This reverts commit 0a23f1f0.

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

autostart this alleviates the race condition we have with
'netns cleanup_net'

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Signed-off-by: Javier Marcet <javier@marcet.info>

Those devices don't have 'device' propery, only 'l3_device', which
causes 'attempt to concatenate field 'device' (a nil value)' lua error.

Use 'l3_device' as a fallback in this case.

Signed-off-by: Jacek Konieczny <jajcus@jajcus.net>

libpqxx: update to version 7.6.0

php8: update to 8.0.13

php7: update to 7.4.26

Fixes 'transmission-web' for users which didn't manually configure the
'web_home' option.
Assume transmission's default in case 'web_home' isn't defined and
mount the directory so it can be accessed from inside the jail.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Igor Bezzubchenko <garikello@gmail.com>

This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Add missing "inotify_add_watch", "inotify_init1" and "inotify_rm_watch"
syscalls to seccomp filter which are needed in case watch_dir feature
of transmission is used.

Fixes #16972
Reported-by: @siwind
Signed-off-by: Daniel Golle <daniel@makrotopia.org>

As written in the commit message:

Depending on your conntrackd configuration, events might get lost,
leaving stuck entries in the cache forever. Skip checking the conntrack
ID to allow for lazy cleanup by when a new entry that is represented by
the same tuple is added.

Signed-off-by: Nick Hainke <vincent@systemli.org>

nebula: update to 1.5.0

nextdns: Update to version 1.37.4

* update binaries to version 1.5.0 (thanks @jefferyto)
* update maintainer's email address

Signed-off-by: Stan Grishin <stangri@melmac.ca>

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Signed-off-by: Jonathan Pagel <jonny_tischbein@systemli.org>

golang: Update to 1.17.3

python-greenlet: bump to version 1.1.2

Open vSwitch does not bring up ports automatically. This is not a
problem for wireless ports, or for ports configured in
/etc/config/network, but other ports will be down, and require manual
interaction to be brought up. Configuring them with proto none will
cause netifd to do some actions on them, which might cause undefined
results, and will also bloat the UCI config file.

The cleanest solution is to bring all member ports up as part of the
init script.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

 - updated Makefile fields license (GPL3) and COPYING as license file
 - fix config directive
 - split package to shared library and application (another package, fatresize has dependency to libparted)

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Contains fixes for:

* CVE-2021-41771: ImportedSymbols in debug/macho (for Open or OpenFat)
  accesses a memory location after the end of a buffer

* CVE-2021-41772: archive/zip Reader.Open panic via a crafted ZIP
  archive containing an invalid name or an empty filename field

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

netifyd: update to 3.09

Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>

python-lxml,django,numpy: bump versions