opendkim: Added compatibility wiht openssl 1.1

fdm: add compatibility with openssl 1.1

aircrack-ng: add openssl 1.1 compatibility

bitlbee: added openssl 1.1 support

krb5: set replay cache directory to /tmp

Signed-off-by: W. Michael Petullo <mike@flyn.org>

libfmt: bump to version 5.0.0

Signed-off-by: Othmar Truniger <github@truniger.ch>

ariang: Bump to latest version

This upgrade ariang webui to latest version

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>

vnstat: port init-script to procd and enable auto-respawn

Originally this was indended as a fix for devices without RTC support
which do not have the correct time set after a reboot (until ntp is able
to update the system time). vnstat checks if there is a time difference
between the latest entry in the database and detects that the system time
is incorrect. In this case vnstat does not start (to prevent database
corruption), the following message is reported instead:
'Error: Interface "..." has previous update date too much in the future,
exiting.'
Once we have network connectivity (and ntp has updated the system time)
vnstat starts correctly though.
vnstat 1.18 fixes this by waiting a few minutes (instead of exiting) and
the following message is logged:
"Latest database update is in the future (db: 2018-04-28 08:39:11 > now:
2018-04-28 08:07:18). Giving the system clock up to 5 minutes to sync
before continuing."

This still adds a procd respawn trigger to let procd automatically
restart vnstat in case:
- vnstat it crashes
- no valid system time is received for a long time (no network
  connectivity, broken NTP servers, ...)

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>

This ports the init-script from the legacy functions to procd. There
should be no functional changes with this patch.

Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>

libshout: Fix OpenSSL 1.1.0 without deprecated APIs

conserver: bump to v8.2.2 - adds openssl 1.1 compatibility

net/mwan3: fix connected networks

mutt: bump to version 1.10.0

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

If an interface is not tracked by mwan3 or enabled and this interface is
setup by netifd, then the connected ipset is not update by mwan3.
To fix this also call connected ipset update code even if the interface
is not tracked or enabled by mwan3.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Phil Eichinger <phil@zankapfel.net>

Previous patch was incomplete and broke with deprecated APIs
disabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes CVE-2018-11233 and CVE-2018-11235

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Protobuf lite

unbound: add root zone file cache option

Add the possibility to use Unbound auto-zone: clause to
fetch complete root, arpa, in-addr.arpa, and ip6.arpa
zone files. This can speed up recursion when users
access many ccTLD or connection logging hits many PTR.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

Some resource options bundled many Unbound.conf options and
made customizing on top of UCI difficult. Make it easier to
use Unbound built defaults (blank conf sections).

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

Adds openssl compatibility.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Fixes the following CVEs:
- CVE-2018-5388
- CVE-2018-10811

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

transmission: Update to 2.94

postfix: version update to 3.3.1

libgphoto2: update package 2.5.18

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Denis Shulyaka <Shulyaka@gmail.com>

Signed-off-by: Leonardo Medici <leonardo_medici@me.com>

It's a python script and requires backtrace support when building
openvswitch which requires glibc.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

The overlay and underlay driver, and ovs-docker utilities requires setup
and dependencies that are just not available in known maintained state.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Mainly a bugfix for XSS. Patches have been refreshed.

Added an upstream fix for TLS verification. Now enabled by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libunistring: update to 0.9.10

fwknopd: More reliable network dependency

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7-pecl-krb5: add new package

php7-pecl-mcrypt: add new package

libevhtp: add openssl 1.1 compatibility

PHP 7.2 dropped support for the libmcrypt binding. The binding is now
provided by PECL, and a number of applications still rely on this package.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

uw-imap: add openssl 1.1 compatibility

dovecot: add GSSAPI module

Signed-off-by: W. Michael Petullo <mike@flyn.org>

zerotier: update to version 1.2.10