version 1.29.2

Miscellaneous:

- Remove prompt to use docker compose in the up command

- Bump py to 1.10.0 in requirements-indirect.txt

Signed-off-by: Javier Marcet <redacted>

node: bump to v14.17.0

Notable Changes:
Diagnostics channel (experimental module)
UUID support in the crypto module
Experimental support for AbortController and AbortSignal

Signed-off-by: Hirokazu MORIKAWA <redacted>

libgpg-error: patch to fix cross-compile

Paul Blazejowski discovered that the recent update to this package broke
cross-compiling for some OpenWrt platforms. This backports commit 33593864
(March 26, 2021) from the upstream libgpg-error project to fix this
problem.

Signed-off-by: W. Michael Petullo <redacted>

Merge pull request #15593 from flyn-org/snort3

Update snort3 and libdaq3 packages

Merge pull request #15590 from flyn-org/gstreamer

Gstreamer: update to 1.18.4

snort3: update to 3.1.4.0

Signed-off-by: W. Michael Petullo <redacted>

Merge pull request #15608 from dobo90/adguardhome_v0.106.2

adguardhome: bump to 0.106.2

Merge pull request #15603 from ja-pa/knot-resolver-5.3.2

knot-resolver: update to version 5.3.2

Merge pull request #15605 from 1715173329/yq

yq: Update to 4.8.0

Merge pull request #15586 from commodo/python3-update

python3: bump version to 3.9.5

Merge pull request #15591 from flyn-org/grilo-plugins

grilo-plugins: update to 0.3.13

libassuan: fix linking of host's libgpg-error

gpgrt-config is trying to use the host's /usr/lib path when looking for
libgpg-error. Therefore, disable it and gpg-error-config will be used
as a fallback.

Signed-off-by: Alexander Egorenkov <redacted>

adguardhome: bump to 0.106.2

* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.2

Signed-off-by: Dobroslaw Kijowski <redacted>

gst1-libav: update to 1.18.4

Signed-off-by: W. Michael Petullo <redacted>

gst1-plugins-ugly: update to 1.18.4

Signed-off-by: W. Michael Petullo <redacted>

gst1-plugins-bad: update to 1.18.4

Signed-off-by: W. Michael Petullo <redacted>

gst1-plugins-good: update to 1.18.4

Signed-off-by: W. Michael Petullo <redacted>

gst1-plugins-base: update to 1.18.4

Signed-off-by: W. Michael Petullo <redacted>

gstreamer1: update to 1.18.4

Signed-off-by: W. Michael Petullo <redacted>

yq: Update to 4.8.0

Signed-off-by: Tianling Shen <redacted>

Merge pull request #15602 from ja-pa/redis-6.2.3

redis: update to version 6.2.3

Merge pull request #15604 from ja-pa/lmdb-0.9.29

lmbd: update to version 0.9.29

lmbd: update to version 0.9.29

Signed-off-by: Jan Pavlinec <redacted>

redis: update to version 6.2.3

Fixes CVE-2021-29477

Signed-off-by: Jan Pavlinec <redacted>

python3: bump version to 3.9.5

Refreshed Python patches.
Updated pip & setuptools version.

For pip, patch '001-pep517-pyc-fix.patch' was reworked.

Also, the current version of the bundled pip (21.1.1) no longer supports
Python2, so the 'py2.py3' suffix gets replaced with just py3.

For setuptools, there is no longer a script/module:
  https://github.com/pypa/setuptools/pull/2544

Signed-off-by: Alexandru Ardelean <redacted>

knot-resolver: update to version 5.3.2

Signed-off-by: Jan Pavlinec <redacted>

Merge pull request #15599 from mhei/php8-update

php8: update to 8.0.6

Merge pull request #15600 from mhei/php7-update

php7: update to 7.4.19

strongswan: make default bundle use swanctl

Signed-off-by: Philip Prindeville <redacted>

grilo-plugins: update to 0.3.13

Signed-off-by: W. Michael Petullo <redacted>

libdaq3: update to 3.0.3

Signed-off-by: W. Michael Petullo <redacted>

syslog-ng: update to 3.32.1

Signed-off-by: W. Michael Petullo <redacted>

Merge pull request #15594 from flyn-org/snort

snort: update 2.9.17.1

Merge pull request #15589 from flyn-org/krb5

krb5: update to 1.19.1

Merge pull request #15595 from flyn-org/libgcrypt

Update libgpg-error and libgcrypt

Merge pull request #15596 from flyn-org/openldap

openldap: update to 2.4.58

Merge pull request #15597 from flyn-org/scapy

scapy: update to 2.4.5

Merge pull request #15588 from flyn-org/nfdump

nfdump: update to 1.6.23

Merge pull request #15585 from ja-pa/tailscale-1.8.1

tailscale: update to version 1.8.1

php7: update to 7.4.19

Signed-off-by: Michael Heimpold <redacted>

Merge pull request #15587 from flyn-org/libgee

libgee: update to 0.20.4

php8: update to 8.0.6

Signed-off-by: Michael Heimpold <redacted>

libgcrypt: update to 1.9.3

Signed-off-by: W. Michael Petullo <redacted>

libgpg-error: update to 1.42

Signed-off-by: W. Michael Petullo <redacted>

scapy: update to 2.4.5

Signed-off-by: W. Michael Petullo <redacted>

openldap: update to 2.4.58

Signed-off-by: W. Michael Petullo <redacted>

snort: update 2.9.17.1

Signed-off-by: W. Michael Petullo <redacted>

krb5: update to 1.19.1

Signed-off-by: W. Michael Petullo <redacted>

nfdump: update to 1.6.23

Signed-off-by: W. Michael Petullo <redacted>

libgee: update to 0.20.4

Signed-off-by: W. Michael Petullo <redacted>

tailscale: update to version 1.8.1

Add readme with simple tailscale howto.

Signed-off-by: Jan Pavlinec <redacted>

lvm2: update to version 2.03.12

Two notable changes are devices file and metadata based autoactivation.

Signed-off-by: Daniel Golle <redacted>

exim: update to version 4.94.2

Several exploitable vulnerabilities in Exim were reported to us and are
fixed.
Local vulnerabilities
- CVE-2020-28007: Link attack in Exim's log directory
- CVE-2020-28008: Assorted attacks in Exim's spool directory
- CVE-2020-28014: Arbitrary PID file creation
- CVE-2020-28011: Heap buffer overflow in queue_run()
- CVE-2020-28010: Heap out-of-bounds write in main()
- CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
- CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
- CVE-2020-28015: New-line injection into spool header file (local)
- CVE-2020-28012: Missing close-on-exec flag for privileged pipe
- CVE-2020-28009: Integer overflow in get_stdinput()
Remote vulnerabilities
- CVE-2020-28017: Integer overflow in receive_add_recipient()
- CVE-2020-28020: Integer overflow in receive_msg()
- CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
- CVE-2020-28021: New-line injection into spool header file (remote)
- CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
- CVE-2020-28026: Line truncation and injection in spool_read_header()
- CVE-2020-28019: Failure to reset function pointer after BDAT error
- CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
- CVE-2020-28018: Use-after-free in tls-openssl.c
- CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()

The update to 4.94.2 also integrates a fix for a printf format issue
previously addressed by a local patch which is removed.

Signed-off-by: Daniel Golle <redacted>

auc: support queue_position status from server

Display position in queue while waiting for build.

Signed-off-by: Daniel Golle <redacted>