* support multiple WAN interfaces in iptables rules,
  set 'ban_iface' option accordingly (as space separated list)
  or use the LuCI frontend
* add new "refresh" mode while triggered by fw changes (no download)
* add required ip dependency
* fix wrong 'settype' definition for firehol1 in config

Signed-off-by: Dirk Brenken <dev@brenken.org>

python3-bottle: Update to 0.12.13

go-ethereum: Update to 1.8.18

darkstat: procd init script and enabling additional parameters

python: fix build with OpenSSL 1.1.0

postgresql: Update to 9.6.11

This is to change the init script to a procd init script
This also enable some additional parameters in the binary that
were present but not enabled:
The export file (option export_file)
The import file (option import_file)
The daylog (option daylog_file)
These are disabled by default.  Also, the option to run as a daemon
is removed, as not compatible with procd.

There is no change in the binary.

Signed-off-by: Jean-Michel Lacroix <lacroix@lepine-lacroix.info>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Buildbots are currently failing because of this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Joseph Benden <joe@benden.us>

Update Samba to 4.9.2
Refresh patches

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

libestr: Update to 0.1.11

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python-requests: Update to 2.20.1

i2pd: Update to 2.22.0

rsyslog: Update to 8.39.0

lftp: Update to 4.8.4

emailrelay: Remove SSLv3 option

Addresses issue from here:
  https://github.com/openwrt/packages/issues/7367#issuecomment-437685598

The SSL module in Python doesn't handle properly all the combinations of
NPN between all OpenSSL & LibreSSL versions.
This patch fixes this.
Also pushed a report & proposal upstream to Python:
  https://bugs.python.org/issue35264

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

libssh2: Fix compilation with deprecated APIs disabled

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gstreamer1: Update to 1.14.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Fixes several CVEs.

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

itsdangerous: Update to 1.1.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Disabled a bunch more stuff through the configure script. Refreshed
patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

mariadb: fix build issue

The build breaks when Kerberos is available in staging dir. mariadb
build system exits with error:

CMake Error at libmariadb/cmake/plugins.cmake:43 (message):
  Invalid plugin type NO.  Allowed plugin types are DYNAMIC;STATIC;OFF

It doesn't like the definition "PLUGIN_AUTH_GSSAPI_CLIENT=NO" anymore.
We need to set it to "OFF" to make it happy.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

python-urllib3: Update to 1.24..1

pps-tools: Update to 1.0.2 and switch to codeload

seafile-seahub: Update to 6.3.4

seafile-server: Update to 6.3.4

python-zope-interface: Update to 4.6.0

python-pycparser: Update to 2.19

Switched to a proper URL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>