Fabrice Fontaine [Sat, 14 Mar 2026 13:38:56 +0000 (14:38 +0100)]
net/openfortivpn: assign PKG_CPE_ID
cpe:/a:openfortivpn_project:openfortivpn is the correct CPE ID for openfortivpn:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openfortivpn_project:openfortivpn
Fabrice Fontaine [Sat, 14 Mar 2026 12:40:54 +0000 (13:40 +0100)]
libs/libxerces-c: assign PKG_CPE_ID
cpe:/a:apache:xerces-c\+\+ is the correct CPE ID for libxerces-c:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe%3A2.3%3Aa%3Aapache%3Axerces-c%5C%2B%5C%2B
Fabrice Fontaine [Sat, 14 Mar 2026 14:04:57 +0000 (15:04 +0100)]
utils/miniflux: assign PKG_CPE_ID
cpe:/a:miniflux_project:miniflux is the correct CPE ID for miniflux:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:miniflux_project:miniflux
Fabrice Fontaine [Sat, 14 Mar 2026 14:24:23 +0000 (15:24 +0100)]
libs/libulfius: assign PKG_CPE_ID
cpe:/a:ulfius_project:ulfius is the correct CPE ID for libulfius:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ulfius_project:ulfius
Fabrice Fontaine [Sat, 14 Mar 2026 13:28:18 +0000 (14:28 +0100)]
utils/podman: assign PKG_CPE_ID
cpe:/a:podman_project:podman is the correct CPE ID for podman:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:podman_project:podman
Fabrice Fontaine [Sat, 14 Mar 2026 13:23:09 +0000 (14:23 +0100)]
libs/qrencode: assign PKG_CPE_ID
cpe:/a:qrencode_project:qrencode is the correct CPE ID for qrencode:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:qrencode_project:qrencode
Fabrice Fontaine [Sat, 14 Mar 2026 13:52:24 +0000 (14:52 +0100)]
sound/owntone: assign PKG_CPE_ID
cpe:/a:owntone:owntone_server is the correct CPE ID for owntone:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:owntone:owntone_server
Fabrice Fontaine [Sat, 14 Mar 2026 14:10:18 +0000 (15:10 +0100)]
net/mac-telnet: assign PKG_CPE_ID
cpe:/a:mac-telnet_project:mac-telnet is the correct CPE ID for mac-telnet:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:mac-telnet_project:mac-telnet
Fabrice Fontaine [Fri, 13 Mar 2026 20:52:25 +0000 (21:52 +0100)]
net/dhcpcd: fix PKG_CPE_ID
cpe:/a:dhcpcd_project:dhcpcd is the correct CPE ID for dhcpcd:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:dhcpcd_project:dhcpcd
Fabrice Fontaine [Fri, 13 Mar 2026 20:44:23 +0000 (21:44 +0100)]
libs/libexif: fix PKG_CPE_ID
cpe:/a:libexif_project:libexif is the correct CPE ID for libexif:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexif_project:libexif
Fabrice Fontaine [Fri, 13 Mar 2026 23:18:45 +0000 (00:18 +0100)]
utils/minicom: fix PKG_CPE_ID
cpe:/a:minicom_project:minicom is the correct CPE ID for minicom:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:minicom_project:minicom
Changelog since 1.3.0:
- Fix escaped percent signs (%%) not rendering correctly when not at
line beginnings (1.3.1/1.3.2)
- Add 'pass' statements to empty control blocks to prevent errors (1.3.3)
- Fix strict_undefined mode conflicts with comprehensions inside
function definitions (1.3.3)
- Revert dictionary literal parsing changes that caused bracketed
expression regressions (1.3.5)
Full changelog:
https://docs.makotemplates.org/en/latest/changelog.html
Paul Donald [Wed, 11 Mar 2026 18:57:38 +0000 (19:57 +0100)]
openvpn: shellcheck fixes
correct spacing for [] if blocks and var quoting.
use json_get_vars to get user-defined scripts so the
setenv parameters are appended to the command line.
handle ovpnproto as a PROTO_STRING so it is monitored
and loaded.
Paul Donald [Wed, 11 Mar 2026 17:59:38 +0000 (18:59 +0100)]
openvpn: handling for 'push' and other array options
remove duplicate 'push' entry from string types.
push and other array values shall be "double quoted".
we also must 'eval' so that the double-quoted array values
don't get split on spaces.
Also quote file paths in case they contain spaces.
Fabrice Fontaine [Fri, 13 Mar 2026 21:40:56 +0000 (22:40 +0100)]
net/nfs-kernel-server: fix PKG_CPE_ID
cpe:/a:linux-nfs:nfs-utils is the correct CPE ID for nfs-kernel-server:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:linux-nfs:nfs-utils
Fixes: ee3b06e42cb86756b0fed1dd4e03aee1b358f759 (nfs-kernel-server: provide a NFSv3 and NFSv4 daemon) Signed-off-by: Fabrice Fontaine <redacted>
Fabrice Fontaine [Sat, 14 Mar 2026 17:47:40 +0000 (18:47 +0100)]
utils/bubblewrap: assign PKG_CPE_ID
cpe:/a:projectatomic:bubblewrap is the correct CPE ID for bubblewrap:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:projectatomic:bubblewrap
When token_script fails, proto_setup_failed() notifies netifd that
setup has failed, but script execution continues regardless.
This commit adds exit 1 and sleep 5 (consistent with wireguard.sh
error handling) to abort setup on token_script failure. Also fix
typo in logger tag ("openconenct" -> "openconnect").
Thomas Winkler [Tue, 10 Mar 2026 12:56:11 +0000 (13:56 +0100)]
openconnect: implement --no-external-auth
The option prevents OpenConnect from advertising
to the server that it supports any kind of
authentication mode that requires an external
browser. Some servers will force the client to use such
an authentication mode if the client advertises it, but
fallback to a more "scriptable" authentication mode if
the client doesn’t appear to support it.
Lower the START value from 99 to 90. This allows other applications that
use pulseaudio to start after it with the pulse client socket being available.
Full release notes:
https://github.com/stub42/pytz/blob/master/src/CHANGES.rst
pytz 2026.1 requires setuptools as build backend but it was not
declared as a build dependency, causing the build to fail with
'setuptools.build_meta:__legacy__ is not available'.
vscode: update editor settings and commit constraints
Enable trailing whitespace trimming, insert final newline, and force LF.
Configure git input validation to warn if subject exceeds 60 characters
or if body lines exceed 75 characters.
Dropped patch: 0001-Make-GEMM3M-parameters-available-on-32bit-X86-GENERI.patch
Part of upstream: https://github.com/OpenMathLib/OpenBLAS/pull/5418
Changelog:
- Revert a 0.3.30 optimization that could cause race conditions
and invalid results in GEMM
- Fix thread lockup with Python 3.9 and NumPy
- Fix deadlock in multithreaded code after fork()
- Add bfloat16 extensions (BGEMM, BGEMV) and basic FP16 infrastructure
- Add batch GEMM operations with strided variants
- Add multithreaded LAPACK SLAED3/DLAED3 for improved eigensolvers
- Add Apple M4 and Intel Lunar Lake support
- Add initial POWER11 architecture support
- Improve GEMM performance on A64FX and ARM processors
Full release notes:
https://github.com/OpenMathLib/OpenBLAS/releases/tag/v0.3.31
Dirk Brenken [Thu, 12 Mar 2026 19:39:02 +0000 (20:39 +0100)]
adblock: update 4.5.2‑4
* optimized the awk for the Top10 statistics in the DNS Report,
removed the faulty caching (reported in the forum)
* minor improvement in the f_switch function
* readme update
python-evdev: add mandatory uinput.h header to builder
Starting from 1.9.2 python-evdev requires
include/uapi/linux/uinput.h headers for proper building.
Otherwise, it compiles but cannot be imported causing
KeyError: 'UI_FF'
Changes since 4.7.2:
- Fix potential corruption in Squashfs filesystems containing sparse files
- Fix pseudo file creation failures with large blocks of contiguous zeros
- Fix duplicate file detection for files exceeding available buffer space
- Add -numeric-owner option to mksquashfs/sqfstar
- Fix segfault when using pseudo file root definitions with only Xattr metadata
- Fix conflict between -offset and -stream options
- Fix directory modification timestamp issues in pseudo file hierarchy
- Fix -max-depth incorrectly marking empty directories as excluded
Full release notes:
https://github.com/plougher/squashfs-tools/releases/tag/4.7.5
Florian Eckert [Thu, 5 Mar 2026 12:31:17 +0000 (13:31 +0100)]
openvpn: use append for the remaining options
There is already the 'append' command, which assembles all parameters that
are called 'proto_run_command'. Let´s move also the last params to the
top. To ensure that the sequence is correct, the parameters must be added
at the beginning, so that user parameters can overwrite them.
Florian Eckert [Thu, 5 Mar 2026 12:28:11 +0000 (13:28 +0100)]
openvpn: use also append for dev_type and ovpnproto options
There is already the 'append' command, which assembles all parameters that
are called 'proto_run_command'. Let´s use that. To ensure that the
sequence is correct, the parameters must be added at the beginning, so that
user parameters can overwrite them.
Florian Eckert [Thu, 5 Mar 2026 08:08:34 +0000 (09:08 +0100)]
openvpn: fix auth_user_pass option
The variable 'auth_file' is not used in the following programm sequence.
It therefore only makes sense to add it as a call parameter via 'append'
when calling the the 'proto_run_commmand'.
Martin Schiller [Wed, 18 Feb 2026 06:51:33 +0000 (07:51 +0100)]
usbutils: use ALTERNATIVES
Use the ALTERNATIVES symlink handling to avoid conflicts with busybox
lsusb tool. Otherwise this package can not be installed if you also have
enabled lsusb from busybox.
Martin Schiller [Wed, 18 Feb 2026 06:49:01 +0000 (07:49 +0100)]
pciutils: use ALTERNATIVES
Use the ALTERNATIVES symlink handling to avoid conflicts with busybox
lspci tool. Otherwise this package can not be installed if you also have
enabled lspci from busybox.
Eric McDonald [Sat, 7 Mar 2026 22:29:16 +0000 (14:29 -0800)]
net-snmp: fix newline when RestrictOID is neither yes nor no
snmpd_access_default_add, snmpd_access_HostName_add, and
snmpd_access_HostIP_add check if RestrictOID is `yes` or `no`
but fail to write a newline for other values of RestrictOID
(e.g., `true`, `false`) or if unset, corrupting the generated config.
Fix by using config_get_bool and restructuring to write either
a complete line or nothing. Also require RestrictedOID to be
non-empty when RestrictOID is enabled.
This is a breaking change for configs where RestrictOID is set
to a value that the old code did not match as `yes` (e.g., `true`,
`1`, `on`, `enabled`) but config_get_bool evaluates as true. In
practice, this is unlikely to affect existing installs unless a
user is unknowingly relying on unintended behavior or is deliberately
relying on the old code's non-standard boolean evaluation; this
latter case is considered unlikely by this commit's author. Configs
where RestrictOID is enabled but RestrictedOID is empty are also
affected; previously a directive with a trailing space was written,
now no directive is written.
Eric McDonald [Sat, 7 Mar 2026 21:52:19 +0000 (13:52 -0800)]
net-snmp: add early return when IPMask is unset
snmpd_access_HostIP_add would write unintended output to the
config file if the IPMask option is not specified. Add an early
return to prevent writing in that case.
This is a breaking change for configs where IPMask is unset.
Previously, an empty IPMask option would result in a malformed
directive containing a trailing slash with no guaranteed newline,
the exact form of which depended on the values of other options.
Now, no directive is written.
Eric McDonald [Sat, 7 Mar 2026 21:51:25 +0000 (13:51 -0800)]
net-snmp: add early return when HostIP is unset
snmpd_access_HostIP_add would write unintended output to the
config file if the HostIP option is not specified. Add an early
return to prevent writing in that case.
This is a breaking change for configs where HostIP is unset.
Previously, an empty HostIP option would result in a malformed
directive containing a bare /mask with no guaranteed newline, the
exact form of which depended on the values of other options.
Now, no directive is written.
git.99rst.org / openwrt-packages.git / log