Bump to release 4.8 to make it easier to backport PCRE2 support patch.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 97a7165e7238f0966d6404faf775df8cf5f99a77)

Backport up-stream patch:
https://github.com/rhboot/efivar/commit/ca48d3964d26f5e3b38d73655f19b1836b16bd2d



Signed-off-by: Anton Antonov <Anton.Antonov@arm.com>

(cherry picked from commit c618100c8282867d8dc10a98472060c6b432dbc2)

* https://github.com/ngtcp2/ngtcp2/compare/v1.0.0...v1.0.1



Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 9d194e834852143124df7aed12297e0f754e9ece)

* add new package to allow building of curl with HTTP/3 support
* switch to using cmake

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit f6e57976402f51bd7b7bbe9dacad7153543b3002)

* add new package to allow building of curl with HTTP/3 support
* switch to using cmake

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit b1d4241cdf27dbf2ea4f2c78de6bbb3b7e876652)

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

bump soname

refreh

(cherry picked from commit 5b9239a95b8cbbeec61e8508538d4aa0da5f469f)

The only package using this library, dnsdist, does not require it
so let's save space and PSS memory.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
(cherry picked from commit 23a9cd519ca6f5a0e0a23518d4cb1470720f3438)

update to v1.57.0
CVE-2023-44487 : HTTP/2 Rapid Reset

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit afecaa71c22503affa53246d029b4e0eb4677d2b)

v1.13.0

This release includes more Neon and AVX2 optimizations, adds a new codec
control to set per frame QP, upgrades GoogleTest to v1.12.1, and includes
numerous bug fixes.

v1.13.1

This release contains two security related fixes. One each for VP8 and VP9.

- https://crbug.com/1486441

 (CVE-2023-5217)
- Fix bug with smaller width bigger size (CVE-2023-44488)

Fixes #22318

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
(cherry picked from commit 36566a99af9074334eee3293a6d5a0aa7f4e8246)

From https://github.com/webmproject/libwebp/releases/tag/v1.3.2



- 9/13/2023: version 1.3.2
  This is a binary compatible release.
  * security fix for lossless decoder (chromium: #1479274, CVE-2023-4863)

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 90c6cb239002b1581b249ed19c3d7475fa78e5f1)

The asynchronous API of libmariadb uses cooperative multi threading
by using the system calls
  * makecontext
  * swapcontext
  * getcontext
  * setcontext
of the ucontext.h C-API.

Thus additionally link libmariadb to libucontext which is a library
providing these system calls on platforms not supporting them out of
the box - like musl based platforms.

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 6748f95168660792a2162d8d35ce1ecf85f2d865)

It seems like the libpcre dependency was added by mistake.
While checking in the source code of czmq (Makefile.am, CMakeLists.txt),
I see there are several dependencies, but there isn't PCRE.

Fixes: 936a48ad ("czmq: add new package")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e3ab95185cb67e6d5753b2d7380bac74c4ef4acd)

I've changed my username to neocturne.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
(cherry picked from commit 1df594bc01b0c7be34cd6eb477ebd1621959d15d)

Description (from libucontext github page):
libucontext (https://https://github.com/kaniini/libucontext

) is a
library which provides the ucontext.h C API. Unlike other
implementations, it faithfully follows the kernel process ABI when
doing context swaps. libucontext is used on almost all musl
distributions to provide the legacy ucontext.h API.

This package is meant as a development package. There is no need
to install a package on the router if an application or library
is linked against the static libraries. Though, shared libraries
are provided also.

It is used to link libraries/applications against it which need the
system calls

* makecontext
* swapcontext
* getcontext
* setcontext

E.g. the asynchronous API of libmariadb (c-connector) uses this
system calls. Because libmusl didn't provide that system calls this
synchronous API is currently (without libucontexe) not working - it
segfaults.

Co-developed-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 635a702255e77b211c77e4a5bcd513abe6041721)

pcre is obsolete and upstream has not yet migrated to pcre2.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 106304c988fddf0b66220a7ca04bbf2902719616)

This also hides the module packages in menuconfig unless the libslang2
package is selected.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 03ef02f0f45b2999625de08d0f1a274418076bd6)

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5c11c3717abdbcdab8bf56f33308e68492df0410)

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit b5463d16f1b962c36784ff92252db49b5b3791b9)

Signed-off-by: Luca Barbato <lu_zero@gentoo.org>
(cherry picked from commit 06e9fdfe00727d31a01e97c9946d4148687b8edb)

Fixes #21583

zstdlib and lzlib support is currently not neccessary for OpenWRT.
Thus, Explicitly disable zstdlib and lzlib as they would be enabled
automatically in case they are already installed.

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 3ee4f030b525d8d7c56605735df1c44d1362f026)

Executables depending on binary package libmagic segfault in case
package file is not installed. Libmagic needs file
/usr/share/misc/magic to not segfault. Thus, install
/usr/share/misc/magic along with libmagic and not with file.

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 5362b272cbe6124519616052bf61a6faee60cd2b)

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit dae4f184f77aed1aae44edea7b10a5676f014693)

Compile tested: OpenWRT-23.05-rc2, arm_cortex-a7_neon-vfpv4, mips_24kc
Run tested: arm_cortex-a7_neon-vfpv4 (Linksys MR8300), mips_24kc (tplink_archer-a7), OpenWrt 23.05-rc2)

* Update package nlohmannjson to version 3.11.2.
* Version 3.11.2 is source compatible with 3.10.2 so no package should fail to compile
* From version 3.11.2 on forward template declarations are collected in the file
  json_fwd.hpp. The json.hpp still contains all template definitions.
  Because in most compilation units of a software package only the file json_fwd.hpp
  needs to be included, the compilation process is accelerated a lot.

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 8bd6e23fad2aaeb7158a054b1c8426b3508ad8f8)

Update to version 9.97.1 of easyloggingpp

Changelog from upstream
* Ensuring the build on ARM64 works
* Update gtest and cmake now requires C++14 because of that

Compile tested: arm_cortex-a7_neon-vfpv4, mips_24kc, aarch64_cortex-a53

Run tested: Linksys MR8300 (arm_cortex-a7_neon-vfpv4)
            GL.iNet GL-A1800 (arm_cortex-a7_neon-vfpv4)
            TP-Link_Archer A7 (mips_24kc),
            GL.iNet GL-MT3000 (aarch64_cortex-a53)

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit d8df885ac6427e3c14fde62bbcaf31a6fb91128f)

Maintainer: me@vchrist.at
Compile tested: OpenWRT-23.05-rc2, arm_cortex-a7_neon-vfpv4, mips_24kc
Run tested: arm_cortex-a7_neon-vfpv4 (Linksys MR8300), mips_24kc (tplink_archer-a7), OpenWrt 23.05-rc2

Description:
Easylogging++ is single header efficient logging library for C++ applications. It is extremely powerful,
highly extendable and configurable to user's requirements.

Signed-off-by: Volker Christian <me@vchrist.at>
(cherry picked from commit 2611e7c798c2cc27f0cd1ffee410787e1b77eb7d)

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 195053fba4fe8a910fb19317fb0af7fb6620fa0f)

This is a security and bugfix release.

Security
o CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
o CVE-2023-31147. Moderate. Insufficient randomness in generation of DNS
query IDs
o CVE-2023-31130. Moderate. Buffer Underwrite in ares_inet_net_pton()
o CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE during cross
compilation

Fixing libcares.pc
 The pkg-config file libcares.pc in version 1.19.1 has been changed to be unsuitable for OpenWrt
 and causes build errors with Openwrt packages that use libcares.
 For this reason, libcares.pc was replaced.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 4c4d3b900197785292ef92055effcccd7f3b805b)

Tests are breaking compilation for mipsel targets because of the removal
of the sysmips call.  Let's just not build them.

While at it, remove patches from 1.1 version and move the current ones
to the default 'patches' directory.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 085dc8d965a4baa06e60845e98fa7e23869ad213)

1.45.0
* linux: introduce io_uring support
* src: add new metrics APIs
* unix,win: give thread pool threads an 8 MB stack
* win,unix: change execution order of timers

1.44.2
* loop: better align order-of-events behavior between platforms
* zos: fix fs event not fired if the watched file is moved/removed/recreated
* win: Fix pipe resource leak if closed during connect (and other bugs)
* zos: don't error when killing a zombie process
* macos: avoid posix_spawnp() cwd bug
* kqueue: skip EVFILT_PROC events when invalidating events for an fd.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit cf7e9a77c991d5d394a0f434783a37bda85bff03)

ICU 73.2 updates to CLDR 43.1 locale data. These are maintenance releases for ICU 73 and CLDR 43, with limited sets of bug fixes and no API or structural changes.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit a5e21caa8215d69140ad4bd46b35e49c1898d9e9)

Addresses buildbot errors

> CMake Error at CMakeLists.txt:193 (message):
>  Only x86, arm, mips, PERIPHERALMAN and mock platforms currently supported

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 8b777d2ec6c6c1f51c5bf84bef9cffa62fb4f965)

update library + add new package containing efi programs
provided by gnu-efi library.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 232b73ed9a03b962e3b089c950dc6c4d02836c63)

A compiler bug (suspiciously) blocks gnulib compilation for
mipsel_24kc_24kf. While we had this patch to disable gnulib, it was
accidentally removed by 5d27631d. Add it
back to fix the long broken build for mipsel_24kc_24kf.

Fixes: #19511
Signed-off-by: Jitao Lu <dianlujitao@gmail.com>

Imported patches included in debian and other package.

* 200-Fix-NULL-pointer-crashes-from-175.patch
  CVE-2021-3502
   A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.

* 201-Avoid-infinite-loop-in-avahi-daemon-by-handling-HUP-event.patch
  CVE-2021-3468
   A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.

* 202-avahi_dns_packet_consume_uint32-fix-potential-undefined-b.patch
   avahi_dns_packet_consume_uint32 left shifts uint8_t values by 8, 16 and 24 bits to combine them into a 32-bit value. This produces an undefined behavior warning with gcc -fsanitize when fed input values of 128 or 255 however in testing no actual unexpected behavior occurs in practice and the 32-bit uint32_t is always correctly produced as the final value is immediately stored into a uint32_t and the compiler appears to handle this "correctly".
Cast the intermediate values to uint32_t to prevent this warning and ensure the intended result is explicit.

* 203-Do-not-disable-timeout-cleanup-on-watch-cleanup.patch
   This was causing timeouts to never be removed from the linked list that tracks them, resulting in both memory and CPU usage to grow larger over time.

* 204-Emit-error-if-requested-service-is-not-found.patch
   It currently just crashes instead of replying with error. Check return
value and emit error instead of passing NULL pointer to reply.

* 205-conf-file-line-lengths.patch
   Allow avahi-daemon.conf file to have lines longer than 256 characters (new limit 1024).

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 779af4d40ccdc0f2a798ee6b6849abb37d202f1b)

It's required by next xfsprogs update.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit abfe6272cd7dbb04f3cdc884eaf9febe3a96fe16)

From the documentation:

GNU MPC is a portable library written in C for arbitrary precision
arithmetic on complex numbers providing correct rounding. It implements
a multiprecision equivalent of the C99 standard. It builds upon the GNU
MP and the GNU MPFR libraries.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4d64d5f80a0bbffded0d4d99d7578d61349e424c)

From the documentation:

MPFR is a portable library written in C for arbitrary precision
arithmetic on floating-point numbers. It is based on the GNU MP library.
It aims to provide a class of floating-point numbers with precise
semantics.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 925bd169451f3223ca3800cde4af390759919e3b)

This package lacks proper maintenance in both upstream and here.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 72c8977b3b4b3b8c905bd53db7557cf6bc8963db)

Signed-off-by: W. Michael Petullo <mike@flyn.org>

gcc 13 compatibility patch is from alpine linux.
https://git.alpinelinux.org/aports/tree/main/zeromq/gcc13.patch



fixes #20972

I also renamed one of patches, so patch filenames are more unified.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>