Signed-off-by: Michael Heimpold <mhei@heimpold.de>

- fileinfo: PHP actually uses its own libmagic implementation
- pdo-sqlite/sqlite3: libsqlite3 itself depends on libpthread,
  not the extension
- xml{reader,writer}: both do not use iconv stuff

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

This commit adds a patch to enforce the usage of an alternative
code path, preventing the need of libiconv in the bundled libgd
of php.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

This fixes CVE-2014-8142.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>

Based on released version of lua binding to libmosquitto.
Advantages compared to lua-mqtt:
* qos 1/2 support
* substantially faster

Signed-off-by: Karl Palsson <karlp@remake.is>

Created new package for last current release of penlight.

Signed-off-by: Karl Palsson <karlp@remake.is>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
Tested-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
Tested-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
Tested-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
Tested-by: Gergely Kiss <mail.gery@gmail.com>

Signed-off-by: Gergely Kiss <mail.gery@gmail.com>
Tested-by: Gergely Kiss <mail.gery@gmail.com>

Ruby 2.1.5 has been released.

This release includes a security fix for a DoS vulnerability of REXML.
It is similar to the fixed vulnerability in the previous release, but
new and different from it.

CVE-2014-8090: Another Denial of Service XML Expansion
And, some bug fixes are also included. See tickets and ChangeLog for details.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

PKG_NAME should be the name of the actual OpenWRT package, and not
the name of the original package name.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Should be included by Python packages if they want to run
Python-package-specific build rules.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

python-mini does not exist anymore
For now we'll just fix the build, and we'll do a bit more smart
packaging later.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Ted Hess <thess@kitschensync.net>

Signed-off-by: Roger D <rogerdammit@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Same as python.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Noted in luasec 0.4.1 Changelog:
Activate SSL_MODE_RELEASE_BUFFERS by default if it is available (thanks Prosody project)

Update to latest 0.5 to fix a few other leaks.
luasec moved to github, so update URL and license info.
Move package maintainer to correct place in Makefile, hope he is okay with it.

Signed-off-by: Stefan Hellermann <stefan@the2masters.de>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Ian Leonard <antonlacon@gmail.com>

This fixes CVE-2014-3710.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Signed-off-by: Marcel Denia <naoir@gmx.net>

Use export PYTHONDONTWRITEBYTECODE=0 to re-enable writing byte codes.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <aa@ocedo.com>

This patch reduces distutils from 1.7 MB to 0.7 MB.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Nicolas Thill <nico@openwrt.org>

Mostly useful for setuptools and pip during build.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Some symbols are not found (tgetnum and BC).
Looks like the termcap lib, which should be in libncurses(w)
but maybe some build param would be required.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Fixes some build issues.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

This addresses CVE-2014-3668, CVE-2014-3669 and CVE-2014-3670
according to PHP's release notes.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>