Signed-off-by: Phil Eichinger <phil@zankapfel.net>

Previous patch was incomplete and broke with deprecated APIs
disabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes CVE-2018-11233 and CVE-2018-11235

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Adapted minor piece of code to the new API.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Protobuf lite

unbound: add root zone file cache option

Add the possibility to use Unbound auto-zone: clause to
fetch complete root, arpa, in-addr.arpa, and ip6.arpa
zone files. This can speed up recursion when users
access many ccTLD or connection logging hits many PTR.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

Some resource options bundled many Unbound.conf options and
made customizing on top of UCI difficult. Make it easier to
use Unbound built defaults (blank conf sections).

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

Adds openssl compatibility.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Fixes the following CVEs:
- CVE-2018-5388
- CVE-2018-10811

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

transmission: Update to 2.94

postfix: version update to 3.3.1

libgphoto2: update package 2.5.18

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Denis Shulyaka <Shulyaka@gmail.com>

Signed-off-by: Leonardo Medici <leonardo_medici@me.com>

It's a python script and requires backtrace support when building
openvswitch which requires glibc.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

The overlay and underlay driver, and ovs-docker utilities requires setup
and dependencies that are just not available in known maintained state.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Mainly a bugfix for XSS. Patches have been refreshed.

Added an upstream fix for TLS verification. Now enabled by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libunistring: update to 0.9.10

fwknopd: More reliable network dependency

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7-pecl-krb5: add new package

php7-pecl-mcrypt: add new package

This patch adds compatibility with openssl 1.1.0 to ibrdtnd.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

libevhtp: add openssl 1.1 compatibility

PHP 7.2 dropped support for the libmcrypt binding. The binding is now
provided by PECL, and a number of applications still rely on this package.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

uw-imap: add openssl 1.1 compatibility

Latest stable release, support for openssl 1.1

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

dovecot: add GSSAPI module

Signed-off-by: W. Michael Petullo <mike@flyn.org>

This patch has been merged upstream.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

zerotier: update to version 1.2.10

crtmpserver: add compatibility with openssl 1.1

Signed-off-by: Moritz Warning <moritzwarning@web.de>

This patch was submitted upstream.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Applied a patch that was merged upstream.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Patched to compile with openssl 1.1, and also added -std=gnu++03 to
allow compilation with gcc 7.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

libzdb: add compatibility with openssl 1.1

mjpg-streamer: Update to latest version from github/jacksonliam repository.

The patch was accepted upstream for the next release.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Openssl 1.1 doesn't support SSL2 and does not define the OPENSSL_NO_SSL2
flag either.  Also, it defaults to NO_EGD, so do not use EGD if it's not
enabled in openssl.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

The patch was merged in upstream's master branch.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

When cross-compiling, the configure script doesn't use /dev/urandom as
entropy source, which would have been the case if we were building it
natively.  Instead it tries to use an EGD, which openwrt doesn't supply.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

golang: new packages

libshout: add openssl 1.1.0 compatibility

Patch to compile with openssl 1.1

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>