perl: ensure File::Spec::canonpath() preserves taint [CVE-2015-8607]

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Kernel module kmod-crypto-core was removed in OpenWrt trunk r46820.

Signed-off-by: Jan Čermák <jan.cermak@nic.cz>

minidlna: update to 1.1.5

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Signed-off-by: Steven Barth <steven@midlink.org>

strongswan: preserve /etc/ipsec.d during upgrade

mdnsresponder: bump to 576.30.4.

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

cryptodev-linux: bump to 1.8

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Building both variants improperly tried to include the passwd utility
for the non-ssl variant, as the variable was set for the ssl variant.

Use properly separated install tasks to install additional files, rather
than hacking around inside the single target.

Signed-off-by: Karl Palsson <karlp@remake.is>

Introduced back in 2014

Fixes: cd21cbb82e
Signed-off-by: Karl Palsson <karlp@tweak.net.au>

and improves collectd support

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

flashrom: include io.h to fix compile error

This fixes compile time errors using kernel 4.3 and above

Signed-off-by: Rob Mosher <nyt-openwrt@countercultured.net>

This patch includes sys/io.h from flash.h to fix compile errors

Signed-off-by: Rob Mosher <nyt-openwrt@countercultured.net>

Instead of explicitly specyfing an Apache mirror use the
@APACHE download facility.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>

Instead of explicitly specyfing an Apache mirror use the
@APACHE download facility.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>

Instead of explicitly specyfing an Apache mirror use the
@APACHE download facility.

Signed-off-by: Heinrich Schuchardt <xypron.glpk@gmx.de>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Minor changes mostly unrelated to OpenWRT.
Full changelog at http://mosquitto.org/2015/12/version-1-4-7-released/

Signed-off-by: Karl Palsson <karlp@remake.is>

Many users of the SSL build of mosquitto need the passwd utility for
managing keys.

Fixes github issue #1909

Signed-off-by: Karl Palsson <karlp@remake.is>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Beginning in PathTools 3.47 and/or perl 5.20.0, the File::Spec::canonpath()
routine returned untained strings even if passed tainted input. This defect
undermines the guarantee of taint propagation, which is sometimes used to
ensure that unvalidated user input does not reach sensitive code.

This defect was found and reported by David Golden of MongoDB, and a patch
was provided by Tony Cook.

References:

 * https://rt.perl.org/Public/Bug/Display.html?id=126862
 * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8607

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

squid uses libcom_err, a static library provided by libext2fs

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Jacob Siverskog <jacob@teenage.engineering>

utils/collectd:  Really prevent perl bindings

--with-perl-bindings= is insufficient, --without-perl-bindings is required
to actually prevent perl bindings when perl has been built for the target.

Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>

It is not enough to select package kmod-cryptodev to avoid
build failure; there must be a Makefile dependency on
kmod-cryptodev in order for the build system to ensure
kmod-cryptodev (and it's headers) are present during build.

Therefore drop the select and add a conditional dependency.

Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>

ddns-scripts: allow setting CloudFlare 'rec_id' in the config

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>

Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>