update to 1.4.20

this merge from master was intended for recent openssl vulnerability but because:

- unbound is not affected by the vulnerability
- unbound is included in FreeBSD base 10.0-RELEASE
- further merge includes more cherry-picks in dependent ports
- more recent versions do not include critical fix

this is the last update for branch reallyenglish.