hev-socks5-server: update to 2.6.9

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 30db86cc9c0e5e0a9ec7b651f22515bf2c5e765d)

uspot: update to Git HEAD (2025-01-20)

57b737a49497 uspot/uspotfilter: s/discon_since/lost_since/
1c2f58000519 uspot/uspotfilter: use native MAC case
70934203a0b7 captive: cleanup
7566c2716eb9 uspot: correctly handle "debug=0"
f5cc70459233 portal: remove unused bits
54cdcf463c36 uspot: remove unused ssid parameter
f13440bd80ff Update issue templates
644fd6f52a8e uspotfilter: apply disconnect delay to active clients only

(cherry picked from commit 2466aaccc1b358c6fbcc17aeb6628d974870911b)
Signed-off-by: Thibaut VARÈNE <[email protected]>

node: January 21, 2025 Security Releases

Notable Changes

    CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
    CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

    CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

net/acme-common: Bump package release

Commit 66894032d482 ("acme: standardize key_type") failed to bump the
package release, so the update won't be automatically installed. Bump
PKG_RELEASE to make sure users get the updated version.

Opt for adding a PKG_RELEASE instead of bumping the version to avoid
having different packages (from different branches) with the same
PKG_VERSION.

Signed-off-by: Toke Høiland-Jørgensen <[email protected]>

nextdns: Update to version 1.44.4

Signed-off-by: Olivier Poitrey <[email protected]>

sing-box: Update to 1.10.7

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 996c1819e3c68e27783bc7ac081cfcd3dc75ea3b)

adblock: update 4.2.3-3

Summary of three PRs regarding new adblock sources with minor changes/additions:

- add new source reg_lithuania, PR provided by @Myginas
- add new source certpl, PR provided by @jkostorz
- add new source oisd_nsfw_small, PR provided by @Turjoy9

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit cd89956c13bf7def493effaf8de1b568a379ebf9)

bind: bump to 9.18.32

Signed-off-by: Noah Meyerhans <[email protected]>

natmap: update to 20250101

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 806b524a287a03391a79a08d62a5e07c4d12350b)

adblock-fast: Makefile bugfixes and hijack rework

* remove indentation in postinst/prerm/postrm scripts to fix issues with APK
* rework hijack logic to redirect port 53 to the port of active/selected dnsmasq instances

Signed-off-by: Stan Grishin <[email protected]>

nextdns: Update to version 1.44.3

Signed-off-by: Olivier Poitrey <[email protected]>

delve: update to 1.24.0

Signed-off-by: Aleksey Kolosov <[email protected]>
(cherry picked from commit db853b5d58765d2bfa26439340b1d4a4e1fa5698)

xray-core: Update to 24.12.18

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit bd0fb6d3edbe183132efa9349f9ec5b5ad78b16b)

xray-core: Update to 24.11.30

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 9e7026dedb8905cd37f89f293b594d62094e43ac)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 0c97b1a427a98a21fa7d2305c9341f0f2af19239)

nano: Update to 8.3

Update nano editor to version 8.3.

Signed-off-by: Hannu Nyman <[email protected]>
(cherry picked from commit b6176b6687cbddc380b8b3e6ccf2d50112a6d2db)

nextdns: Update to version 1.44.0

Signed-off-by: Olivier Poitrey <[email protected]>

lrzsz: fix random build failures by really disabling autofoo

Currently we're seeing random build failures, caused by autofoo being
called on very ancient bundled autofoo:

  cd . && aclocal
  aclocal.real: warning: autoconf input should be named 'configure.ac', not 'configure.in'
  acinclude.m4:2: warning: underquoted definition of AC_REPLACE_GNU_GETOPT
  acinclude.m4:2:   run info Automake 'Extending aclocal'
  acinclude.m4:2:   or see https://www.gnu.org/software/automake/manual/automake.html#Extending-aclocal
  configure.in:106: error: automatic de-ANSI-fication support has been removed

For some reason that `touch` based neutralization introduced in commit
6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE") doesn't
always work.

So lets fix it by removing the autofoo bits from the bundled Makefile.in
and while at it remove processing of man and testsuite subdirs to save
some computing cycles.

Fixes: #25543
Fixes: 6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE")
Signed-off-by: Petr Štetiar <[email protected]>
(cherry picked from commit 3e612586041d40ebfafadb65eaa6fc34b2061ee8)

travelmate: update to 2.1.3-3

* properly escape double quotes in travelmate option values
* minor procd tweaks

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 128875aa67c378dd065582220980df9cfd4576a7)

netatalk: Update to 4.0.7

Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (24.10-rc2, snapshot)
Run tested: ipq806x - C2600 (snapshot): install apk, start/stop sfpd service & review logs

Description:
Bump to version 4.0.7

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: Remove apfstats feature to solve dependency issues

afpstats requires several libraries that would increase significantly final install size.

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: Enable AppleTalk feature

Starting v4.0.0, netatalk brings back AppleTalk features lost in v3.
Updated description.

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: Clean up Makefile

Updated title.
Updated description.
Reordered to match most common layout

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: Update to 4.0.4

Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (23.05.3, snapshot)
Run tested: ipq806x - C2600: start server, connect from MacOS, read/write files to home share, create/update TimeMachine backups

Description:
No changes to package other than using latest available upstream code base. Starting Netatalk 4.x build uses meson instead of autotools.

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: Update to 3.2.5
Compile tested/run: ipq806x

No changes to package other than using latest available codebase.

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: update to 3.2.0.

Commit restores package after it was removed from OpenWrt 21.02.
Signed-off-by: Antonio Pastor <[email protected]>

yajl: backport CVE-2023-33460 fix

Removed old uclibc patches. Not relevant with modern musl or glibc.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit c9ff829fdb046a774c25cf3ce3382979b795edfd)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit d76d51a4b826588e09404515fbaf19f3f4442a62)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 5fb541f00f0ef9dd10793c40d0418809647105ba)

xray-core: Update to 24.11.21

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 3d05b2c1a9f3f631670e292f494c3525eba0c61a)

xray-core: Update to 24.11.11

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 41457908b83d32c4b1037ab99a82f59456fc0e22)

microsocks: backport upstream fixes

Fix segmentation fault with newer musl and improve throughput.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 77a7324de54e175029fa7ad051a3a17d1806e03e)

microsocks: update to 1.0.4

Signed-off-by: Ozan Göktan <[email protected]>
(cherry picked from commit 544e4a90619bc6bf39a6845d8e5b7b3c0b2e160a)

ksmbd-tools: update to version 3.5.3

- manually refresh patch 030-glib.patch

Major changes are:
    fix adduser / addshare prompting on musl libc
    fix use of veto files as global share parameter
    lookup primary group and don't recurse in ksmbd.conf @group handling
    fix a leak and an intermittent auth failure in Kerberos 5
    add global parameter kerberos support

detailed changelog here: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.5.3

Signed-off-by: Andrea Pesaresi <[email protected]>
(cherry picked from commit 5b058c9949b3e3adcbc35347aa1acc40c3442e2c)

ksmbd-tools: update to version 3.5.2

Major changes are:
 - Add durable handles parameter to ksmbd.conf.
 - Add payload_sz in ksmbd_share_config_response to validate ipc
   response.
 - Fix UAF and cleanups.

Signed-off-by: Andrea Pesaresi <[email protected]>
(cherry picked from commit 9cf0eae9bca7447354bcb96759f213ae407c9532)

libdeflate: update to 1.22

Release note:
https://github.com/ebiggers/libdeflate/blob/master/NEWS.md#version-122

Signed-off-by: Gábor Deé <[email protected]>

zerotier: update to 1.14.1

Signed-off-by: Moritz Warning <[email protected]>
(cherry picked from commit 660b10f0dc9ca81ec2f7b9f7d30ba1a745925d77)

zerotier: split configuration

Split configuration in global and per-network sections.
This change breaks existing configurations.

The following per-network settings are available:

* allow_managed
* allow_global
* allow_default
* allow_dns

See  https://docs.zerotier.com/config/#network-specific-configuration

Signed-off-by: Óscar García Amor <[email protected]>
Reviewed-by: Moritz Warning <[email protected]>
(cherry picked from commit 5af81638787a1dd1f057bc238bc243225110607f)

zerotier: update to 1.14.0

Includes refreshed patches.

Signed-off-by: Moritz Warning <[email protected]>
(cherry picked from commit cf6fef36b44de2c9d1b7910f6afd43e0c6ee946c)

adblock-fast: bugfix: dnsmasq instances confdir hack

* temporary hack until https://github.com/openwrt/openwrt/pull/16806 is merged

Signed-off-by: Stan Grishin <[email protected]>

iperf3: fix crashing with musl

Upstream backport.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit 9c9f4dd08875c77e145e834b939d0c40c043db60)

iperf3: explicitly disable SCTP

Since https://github.com/openwrt/openwrt/commit/3fa5ee0b28b736c5d06af34ed5c3e80f78235fe8
OpenWrt no longer disables SCTP support by default.
It caused the leak of libsctp dependency to iperf3.
Here we disable it explicitly to fix the build.

Signed-off-by: Aleksey Vasilenko <[email protected]>
(cherry picked from commit 6c1ce8ccc78f1b34ade513aa134962eb143826f9)

ruby: update to 3.2.6

Ruby 3.2.6 is a minor bug fix release.

Link: https://github.com/ruby/ruby/releases/tag/v3_2_6
Signed-off-by: Luiz Angelo Daros de Luca <[email protected]>

php8: update to 8.2.26

This fixes:
    - CVE-2024-8929
    - CVE-2024-8932
    - CVE-2024-11233
    - CVE-2024-11234
    - CVE-2024-11236

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.26

Signed-off-by: Michael Heimpold <[email protected]>

yggdrasil: bump to 0.5.10

Signed-off-by: George Iv <[email protected]>
(cherry picked from commit 4ee4b22e431ca3c27c1ab26dc0daba5ca6198443)

adblock: update 4.2.3-2

* correctly parse json objects with hyphens in the autodetection functions

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 823633c0e60ad9efb3afe9c4e63b34c93fa55f7c)

adblock: release 4.2.3-1

* optimized procd settings for better performance
* reworked autodetection functions (still broken in master due to apk migration)
* made the tld function optional, set 'adb_tld' accordingly (enabled by default)
* reworked count function
* various code improvements

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 8afc26fafbd913d829734ab22fc09abaf8874ae8)

banIP: update 1.0.1-2

* correctly parse json objects with hyphens in the autodetection function

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 3140259fc68952355b62a364a97527003adaf1fe)

banIP: release 1.0.1-1

* optimized procd settings for better performance
* made the log monitor working again (even on master with apk migration issues)
* reworked the fetch autodetection function (still broken in master due to apk migration)

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 8609a5bbe5b999045dcd9a10714d9e47e4359599)

banIP: update to 1.0.0-10

* minimal fix to support all download utilities in currently broken apk snapshots
  (see https://github.com/openwrt/openwrt/issues/16907 for details)

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 4f00d8f0ee66effd40ec7c56a5a9a7395a7a8d54)

django: bump to 4.2.16

Fixes a bunch of CVEs.
CVE-2024-45230
  https://nvd.nist.gov/vuln/detail/CVE-2024-45230

CVE-2024-45231
  https://nvd.nist.gov/vuln/detail/CVE-2024-45231

(And maybe a few more).

Signed-off-by: Alexandru Ardelean <[email protected]>

node: bump to v18.20.5

Notable Changes
  esm: mark import attributes and JSON module as stable (Nicolò Ribaudo)

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

openwisp-monitoring: align PKG_SOURCE_VERSION with PKG_VERSION

Previously, `PKG_SOURCE_VERSION` in the Makefile was incorrectly
set to `0.1.1` instead of tracking `PKG_VERSION`. This mismatch
caused compilation issues for the package.

This fix ensures `PKG_SOURCE_VERSION` dynamically aligns with
`PKG_VERSION` to prevent future discrepancies.

Signed-off-by: Gagan Deep <[email protected]>

CI: multi-arch-test-build: move to shared workflow

Move multi-arch-test-build to shared workflow.

Signed-off-by: Christian Marangi <[email protected]>
(cherry picked from commit 2a35a9cab226a43d5521b6356cb5e64a5b174df2)

openwisp-monitoring: allow not depending on rpcd-mod-iwinfo

Add option to exclude rpcd-mod-iwinfo from dependency.

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit ca503cc4054d9a13558c7b552886a6dba359a0eb)

openwisp-monitoring: fix Makefile for 0.2.0 update

Commit 5e69da4ccb760da66f00f91e6cb2248ddcdabe5d upgraded openwisp-monitoring
to version 0.2.0 but missed necessary Makefile adjustments, causing the
package to break in OpenWrt feeds.

This patch updates the Makefile to ensure proper functionality of
openwisp-monitoring with the 0.2.0 release.

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit 886b3fa36d0b82071b10d0169d6950b0aaa6f16c)

openwisp-config: fix Makefile for 1.1.0

Update configuration in Makefile to fix #25168.
Add "/etc/openwisp/" to conf files.

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit 67d4fa3b05e0a8ee0724bc245d6eec318351876a)

rust: update to 1.81.0

- Automatically refresh one patch
- Other patch is unchanged

Signed-off-by: Aleksey Vasilenko <[email protected]>
(cherry picked from commit 541060ee563a57ff5acbad4e55285ef86c5a9172)

zabbix: zabbix-agentd: depend on libevent2-pthreads

zabbix-agentd requires libevent2-pthreads to build
correctly, so add it to DEPENDS.

Signed-off-by: Yanase Yuki <[email protected]>
(cherry picked from commit e61c3ea01cba8e29f6fef232b049c224255501ad)

mwan3: close flock fd when starting mwan3.user scripts

Fixes deadlock with multiple init script calls

Signed-off-by: Florian Eckert <[email protected]>
(cherry picked from commit 619629ce85991fbb5aa8677ea076ab2de1043ba4)

adblock: update to 4.2.2-8

* get rid of remaining opkg calls and static adblock versioning
* fixed bind autodetection

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit e3217b54edd17a71edc3f8992ccb87b13222c84c)

travelmate: update to 2.1.3-2

* fixed gathering/printing of system information in travelmate status
* make use of a central command selector function

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 5af7612c515460ed5fa4903a580ccc8427e3163e)

adblock: update to 4.2.2-7

* fixed gathering/printing of system information in adblock status
* added missing hagezi category (samsung tracker)

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit bbaa72d739368ef2131d4d7aca8ab626be6658b3)

banIP: update to 1.0.0-9

* fixed gathering/printing of system information in banIP status
* removed broken iblocklist.com feeds
* updated readme

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit fb19c1469654f39b3904accfb398bb88b884562b)

i2pd: Update to 2.54.0

* Updating package to 2.54.0
* Changed Makefile to install binary to /usr/bin (as in upstream)
* Updated init.rc script with new path

Signed-off-by: R4SAS I2P <[email protected]>
(cherry picked from commit f28940ddedc6f9cd39b0825e56422c13b93e4c39)

pdns-recursor: update to 4.9.9

fixes CVE-2024-25590

Signed-off-by: Peter van Dijk <[email protected]>

openwisp-monitoring: update to 0.2.0

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit 4540a0abf8debf995bac9b76502909dc5f06647b)

openwisp-config: update to 1.1.0

Signed-off-by: Gagan Deep <[email protected]>
(cherry picked from commit af4a89482cff4fbdcb1281b6677c7a74e51c95ec)

sing-box: Update to 1.9.7

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 91639e2e5dd129e4805f1ff801c4a7eb411a6ee0)

xray-core: update to 24.9.30

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit caa09e5377050794be23af8e4bd079bbad137150)

banIP: update to 1.0.0-8

* supports comments (introduced with a #), for MAC addresses
  in the allow and block list, e.g. 26:5e:a0:6a:9c:da # Test
* added hagezi threat ip feed
* added an adguard logterm to the readme
* removed the broken talos feed

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 270e6f12644eb0ba3b1596cb73e267edf3980570)

adblock: update to 4.2.2-6

* fixed adblock status reporting
* optimized the mail template
* removed unanswered DNS requests from reporting
* various small fixes

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 1294b54471e4bd17d1b3de9fc777ffa0ae9e429d)

dockerd: Update to 27.3.1

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit ade186898684bfe40beb3e7f3fab59ae5fe7938a)

dockerd: fix typo in config for no_proxy

the "http_proxy" here should be "no_proxy"

Signed-off-by: Joe Zheng <[email protected]>
(cherry picked from commit dcea616c6134c0d1630174d2fff6a95ffcf60fe6)

dockerd: increase PKG_RELEASE for http proxy update

Fixes: e795bab25325 ("dockerd: add config options for http proxy")
Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 9ec663013beba8fe6800d8bfbd5b75c33e8f804a)

dockerd: add config options for http proxy

add config options to set http porxy for dockerd, refer to
https://docs.docker.com/engine/daemon/proxy/ for details

use the *_proxy environment variable as the default value, so in most
cases, dockerd can use the system proxy settings just like opkg.

Signed-off-by: Joe Zheng <[email protected]>
(cherry picked from commit e795bab253253e260b61e156d5e5c00e8189cb98)

runc: Update to 1.1.14

This is the fourteenth patch release in the 1.1.z release branch of
runc. It includes a fix for a low severity security issue
(CVE-2024-45310) as well as some minor build-related fixes (including Go
1.23 support).
Fix CVE-2024-45310, a low-severity attack that allowed
maliciously configured containers to create empty files and directories on
the host.
Add support for Go 1.23.
Revert "allow overriding VERSION value in Makefile" and add EXTRA_VERSION.
rootfs: consolidate mountpoint creation logic.

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit c1e6edfa862e065caa6f8b3e9fd50d38d7ed57f5)

containerd: Update to 1.7.22

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit f49b8252e62885960261ffa07a1e8058bb1eb6a4)

docker: Update to 27.3.1

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 605fb1af62be3cf251749d58483087fde8e5c849)

dockerd: Update to 27.1.2

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit a58474e8381d405357247b20e944f3a3318ea173)

docker: Update to 27.1.2

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit e0258ed7ea5be1200dad4826d5d6913db79c59e7)

php8: update to 8.2.24

This fixes:
    - CVE-2024-8925
    - CVE-2024-8926
    - CVE-2024-8927
    - CVE-2024-9026

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.24

Signed-off-by: Michael Heimpold <[email protected]>

ecdsautils: update to 0.4.2

1b53b726f3dc ecdsautils 0.4.2
554e2585efd9 sha256: fix misaligned buffer read in ecdsa_sha256_update()
8c17b073647f sha256: remove burnStack function

Signed-off-by: Matthias Schiffer <[email protected]>
(cherry picked from commit d57306298e55f372954856a7f49fd2294d6fae46)

hev-socks5-server: update to 2.6.8

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit c99669e0887f0fac94c804bb7fd348ed9339d9eb)

pbr: bugfix for dns & tor policies

Signed-off-by: Stan Grishin <[email protected]>

rclone: Update to 1.68.1

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 86179f138a4c2f078d5412253aebc0578b8ab1e0)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 5fc567d198ac0ba8e821f1eb4e4c3b89b38e9fba)

btop: Update to 1.4.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 7e9ef57819a4adb2b17ee253569052e91f539600)

sing-box: Update to 1.9.6

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 06eb251067537d576fee86f8471377239b5254fe)

sing-box: Update to 1.9.5

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 500a8ab995a020a336948f058e7755efafff80e7)

delve: update to 1.23.1

Signed-off-by: Aleksey Kolosov <[email protected]>

adblock-fast: bugfixes and shellcheck update

* BUGFIX: correctly identify available RAM
* BUGFIX: properly store remote list filesize in config
* shellcheck updates

Signed-off-by: Stan Grishin <[email protected]>
(cherry picked from commit 4bdaea90d63ed12af4b513d833de64bac5f0f2b8)

banIP: update to 1.0.0-7

* fixed auto allow-/blocklist-issue with IPv6 addresses in CIDR notation
* removed edrop feed from readme (had been removed from feeds for a while)

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit aeda25086e7797b403a4307d88716e66f3239504)

softflowd: add '-b' option to config

- add '-b' option to enable bidirectional flow probing

Signed-off-by: Rafal Macyszyn <[email protected]>
(cherry picked from commit 80b15f0b9e6135978a7d17543d4be5fd13481b1a)

softflowd: bump to 1.1.0

The tag is now prefixed with v; update PKG_SOURCE_URL and PKG_BUILD_DIR
to reflect this.
Drop upstreamed patches. Refresh leftover patch.

Signed-off-by: Stijn Tintel <[email protected]>
(cherry picked from commit 4bdf55d35248500efd41e5f7b61c428d3a22db85)

adblock: update to 4.2.2-5

* filter out unrelated multicast traffic from reporting

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 3474adc309cf77fd9e461e964965cbcfc3c51620)

adblock: update to 4.2.2-4

* fixed wrongly detected NX domains in adblock reporting
* remove existing pcap files when restarting/stopping adblock
   to prevent problems when changing tcpdump parameters

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 180ee1321934cfd27d1245426f8fed3053a1cc66)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit fecdb92b3ffa6c30a551bb4cbc79cc417f05be8e)

v2ray-core: Update to 5.18.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 7eef7e36e91b4e39a226a479a9702b22f3880b39)

v2ray-core: Update to 5.17.1

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit a2d87d2658161d0fd265986a0bc9922fe908f3dc)