If an interface is not tracked by mwan3 or enabled and this interface is
setup by netifd, then the connected ipset is not update by mwan3.
To fix this also call connected ipset update code even if the interface
is not tracked or enabled by mwan3.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Fixes CVE-2018-11233 and CVE-2018-11235

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Protobuf lite

unbound: add root zone file cache option

Add the possibility to use Unbound auto-zone: clause to
fetch complete root, arpa, in-addr.arpa, and ip6.arpa
zone files. This can speed up recursion when users
access many ccTLD or connection logging hits many PTR.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

Some resource options bundled many Unbound.conf options and
made customizing on top of UCI difficult. Make it easier to
use Unbound built defaults (blank conf sections).

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

postfix: version update to 3.3.1

libgphoto2: update package 2.5.18

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Denis Shulyaka <Shulyaka@gmail.com>

Signed-off-by: Leonardo Medici <leonardo_medici@me.com>

It's a python script and requires backtrace support when building
openvswitch which requires glibc.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

The overlay and underlay driver, and ovs-docker utilities requires setup
and dependencies that are just not available in known maintained state.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

libunistring: update to 0.9.10

fwknopd: More reliable network dependency

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7-pecl-krb5: add new package

php7-pecl-mcrypt: add new package

libevhtp: add openssl 1.1 compatibility

PHP 7.2 dropped support for the libmcrypt binding. The binding is now
provided by PECL, and a number of applications still rely on this package.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

uw-imap: add openssl 1.1 compatibility

dovecot: add GSSAPI module

Signed-off-by: W. Michael Petullo <mike@flyn.org>

zerotier: update to version 1.2.10

crtmpserver: add compatibility with openssl 1.1

Signed-off-by: Moritz Warning <moritzwarning@web.de>

Patched to compile with openssl 1.1, and also added -std=gnu++03 to
allow compilation with gcc 7.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

libzdb: add compatibility with openssl 1.1

mjpg-streamer: Update to latest version from github/jacksonliam repository.

golang: new packages

libshout: add openssl 1.1.0 compatibility

Patch to compile with openssl 1.1

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

This patch merely updates the detection of the ssl library.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Signed-off-by: Ken Keys <kkeys@caida.org>

Signed-off-by: Ken Keys <kkeys@caida.org>

rtty: Update to 4.1.2

Avoid calling deprecated and unnecessary library initialization
functions with openssl >= 1.1.0.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

This patch is a backport of upstream changes.
I read the Makefile warning and made sure it only updates the openssl
calls and data types to the new API.  It does not touch anything else!

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Signed-off-by: Jianhui Zhao <jianhuizhao329@gmail.com>

Shorewall: Bump to version 5.2.0.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>