sudo: bump to version 1.9.17p1

Fixes: CVE-2025-32462
Fixes: CVE-2025-32463
Signed-off-by: Jan Kardell <[email protected]>
(cherry picked from commit b153b6a034414532535c9dc0e4f4ede27861dc89)
[rebase upon 23.05 branch]
Signed-off-by: Tianling Shen <[email protected]>

sudo: bump to version 1.9.16p2

Signed-off-by: Alexandru Ardelean <[email protected]>
(cherry picked from commit 190b99b1bcfe8578a1c1fdde491bf6ab54b1f76b)
[rebase upon 23.05 branch]
Signed-off-by: Tianling Shen <[email protected]>

sudo: bump to verison 1.9.15p5

Signed-off-by: Alexandru Ardelean <[email protected]>
(cherry picked from commit f2a6449b6f4be22e7ba0fe1dcae7a76fc969d31d)

sudo: bump to verison 1.9.15p4

Signed-off-by: Alexandru Ardelean <[email protected]>
(cherry picked from commit 62f4f97bdbe2ba660d3a31ad8f24cbc374910f9c)

python-uci: update to version 0.10.3 + two patches

Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.0
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.1
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.2
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.3

Upstream (pyuci developers) removed setup.py,
I bring it back to be able to compile it despite
that we do support building packages, which are
using pyproject.toml, but the thing here is
that their pyproject.toml requires setuptools 74.1.0
[1] [2], but Python 3.11 is using bundled setuptools
and pip [3] [4]. In current version 3.11.13,
there is still outdated version of setuptools, but
it looks like that in the newer version, there will be
new one [5].

Once, there is released Python 3.11.14 and updated
in OpenWrt, these patches can be dropped.

[1] https://gitlab.nic.cz/turris/pyuci/-/blob/240180b2946fdd1fd46c7f023f224acce5a55511/pyproject.toml#L29
[2] https://setuptools.pypa.io/en/stable/history.html#v74-1-0
[3] https://github.com/openwrt/packages/blob/c94ab433caf345ebc6bef9a7174d1f65f676fc87/lang/python/python3-version.mk#L18
[4] https://github.com/python/cpython/commits/3.11/Lib/ensurepip/_bundled
[5] https://github.com/python/cpython/commit/c96ab19ae460911e40ffa502f1bf945ab6c53a2e

Signed-off-by: Josef Schlehofer <[email protected]>
(cherry picked from commit d457c26c0dbea4c7c9e5795f898fbcd98c257ff1)

python-urllib3: add hostbuild

Signed-off-by: Austin Lane <[email protected]>
(cherry picked from commit d6c644c5f534e677444846ad291f828c69a33223)

protobuf: don't use shared libraries for host

Avoids needing to handle rpath.

Signed-off-by: Rosen Penev <[email protected]>
(cherry picked from commit d24229e4415b4a5c4fb7784d20c8748c9a9ebf4b)

knot-resolver: update to version 5.7.4

Knot Resolver 5.7.4 (2024-07-23)
================================

Security
--------
- reduce buffering of transmitted data, especially TCP-based in userspace
  Also expose some of the new tweaks in lua:
   (require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000
   (require 'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv}

Improvements
------------
- add the fresh DNSSEC root key KSK-2024 already, Key ID 38696

Incompatible changes
--------------------
- libknot 3.0.x support is dropped
  Upstream last maintained 3.0.x in spring 2022.

Knot Resolver 5.7.3 (2024-05-30)
================================

Improvements
------------
- stats: add separate metrics for IPv6 and IPv4

Bugfixes
--------
- fix NSEC3 records missing in answer for positive wildcard expansion
  with the NSEC3 having over-limit iteration count

Knot Resolver 5.7.2 (2024-03-27)
================================

Bugfixes
--------
- fix on 32-bit systems with 64-bit time_t

Signed-off-by: Jan Hák <[email protected]>
(cherry picked from commit 6e208887e3977367d0adc3ff28eb2df62063f274)

named: /var/run/named isn't being created with correct permissions

It needs to be group writable or session.key can't be written once
named drops privileges.

Signed-off-by: Philip Prindeville <[email protected]>
(cherry picked from commit b82574b31c240efedcb3f96274982a2703abf440)

tang: Refresh patches

Signed-off-by: Andreas Gnau <[email protected]>

libulfius: Install library on target

Signed-off-by: Austin Lane <[email protected]>
(cherry picked from commit 6c62e0fcfecf5a322cba368e5410f5e2f693b411)

liborcania: Install library on target

Signed-off-by: Austin Lane <[email protected]>
(cherry picked from commit 768b995f980f2875f588ab8f90e5b597cfa4f5d8)

nano: update to 8.5

Update nano editor to version 8.5.

Upstream has fixed the gnulib related cross-compilation problem,
so remove the config hack that was added at the 8.4 update.

Signed-off-by: Hannu Nyman <[email protected]>
(cherry picked from commit cfdf5fffec99c025c5ae93ad450566a28c915837)

btop: add migration for alias command

Files in `/etc/profile.d/` are marked as user configs and won't be
replaced to new version when update the package, so add a migration
script for this.

Fixes: #26709
Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit ae33358c4f2633d49414870e43e5b7796259eced)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 7d6535737ccf6577789fdbd65b582d43b6a399e9)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit ed12bfe13cacc0f641dc9543a3b2a623ae095d9b)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit a91d2788044d0bf569015f0a4a4193ae32b49730)

transmission: add syscalls to seccomp filter

Add missing syscalls found with `/etc/init.d/transmission trace`.

fix crash on boot on x86_64 platform

Signed-off-by: Liangbin Lian <[email protected]>
(cherry picked from commit d8272975468374232b72e85c70cf79c3699aca8b)

transmissision: remove build dependency on nodejs

Have no idea why such dependency was added.
No documentation from transmission that they need
such dependency on build time. On the other hand
saves vast of time during build

Signed-off-by: Serhii Ivanov <[email protected]>
(cherry picked from commit a06829b0a23255636d3662d24a6e7a085efd955b)

dnsdist: update to 1.9.10

fixes CVE-2025-30193

Signed-off-by: Peter van Dijk <[email protected]>
(cherry picked from commit ec30d1e4f6c33d200c11b35a218a6ae68364b391)

netavark: revert lock cargo dependencies

Now we have rust 1.85.0.

This reverts commit aba78031f58ef5e9fd5543c051cd6e0293fee553.

Signed-off-by: Tianling Shen <[email protected]>

rust: update to 1.85.0

Fixes podman build breakage which was caused by podman depending on
netavark, which in turn depends on rust-iptables.

rust-iptables requires rust 1.85.0 since commit 75825cd
https://github.com/yaa110/rust-iptables/commit/75825cd9c13db91f697461e6fa91f78c5e927008

Signed-off-by: Jonathan McCrohan <[email protected]>
(cherry picked from commit c67502852851366baff7868ea53b9e8c70bc1fe0)
[refresh patches]
Signed-off-by: Tianling Shen <[email protected]>

rust: update to 1.84.0

Signed-off-by: hingbong lo <[email protected]>
(cherry picked from commit aff8367c7afb8decef9e52a0ebf4dea72a16b39b)

bind: bump to 9.18.37

Signed-off-by: Noah Meyerhans <[email protected]>

bind: bump to 9.18.36

Signed-off-by: Noah Meyerhans <[email protected]>

php8: update to 8.2.28

This fixes:
    - CVE-2025-1217
    - CVE-2025-1219
    - CVE-2025-1734
    - CVE-2025-1736
    - CVE-2025-1861

Upstream changelog:
https://www.php.net/ChangeLog-8.php#8.2.28

Signed-off-by: Michael Heimpold <[email protected]>

btop: Update to 1.4.3

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 5082f947910d28c2e306b5330a7d4c4fc86a391d)

yq: Update to 4.45.1

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 35eb372aa5fa1968c4458e727ebbf5d7795e455e)

yq: Update to 4.44.6

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 649ff95b1ede862be4ce19d34916ce2b66a162e4)

yq: Update to 4.44.5

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 6945c7bb65d8f9e9eb42f53c3cd390c6cffc0aa5)

dnsdist: update to 1.9.9

fixes CVE-2025-30194

Signed-off-by: Peter van Dijk <[email protected]>

perl-ack: Update to 3.8.2

ack would always set a return code of 1 if -c was used. Now it properly
returns 1 if no files match, and 0 if any files match.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit b6b9cd38fa4b28a3d0ddf5f2ca72c77deb712c98)

ack: Update to 3.8.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 0c0d897b47ef98781277305d09eadf79b6bb6fe0)

btop: Update to 1.4.2

Update alias command.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 8df8700a135751d4b9365cd70e645b18b47b45a7)

btop: Update to 1.4.1

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 0e5cc7de578e72d45bd62237519b334cec26ba03)

v2raya: Update to 2.2.6.7

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit aad793b6f46e5d4d6ec2177fec7f38b1e575fe99)

librespeed-go: add missing conffiles

Add missing uci configuration to conffiles.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit df9ba185789ada48f536c3c62a816fd0bbb58505)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 1d73b25ed8b14ebf63a44542bb562449922a0dcb)

expat: update to 2.6.3

- This release contains fixes for CVE-2024-45490,
CVE-2024-45491, CVE-2024-45492.
- Since official place for expat development moved from SourceForge
to GitHub, SourceForge was removed from PKG_SOURCE_URL.
- Use gzip archive to avoid xz usage.
- Remove DOCBOOK_TO_MAN=OFF from CMAKE_OPTIONS because
we already have EXPAT_BUILD_DOCS=OFF, which has same effect.

Signed-off-by: Yanase Yuki <[email protected]>
(cherry picked from commit b0b5b8bf67c577d13b365d61825b856885f8185c)

expat: update to 2.6.2

Signed-off-by: krant <[email protected]>
(cherry picked from commit 8db49729c373fde0298ffa5708c8bbcebacf4513)

expat: update to 2.6.0

- Don't set default CMake options

Signed-off-by: krant <[email protected]>
(cherry picked from commit c40da57d7b99b9e7daf89db63e996e3fdd8ad25b)

lighttpd: backport revert changed TLS defaults

Signed-off-by: Glenn Strauss <[email protected]>

lighttpd: update to lighttpd 1.4.79 release hash

Signed-off-by: Glenn Strauss <[email protected]>
(cherry picked from commit e800fc7e8cadcd28b92429eb6ff9e677f4c50d46)

nano: Update to 8.4

Update nano edit to version 8.4.

Add configure flags to overcome upstream bug 66978, where the newly added
gnulib module for strcasecmp always fails in the configure step when
cross-compiling.
https://savannah.gnu.org/bugs/?66978
https://github.com/coreutils/gnulib/commit/b2927d1b1fa3fb09a2210a3df5691f7d48d6151b

The added flags disable the strcasecmp function from gnulib.
If upstream (gnulib?) fixes things later, the flags should be removed.

Signed-off-by: Hannu Nyman <[email protected]>
(cherry picked from commit 3d055f8dfb13ded552fa62e1aa2b008512d70a32)

libxslt: fix build breakage after libxml2 CVE fix updates

libxml2 was updated in OpenWrt Git tree with commit dec59db8fb1f
("libxml2: update to 2.13.6"), which fixed several CVEs.

Unfortunately this version bump included removal of some features, which
leads to build issues of libxslt:

  libxslt-1.1.37/xsltproc/xsltproc.c:733:39: error: assignment of read-only variable 'xmlParserMaxDepth'
   733 |                     xmlParserMaxDepth = value;

So lets fix it by backporting an upstream "fix", which removes that
deprecated functionality.

Fixes: dec59db8fb1f ("libxml2: update to 2.13.6")
References: https://github.com/openwrt/openwrt/pull/18280
Signed-off-by: Petr Štetiar <[email protected]>

zoneinfo: Updated to 2025b release.

Signed-off-by: Vladimir Ulrich <[email protected]>
(cherry picked from commit df9015f9daa8adc34be9a1866f15e9d417524cf5)

zoneinfo: Updated to 2025a release.

Signed-off-by: Vladimir Ulrich <[email protected]>
(cherry picked from commit 59db1470314a4a3f5c78ad805fa8381de0231936)

zoneinfo: Updated to 2024b release.

Signed-off-by: Vladimir Ulrich <[email protected]>
(cherry picked from commit 54162a8254bd4828ddf134abc11be724102b1e40)

zoneinfo: Updated to 2024a release

Signed-off-by: Vladimir Ulrich <[email protected]>
(cherry picked from commit 5a06f6339076aecb9a9cdce6867e4b7307f929c5)

zoneinfo: Updated to the latest (2023d) release.

Signed-off-by: Vladimir Ulrich <[email protected]>
(cherry picked from commit 69953f9fd39bdeef779ad5a5f9f8d982d4f47e64)

netavark: lock cargo dependencies

rust-iptables 0.5.3+ requires rust 1.85.0 to build, use the version
defined in Cargo.toml instead.

Signed-off-by: Tianling Shen <[email protected]>

pptpd: Fix secrets update

Clear pptp-server existing logins from CHAP_SECRETS file before adding new login data.

Signed-off-by: Thiago Pereira Ricciardi <[email protected]>

rust: disable download ci llvm

Upstream removed CI builds for this (outdated) version.

Signed-off-by: Tianling Shen <[email protected]>

rsync: backport bug fixes

Including CVE fixes for:
CVE-2024-12084
CVE-2024-12085
CVE-2024-12086
CVE-2024-12087
CVE-2024-12088
CVE-2024-12747

The patch list is based on rsync_3.2.7-1+deb12u2 from Debian.

Signed-off-by: Tianling Shen <[email protected]>

natmap: update to 20250221

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 2db5fca2d8b3310de2812972af13f91e55a52217)

v2raya: Update to 2.2.6.6

Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 39c5d7f8514cfcf8694f6ef22523454403d8a425)

v2raya: Update to 2.2.6.3

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit a5a9140870331503f51acebc7f5deb9417fef05c)

v2raya: Update to 2.2.6.2

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit a08614a0475f964b674f136e642fa800dd00488e)

v2raya: Update to 2.2.6

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit fd5546fc1f4686bb2b595b14b4c3c91a939b2dc3)

rclone: Update to 1.69.1

Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 944d48241c1408a5b75efa2d6d5e77f0ee500d80)

nextdns: Update to version 1.45.0

Signed-off-by: Olivier Poitrey <[email protected]>

nextdns: Update to version 1.44.6

Signed-off-by: Olivier Poitrey <[email protected]>

sing-box: Update to 1.11.1

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 8eecd2e5a08e40fcc28486c2d6125ddec99226c4)

sing-box: Update to 1.11.0

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 2c7b8ef5a2deb42089674dba2177e4bc8ccb88d6)

Revert "xray-core: Update to 25.1.30"

xray-core v24.12.31 is the last version that supports Go 1.21.

This reverts commit 0eb71539900d1e9fe0ff9e3ae6b258e4ba1099e0.

Signed-off-by: Tianling Shen <[email protected]>

rclone: Update to 1.69.0

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 35b614c43758cfcac53f54a392e841aff30c4f1b)

rclone: fix configuration saving

The following error occurs when creating storage configuration in WEBUI:
```
Failed to save config after 10 tries: failed to create temp file for new config: open /etc/rclone/rclone.conf4258227003: permission denied
```

we should set the owner of the parent directory of the configuration
file to rclone.

Signed-off-by: Liangbin Lian <[email protected]>
[split chown command, wrap commit message]
Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit bcd87dd8b607a1888fe5ceb521a619d068a28bbe)

rclone: Bump to 1.68.2

Release notes in links below.

Link: https://rclone.org/changelog/#v1-68-2-2024-11-15
Signed-off-by: Ryan Keane <[email protected]>
(cherry picked from commit c342279eb6386f707e6982fec95a31c51e74cb98)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit cec4103bbcdddd63930613b4d8c81973caa712fe)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit d750bb3182729619144735d0aacab258769377d6)

xray-core: Update to 25.1.30

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit e9a86e1809dc4b76ab2eb3980fc179567cfc2ccf)

xray-core: Update to 24.12.31

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 1166a2531161851d3f3d9ec6f990dab255025364)

frr: 10.2.1 fixes

add mgmtd and pim6d

Signed-off-by: Lucian CRISTIAN <[email protected]>

bind: bump to 9.18.33

Fixes CVEs:
- CVE-2024-12705: DNS-over-HTTPS flooding
- CVE-2024-11187: Limit additional section processing for large RDATA sets

Signed-off-by: Noah Meyerhans <[email protected]>

fastd: update to v23

Signed-off-by: Matthias Schiffer <[email protected]>
(cherry picked from commit 24348066216aa27e49e18e6f78c719509fc8f450)

coova-chilli: Fix WolfSSL support

Signed-off-by: Federico Capoano <[email protected]>
(cherry picked from commit bf3333594a8add333e3d7192107aa7be8bc39a33)

# Conflicts:
# net/coova-chilli/Makefile

frr: update to 10.2.1

Signed-off-by: Lucian CRISTIAN <[email protected]>

libyang: update to 2.1.128

needed for frr update to 10+

Signed-off-by: Lucian CRISTIAN <[email protected]>

hev-socks5-server: update to 2.7.0

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit d0d67ded93936657b232dae93eaf25924a7431fd)

hev-socks5-server: update to 2.6.9

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 30db86cc9c0e5e0a9ec7b651f22515bf2c5e765d)

uspot: update to Git HEAD (2025-01-20)

57b737a49497 uspot/uspotfilter: s/discon_since/lost_since/
1c2f58000519 uspot/uspotfilter: use native MAC case
70934203a0b7 captive: cleanup
7566c2716eb9 uspot: correctly handle "debug=0"
f5cc70459233 portal: remove unused bits
54cdcf463c36 uspot: remove unused ssid parameter
f13440bd80ff Update issue templates
644fd6f52a8e uspotfilter: apply disconnect delay to active clients only

(cherry picked from commit 2466aaccc1b358c6fbcc17aeb6628d974870911b)
Signed-off-by: Thibaut VARÈNE <[email protected]>

node: January 21, 2025 Security Releases

Notable Changes

    CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
    CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

    CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Signed-off-by: Hirokazu MORIKAWA <[email protected]>

net/acme-common: Bump package release

Commit 66894032d482 ("acme: standardize key_type") failed to bump the
package release, so the update won't be automatically installed. Bump
PKG_RELEASE to make sure users get the updated version.

Opt for adding a PKG_RELEASE instead of bumping the version to avoid
having different packages (from different branches) with the same
PKG_VERSION.

Signed-off-by: Toke Høiland-Jørgensen <[email protected]>

nextdns: Update to version 1.44.4

Signed-off-by: Olivier Poitrey <[email protected]>

sing-box: Update to 1.10.7

Signed-off-by: Milinda Brantini <[email protected]>
(cherry picked from commit 996c1819e3c68e27783bc7ac081cfcd3dc75ea3b)

adblock: update 4.2.3-3

Summary of three PRs regarding new adblock sources with minor changes/additions:

- add new source reg_lithuania, PR provided by @Myginas
- add new source certpl, PR provided by @jkostorz
- add new source oisd_nsfw_small, PR provided by @Turjoy9

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit cd89956c13bf7def493effaf8de1b568a379ebf9)

bind: bump to 9.18.32

Signed-off-by: Noah Meyerhans <[email protected]>

natmap: update to 20250101

Signed-off-by: Ray Wang <[email protected]>
(cherry picked from commit 806b524a287a03391a79a08d62a5e07c4d12350b)

adblock-fast: Makefile bugfixes and hijack rework

* remove indentation in postinst/prerm/postrm scripts to fix issues with APK
* rework hijack logic to redirect port 53 to the port of active/selected dnsmasq instances

Signed-off-by: Stan Grishin <[email protected]>

nextdns: Update to version 1.44.3

Signed-off-by: Olivier Poitrey <[email protected]>

delve: update to 1.24.0

Signed-off-by: Aleksey Kolosov <[email protected]>
(cherry picked from commit db853b5d58765d2bfa26439340b1d4a4e1fa5698)

xray-core: Update to 24.12.18

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit bd0fb6d3edbe183132efa9349f9ec5b5ad78b16b)

xray-core: Update to 24.11.30

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 9e7026dedb8905cd37f89f293b594d62094e43ac)

v2ray-geodata: Update to latest version

Signed-off-by: Tianling Shen <[email protected]>
(cherry picked from commit 0c97b1a427a98a21fa7d2305c9341f0f2af19239)

nano: Update to 8.3

Update nano editor to version 8.3.

Signed-off-by: Hannu Nyman <[email protected]>
(cherry picked from commit b6176b6687cbddc380b8b3e6ccf2d50112a6d2db)

nextdns: Update to version 1.44.0

Signed-off-by: Olivier Poitrey <[email protected]>

lrzsz: fix random build failures by really disabling autofoo

Currently we're seeing random build failures, caused by autofoo being
called on very ancient bundled autofoo:

  cd . && aclocal
  aclocal.real: warning: autoconf input should be named 'configure.ac', not 'configure.in'
  acinclude.m4:2: warning: underquoted definition of AC_REPLACE_GNU_GETOPT
  acinclude.m4:2:   run info Automake 'Extending aclocal'
  acinclude.m4:2:   or see https://www.gnu.org/software/automake/manual/automake.html#Extending-aclocal
  configure.in:106: error: automatic de-ANSI-fication support has been removed

For some reason that `touch` based neutralization introduced in commit
6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE") doesn't
always work.

So lets fix it by removing the autofoo bits from the bundled Makefile.in
and while at it remove processing of man and testsuite subdirs to save
some computing cycles.

Fixes: #25543
Fixes: 6d6c4b21b5e2 ("lrzsz: update to v0.12.21rc and fix a CVE")
Signed-off-by: Petr Štetiar <[email protected]>
(cherry picked from commit 3e612586041d40ebfafadb65eaa6fc34b2061ee8)

travelmate: update to 2.1.3-3

* properly escape double quotes in travelmate option values
* minor procd tweaks

Signed-off-by: Dirk Brenken <[email protected]>
(cherry picked from commit 128875aa67c378dd065582220980df9cfd4576a7)

netatalk: Update to 4.0.7

Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (24.10-rc2, snapshot)
Run tested: ipq806x - C2600 (snapshot): install apk, start/stop sfpd service & review logs

Description:
Bump to version 4.0.7

Signed-off-by: Antonio Pastor <[email protected]>

netatalk: Remove apfstats feature to solve dependency issues

afpstats requires several libraries that would increase significantly final install size.

Signed-off-by: Antonio Pastor <[email protected]>