Signed-off-by: W. Michael Petullo <mike@flyn.org>

This fixes CVE-2015-0235 and CVE-2015-0273.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

This include fixes for CVE-2015-0231, CVE-2014-9427 and CVE-2015-0232.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: wuqiong <memccpy@gmail.com>

- split fpm config into main and pool file
- introduced uci config file
- re-worked init script

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

SQLite2 support was dropped by upstream a long time ago, so
let's remove the leftovers here, too.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

- fileinfo: PHP actually uses its own libmagic implementation
- pdo-sqlite/sqlite3: libsqlite3 itself depends on libpthread,
  not the extension
- xml{reader,writer}: both do not use iconv stuff

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

This commit adds a patch to enforce the usage of an alternative
code path, preventing the need of libiconv in the bundled libgd
of php.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

This fixes CVE-2014-8142.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Ted Hess <thess@kitschensync.net>

This fixes CVE-2014-3710.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

This addresses CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670
according to PHP's release notes.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: W. Michael Petullo <mike@flyn.org>