libressl: provide fake openssl pkgconfig files
libressl: fix issue with programs using -fvisibility=hidden

they use the address of main as a bogus way to generate entropy.
this breaks anything that uses -fvisibility=hidden.
for example

gcc test.c -lcurl -fvisibility=hidden
/bin/ld: a.out: hidden symbol `main' in /tmp/ccobhDjc.o is referenced by DSO

readelf -a /lib/libcrypto.so | grep main
000000345708  000a00000006 R_X86_64_GLOB_DAT 0000000000000000 main + 0
     10: 0000000000000000     0 NOTYPE  GLOBAL DEFAULT  UND main
   2146: 0000000000000000     0 NOTYPE  GLOBAL DEFAULT  UND main
libressl: remove unrecognized configure flags
libressl: bump to 2.0.1
socat: fix typo
musl: add a patch for missing dynlinker error messages
dropbear: bump to latest
rc.local: add option to disable ipv6
rc.local: default "accept router advertisements" config to "no"

when the router sends "router advertisement" [0] packets,
linux will set up ipv6 routes automatically, which has the effect
that tests (connect() on udp socket) musl's getaddrinfo does
(to determine which addresses to prefer) succeed in the ipv6 case and
therefore return the ipv6 addresses first.
if the router has no external ipv6 address programs like wget will hang for
a long time until falling back to the ipv4 address.

test program to examine musl's dns lookup behaviour via strace or gdb:
(set breakpoint to qsort and look at the callers frame)

 #include <sys/socket.h>
 #include <netdb.h>
 #include <stdio.h>

int main() {
        struct addrinfo hint = { .ai_socktype = 1 };
        struct addrinfo *res;
        int ret = getaddrinfo("matt.ucc.asn.au", 0, &hint, &res);
        if(!ret) {
                if(res->ai_family == AF_INET) puts("got ipv4 first");
                if(res->ai_family == AF_INET6) puts("got ipv6 first");
        }
        return ret;
}

anything that happens automatically without explicit request
regarding network configuration is considered broken.

more info: [1]

[0] http://packetlife.net/blog/2008/aug/28/ipv6-neighbor-discovery/
[1] http://strugglers.net/~andy/blog/2011/09/04/linux-ipv6-router-advertisements-and-forwarding/
cyassl: bump to 3.1.0
liblepton: build with gif support
giflib: bump to latest
Revert "giflib: bump to latest"

This reverts commit 405a5f26d6f25bdc969cf566902ab09795b17119.

breaks API compat (building liblepton):
gifio.c:406:5: error: too few arguments to function 'EGifCloseFile'
gifio.c:329:5: error: too few arguments to function 'EGifOpenFileHandle'
gifio.c:189:5: error: too few arguments to function 'DGifCloseFile'
gifio.c:92:5: error: too few arguments to function 'DGifOpenFileHandle'
pcap: fix host deps
pcap: disable canusb support

it's built with canusb support if libusb is detected.
this breaks static linking since -lusb is missing from
other packages LDFLAGS.
libpcap: bump to latest
tcpdump: bump to latest
kernel: bump to 3.14.14
firefox: bump to 31.0
firefox: build against system icu