This fixes the following CVEs:
- in intl: CVE-2016-7416
- in mysqlnd: CVE-2016-7412
- in phar: CVE-2016-7414
- in spl: CVE-2016-7417
- in standard: CVS-2016-7411
- in wddx: CVE-2016-7413, CVE-2016-7418
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
This fixes the following CVEs:
- in intl: CVE-2016-7416
- in mysqlnd: CVE-2016-7412
- in phar: CVE-2016-7414
- in spl: CVE-2016-7417
- in wddx: CVE-2016-7413, CVE-2016-7418
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
It's a bit weird fixing a build error with an upgrade,
but it seems to work on my setup.
Hopefully, builbot agrees.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
When php is installed on the host system, then the configure tries
to obtain from this binary whether some extensions are available.
This prevents the cross build when the desired extensions are not
present - which is the usual case.
So add a patch to prevent configure from doing this - we give
this information via environment variable during build already.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
- remove hack to find required packages: when php5-pecl-{raphf,propro}
was built in paralle, then the hack could not determine which build
directory must be used; this was resolved by a previous commit, both
packages now install their header files in the staging area so that
this pecl module will find it properly
- refine build dir to avoid collision with (possible) php5 package variant
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
- refine build dir to avoid collisions with php5 package variants
- properly install headers to location where depended packages look for it
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Quote:
This PHP HTTP extension aims to provide a convenient and powerful
set of functionality for one of PHPs major applications:
it eases handling of HTTP urls, headers and messages, provides
means for negotiation of a client's preferred content type,
language and charset, as well as a convenient way to send any
arbitrary data with caching and resuming capabilities.
It provides powerful request functionality with support for
parallel requests.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
This is the php7 version of php5-pecl-libevent.
Since upstream did not (yet) merged the php7 compat
changes and released a new package, we use a development
snapshot of a Github contributor.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Some PECL modules (possibly also php modules) depend on
special load order, otherwise loading the module will fail
due to unresolvable symbols.
This changeset introduces a very simple compile-time defined
order by specifying a prefix for the ini file with the load
directive. If not given, it uses a default value.
It also updates all current pecl module packages to take
this new approach.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
This is a heavy patched variant of the pecl dio module, which
now at least compiles for php7.
Patches are sent to maintainer - no response yet.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
- Add some more patches from Debian
- Rename existing ones (our own patches starts with prefix 1000+)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
This is a copy of the existing php5 stuff, adopted for PHP7.
Please not, that its not supported to install both php5
and php7 in parallel on the target.
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
This is caused by a toolchain bug and has been reported to GCC a
while a ago without receiving any responses yet [1]. Fix it at the
moment by not compiling with mips16 enabled.
Should fix#1750 and #1904.
[1] Bug 71519 - "Out of range operand" bteqz inst generated by
"casesi_internal_mips16_<mode>",
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71519
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Currently luasec fails to build if OpenSSL was built without compression
support due to an undefined COMP_METHOD type:
ssl.c: In function 'meth_compression':
ssl.c:404:9: error: unknown type name 'COMP_METHOD'
const COMP_METHOD *comp;
^
<builtin>: recipe for target 'ssl.o' failed
make[6]: *** [ssl.o] Error 1
Add a local patch to stub the `meth_compression()` function if there is no
compression support available in the OpenSSL library in order to allow
luasec to build.
A similar fix has been added upstream with
https://github.com/brunoos/luasec/pull/30
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
This fixes the following CVEs:
- in GD: CVE-2015-8874, CVE-2016-5766, CVE-2016-5767
- in mbstring: CVE-2016-5768
- in mcrypt: CVE-2016-5769
- in SPL: CVE-2016-5770, CVE-2016-5771
- in WDDX: CVE-2016-5772
- in zip: CVE-2016-5773
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Maintainer: Oskari Rauta / @oskarirauta
Compile tested: x86, APU-4D, Chaos Calmer
Run tested: ar71xx, WNDR3800, Chaos Calmer and x86, APU-4D, Chaos
Calmer - tests done. Performs as should.
Description:
LuaSQLite3 is a thin wrapper around the public domain SQLite3 database
engine.
This commit adds another sqlite3 module for Lua. This is very popular
and in my opinion, suites even better for some projects requiring
sqlite3 in Lua than already luasql, even though luasql is more
versatile since it supports other databases as well. It wouldn't hurt
to include this in the repository. This can also be installed with
luarocks, but I prefer a openwrt package.
Signed-off-by: Oskari Rauta oskari.rauta@gmail.com
Standard assignment is immediate expansion without any extraneous spacing, RFC822 compliant email addresses without any quotation marks and long git hashes
Signed-off-by: Stephen Walker <stephendwalker+github@gmail.com>
perlbase-utf8 depends on perlbase-unicore however that dependency was missing.
This patch fixes that.
Signed-off-by: Daniel Dickinson <lede@daniel.thecshore.com>
The original Google Code repository is not available anymore, use the
equivalent Github repository instead.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
