Signed-off-by: Phil Eichinger <phil@zankapfel.net>

Fixes CVE-2018-11233 and CVE-2018-11235

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Protobuf lite

unbound: add root zone file cache option

Add the possibility to use Unbound auto-zone: clause to
fetch complete root, arpa, in-addr.arpa, and ip6.arpa
zone files. This can speed up recursion when users
access many ccTLD or connection logging hits many PTR.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

Some resource options bundled many Unbound.conf options and
made customizing on top of UCI difficult. Make it easier to
use Unbound built defaults (blank conf sections).

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

postfix: version update to 3.3.1

libgphoto2: update package 2.5.18

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Denis Shulyaka <Shulyaka@gmail.com>

Signed-off-by: Leonardo Medici <leonardo_medici@me.com>

It's a python script and requires backtrace support when building
openvswitch which requires glibc.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

The overlay and underlay driver, and ovs-docker utilities requires setup
and dependencies that are just not available in known maintained state.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

libunistring: update to 0.9.10

fwknopd: More reliable network dependency

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7-pecl-krb5: add new package

php7-pecl-mcrypt: add new package

libevhtp: add openssl 1.1 compatibility

PHP 7.2 dropped support for the libmcrypt binding. The binding is now
provided by PECL, and a number of applications still rely on this package.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

uw-imap: add openssl 1.1 compatibility

dovecot: add GSSAPI module

Signed-off-by: W. Michael Petullo <mike@flyn.org>

zerotier: update to version 1.2.10

crtmpserver: add compatibility with openssl 1.1

Signed-off-by: Moritz Warning <moritzwarning@web.de>

Patched to compile with openssl 1.1, and also added -std=gnu++03 to
allow compilation with gcc 7.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

libzdb: add compatibility with openssl 1.1

mjpg-streamer: Update to latest version from github/jacksonliam repository.

golang: new packages

libshout: add openssl 1.1.0 compatibility

Patch to compile with openssl 1.1

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

This patch merely updates the detection of the ssl library.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Signed-off-by: Ken Keys <kkeys@caida.org>

Signed-off-by: Ken Keys <kkeys@caida.org>

rtty: Update to 4.1.2

Avoid calling deprecated and unnecessary library initialization
functions with openssl >= 1.1.0.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

This patch is a backport of upstream changes.
I read the Makefile warning and made sure it only updates the openssl
calls and data types to the new API.  It does not touch anything else!

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>

Shorewall: Bump to version 5.2.0.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>