If an interface is not tracked by mwan3 or enabled and this interface is
setup by netifd, then the connected ipset is not update by mwan3.
To fix this also call connected ipset update code even if the interface
is not tracked or enabled by mwan3.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Phil Eichinger <phil@zankapfel.net>

Previous patch was incomplete and broke with deprecated APIs
disabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes CVE-2018-11233 and CVE-2018-11235

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Adapted minor piece of code to the new API.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Protobuf lite

unbound: add root zone file cache option

Add the possibility to use Unbound auto-zone: clause to
fetch complete root, arpa, in-addr.arpa, and ip6.arpa
zone files. This can speed up recursion when users
access many ccTLD or connection logging hits many PTR.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

Some resource options bundled many Unbound.conf options and
made customizing on top of UCI difficult. Make it easier to
use Unbound built defaults (blank conf sections).

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

Adds openssl compatibility.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Fixes the following CVEs:
- CVE-2018-5388
- CVE-2018-10811

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

transmission: Update to 2.94

postfix: version update to 3.3.1

libgphoto2: update package 2.5.18

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Denis Shulyaka <Shulyaka@gmail.com>

Signed-off-by: Leonardo Medici <leonardo_medici@me.com>

It's a python script and requires backtrace support when building
openvswitch which requires glibc.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

The overlay and underlay driver, and ovs-docker utilities requires setup
and dependencies that are just not available in known maintained state.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Mainly a bugfix for XSS. Patches have been refreshed.

Added an upstream fix for TLS verification. Now enabled by default.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libunistring: update to 0.9.10

fwknopd: More reliable network dependency

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

php7-pecl-krb5: add new package

php7-pecl-mcrypt: add new package

This patch adds compatibility with openssl 1.1.0 to ibrdtnd.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

libevhtp: add openssl 1.1 compatibility

PHP 7.2 dropped support for the libmcrypt binding. The binding is now
provided by PECL, and a number of applications still rely on this package.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: W. Michael Petullo <mike@flyn.org>

uw-imap: add openssl 1.1 compatibility

Latest stable release, support for openssl 1.1

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

dovecot: add GSSAPI module

Signed-off-by: W. Michael Petullo <mike@flyn.org>

This patch has been merged upstream.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

zerotier: update to version 1.2.10

crtmpserver: add compatibility with openssl 1.1

Signed-off-by: Moritz Warning <moritzwarning@web.de>

This patch was submitted upstream.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Applied a patch that was merged upstream.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Patched to compile with openssl 1.1, and also added -std=gnu++03 to
allow compilation with gcc 7.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

libzdb: add compatibility with openssl 1.1

mjpg-streamer: Update to latest version from github/jacksonliam repository.

The patch was accepted upstream for the next release.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Openssl 1.1 doesn't support SSL2 and does not define the OPENSSL_NO_SSL2
flag either.  Also, it defaults to NO_EGD, so do not use EGD if it's not
enabled in openssl.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

The patch was merged in upstream's master branch.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

When cross-compiling, the configure script doesn't use /dev/urandom as
entropy source, which would have been the case if we were building it
natively.  Instead it tries to use an EGD, which openwrt doesn't supply.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

golang: new packages

libshout: add openssl 1.1.0 compatibility