We now own `openwrtorg` and `openwrt`, where the latter replaces the
former. Slowly migrate over.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit b164a3aa)

MIPS is completely unsupported.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 03515d00)

Backport upstream OpenSSL deprecated API patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit dd64cb71)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5074fbbf)

Changelog [1]:
Version 1.09
	* Explicitly set the controlling TTY

Version 1.08
	* Report when IP key has changed
	* Scrub the environment variable for -e

Version 1.07
	* Pass signals that should terminate to ssh
	* Fix race around signal handling
	* Report IPC errors to stderr
	* Report if can't open -f password file

[1] https://sourceforge.net/p/sshpass/code/76/tree/trunk/ChangeLog



Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 5799d0b1)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ad116f29)

Bump config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3d817e96)

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit d7e2b608)

Remove no MIPS depends as it supports MIPS now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 1329b9fe)

Fixes
CVE-2021-20231
CVE-2021-20232

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 323461a1)

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 5b2d35a8)

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 570ff69e)

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit cfe24305)

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit c9709a3c)

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 02d8bbcf)

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 54a9b58f)

* fix another IPv4/IPv6 related iptables chain creation problem
* fix counter during ipset creation
* fix regex for debug counters
* fix ipset housekeeping for local sources

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit fb4bfd25)

Signed-off-by: Stan Grishin <stangri@melmac.net>

* add a restrictive "jail mode only" variant, just point your
  jail directory to your primary dns directory
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit df9ee138)

[21.02] https-dns-proxy: support for additional Force DNS ports

[21.02] Cherry-picks from PRs dealing with $(FPIC) quoting

Commit 657574f4 disabled building the host nsinstall program when using
QUILT.  However, the host nsinstall is needed to compile the package,
breaking compilation with QUILT.

Move the native compile to Build/Configure, which will not be called for
prepare, refresh, or update targets, but will be called before
Build/Compile.

nss does not have a configure script, so Build/Configure/Default is not
being called.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit fbed6751)

FPIC may be defined with more than one flag.  In that case, it becomes
necessary to use it inside QUOTES in a shell context.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit c5f91a2a)

Fixes part of issue #14921.

When $(FPIC) gets added to TARGET_CFLAGS (for instance), we can
count on $(TARGET_CFLAGS) in turn being quoted when it gets
expanded.  But there are a few places where $(FPIC) gets
expanded directly into environment variables passed on the
command line, such as when setting lt_cv_* variables as in this
case.

It's wrong to assume that the expansion of $(FPIC) won't require
quoting (such as it containing spaces) if it has multiple compiler
flags.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 0d5c6769)

watchcat: update to support procd

Signed-off-by: Stan Grishin <stangri@melmac.net>

Signed-off-by: Erwan MAS <erwan@mas.nom.fr>

Signed-off-by: Erwan MAS <erwan@mas.nom.fr>

Signed-off-by: Erwan MAS <erwan@mas.nom.fr>

[openwrt-21.02] haproxy: Update HAProxy to v2.2.11

* fix iptables/chain creation in setups without IPv6 support

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 80466dd0)

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

Tmate is a fork of tmux. It provides an instant pairing solution.
For more details, see https://tmate.io

.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ccfe1bfa)

This is needed by tmate.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit cfc965b1)

Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
(cherry picked from commit 399279b3)

Fixes running on release branches.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 004abfec)

 * update to new server API
 * include version_code in request
 * include versions of selected packages in request
 * add SHA256 verification via busybox sha256sum
 * sort attributes in policies alphabetically
 * move all API-specific string constants to precompiler macros
 * set correct MIME type for JSON post request (application/json)
 * output string error message if something goes wrong
 * auto-generate version string

(cherry squashed from commit 85ba8059,
commit 985b0f8f and
commit fb26b424)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Fixes CVE-2021-28089 and CVE-2021-28090

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

If the interface goes into failure state (is disconnecting)
then with this change one hotplug.d event is generated.

The same is true for the recovery state (is connecting), when the interface
comes back from a failure state.

In both cases, a hotplug.d event for the iface is triggered. Once
with the $ACTION=disconnecting and once for the $ACTION=connecting.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 5348732b)

* refine the new dns resolving process
* add a caching mechanism for the resolved IPs, the detached name
  lookup takes place only during 'restart' or 'reload' action, 'start'
  and 'refresh' actions are using an auto-generated backup instead.
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 909a87c2)