Commit Graph

35806 Commits

Author SHA1 Message Date
Fabrice Fontaine
4601f16354 utils/usbmuxd: drop PKG_CPE_ID
cpe:/a:libimobiledevice:usbmuxd is not a correct CPE ID for usbmuxd:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:usbmuxd

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-18 07:33:03 +01:00
Stan Grishin
a2f6928089 pbr: update to 1.2.2-r12
* fix: detect/support point-to-point interfaces in dynamic routing mode
* fix: avoid IPv4/IPv6 address collisions on Tor policies
* fix: do not set triggers on boot when service is disabled in config
* fix: more robust forward stop/enable

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2026-03-17 11:58:22 -07:00
Rosen Penev
5fc21a109b dante: fix usaage with musl
Need to disable this function as it's unusable on musl.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2026-03-15 22:06:28 +02:00
Florian Wagner
ce52e2ec21 chrony: make chrony-hotplug more reliable
At startup there's a race situation where "chronyc waitsync" (and thus
chrony-hotplug) will exit right away because it can't bind to loopback.

This change tries quite hard to make chrony-hotplug wait for loopback to
come up before running chronyc.

Fixes #28434.

Signed-off-by: Florian Wagner <florian@wagner-flo.de>
2026-03-15 20:40:39 +02:00
Dirk Brenken
27c44bf735 adblock: release 4.5.3-1
* refine the domain validator regarding prefix handling, esp.
  relevant for ABP-syntax
* adapted the adguard feed to make use of the new prefix handling
* LuCI: various fixes & optimizations

Signed-off-by: Dirk Brenken <dev@brenken.org>
2026-03-15 19:17:34 +01:00
Fabrice Fontaine
d7ab0cab42 net/davfs2: fix PKG_CPE_ID
cpe:/a:werner_baumann:davfs2 is the correct CPE ID for davfs2:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:werner_baumann:davfs2

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 19:48:28 +02:00
Dirk Brenken
e724274907 banip: release 1.8.1-1
* the debug mode now captures internal error output in a dedicated log file,
  located by default in the banIP base directory as /tmp/ban_error.log
* replaced the non-functional recursive PID tree walk in f_rmpid with
  a correct iterative implementation
* added several IP validator improvements
* fixed a copy-paste error in f_report
* fixed a uninitialized variable in f_actual
* fixed missing token validation in banip.cgi
* various other minor improvement & fixes
* removed abandoned nixspam feed
* LuCI: various fixes & optimizations
* readme update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2026-03-15 18:18:04 +01:00
Fabrice Fontaine
a7f33871e9 python-pyopenssl: fix PKG_CPE_ID
cpe:/a:pyopenssl:pyopenssl is the correct CPE ID for python-pyopenssl:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pyopenssl:pyopenssl

Fixes: ceadbcbb64 (treewide: add PKG_CPE_ID for cvescanner)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 15:53:18 +02:00
Fabrice Fontaine
2e14244ef5 utils/opendoas: assign PKG_CPE_ID
cpe:/a:opendoas_project:opendoas is the correct CPE ID for opendoas:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:opendoas_project:opendoas

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 15:52:45 +02:00
Fabrice Fontaine
cc89bb5483 net/openfortivpn: assign PKG_CPE_ID
cpe:/a:openfortivpn_project:openfortivpn is the correct CPE ID for openfortivpn:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openfortivpn_project:openfortivpn

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 15:52:32 +02:00
dwardor
6b3c95cbd8 fail2ban: add host build deps to fix #28520
Adds the misssing build dependencies to remove the
"Cannot import 'setuptools.build_meta'" build error with 25.12.0-rc1 to 25.12.0-rc5

Signed-off-by: dwardor <benjamin.reveille@gmail.com>
2026-03-15 13:11:08 +02:00
Henri Osmankäämi
62a777cb76 i2csfp: update to the latest git HEAD
Enables eepromfix on modules that don't need password

Signed-off-by: Henri Osmankäämi <cg@jakorasia.info>
2026-03-15 11:39:55 +02:00
John Audia
38759fa14c nfs-kernel-server: update to 2.8.7
Changelog: https://www.kernel.org/pub/linux/utils/nfs-utils/2.8.7/2.8.7-Changelog

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-03-15 10:13:00 +02:00
Hannu Nyman
eb85b30011 openvpn: increment PKG_RELEASE by one
Increment PKG_RELEASE by one.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2026-03-15 09:28:52 +02:00
Fabrice Fontaine
a433330cfb net/smartdns: assign PKG_CPE_ID
cpe:/a:pymumu:smartdns is the correct CPE ID for smartdns:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:pymumu:smartdns

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:25:09 +02:00
Fabrice Fontaine
ca0710c714 libs/libxerces-c: assign PKG_CPE_ID
cpe:/a:apache:xerces-c\+\+ is the correct CPE ID for libxerces-c:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe%3A2.3%3Aa%3Aapache%3Axerces-c%5C%2B%5C%2B

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:24:48 +02:00
Fabrice Fontaine
c9d8e269e4 utils/miniflux: assign PKG_CPE_ID
cpe:/a:miniflux_project:miniflux is the correct CPE ID for miniflux:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:miniflux_project:miniflux

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:22:38 +02:00
Fabrice Fontaine
b527061c2d libs/linenoise: assign PKG_CPE_ID
cpe:/a:antirez:linenoise is the correct CPE ID for linenoise:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:antirez:linenoise

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:22:21 +02:00
Fabrice Fontaine
cd5e19a043 libs/libulfius: assign PKG_CPE_ID
cpe:/a:ulfius_project:ulfius is the correct CPE ID for libulfius:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ulfius_project:ulfius

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:21:54 +02:00
Fabrice Fontaine
9bf5837536 libs/libtheora: assign PKG_CPE_ID
cpe:/a:xiph:theora is the correct CPE ID for libtheora:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:xiph:theora

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:21:40 +02:00
Fabrice Fontaine
fc6cb08c64 mail/opendkim: assign PKG_CPE_ID
cpe:/a:opendkim:opendkim is the correct CPE ID for opendkim:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:opendkim:opendkim

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:21:15 +02:00
Fabrice Fontaine
61d9391610 utils/podman: assign PKG_CPE_ID
cpe:/a:podman_project:podman is the correct CPE ID for podman:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:podman_project:podman

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:20:49 +02:00
Fabrice Fontaine
cd7ae5df23 libs/qrencode: assign PKG_CPE_ID
cpe:/a:qrencode_project:qrencode is the correct CPE ID for qrencode:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:qrencode_project:qrencode

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:20:28 +02:00
Fabrice Fontaine
c929102763 multimedia/grilo: assign PKG_CPE_ID
cpe:/a:gnome:grilo is the correct CPE ID for grilo:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gnome:grilo

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:19:46 +02:00
Fabrice Fontaine
a041ff49b9 utils/dockerd: assign PKG_CPE_ID
cpe:/a:mobyproject:moby is the correct CPE ID for docker:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:mobyproject:moby

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:19:09 +02:00
Fabrice Fontaine
e8360bc4e1 sound/owntone: assign PKG_CPE_ID
cpe:/a:owntone:owntone_server is the correct CPE ID for owntone:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:owntone:owntone_server

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:17:21 +02:00
Fabrice Fontaine
a419dd3652 net/nanomq: assign PKG_CPE_ID
cpe:/a:emqx:nanomq is the correct CPE ID for nanomq:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:emqx:nanomq

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:17:01 +02:00
Fabrice Fontaine
a3a6d33672 net/mac-telnet: assign PKG_CPE_ID
cpe:/a:mac-telnet_project:mac-telnet is the correct CPE ID for mac-telnet:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:mac-telnet_project:mac-telnet

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:16:44 +02:00
Fabrice Fontaine
050e5f4a32 libs/libwebp: assign PKG_CPE_ID
cpe:/a:webmproject:libwebp is the correct CPE ID for libwebp:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:webmproject:libwebp

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:16:25 +02:00
Fabrice Fontaine
86e06fe350 utils/acpid: fix PKG_CPE_ID
cpe:/a:tedfelix:acpid2 is the correct CPE ID for acpid:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:tedfelix:acpid2

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:15:43 +02:00
Fabrice Fontaine
2c70cc8a6d net/ngircd: fix PKG_CPE_ID
cpe:/a:barton:ngircd is the correct CPE ID for ngircd:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:barton:ngircd

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:15:21 +02:00
Fabrice Fontaine
fc3af591d0 net/frr: fix PKG_CPE_ID
cpe:/a:frrouting:frrouting is the correct CPE ID for frr:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:frrouting:frrouting

Fixes: 5afe5c9031 (treewide: assign PKG_CPE_ID)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:15:08 +02:00
Fabrice Fontaine
73ac7c8608 net/dhcpcd: fix PKG_CPE_ID
cpe:/a:dhcpcd_project:dhcpcd is the correct CPE ID for dhcpcd:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:dhcpcd_project:dhcpcd

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:13:45 +02:00
Fabrice Fontaine
8876699776 libs/libexif: fix PKG_CPE_ID
cpe:/a:libexif_project:libexif is the correct CPE ID for libexif:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexif_project:libexif

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:12:48 +02:00
Fabrice Fontaine
3d661baf82 utils/minicom: fix PKG_CPE_ID
cpe:/a:minicom_project:minicom is the correct CPE ID for minicom:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:minicom_project:minicom

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:12:26 +02:00
Fabrice Fontaine
8fad4f4942 libs/iniparser: fix PKG_CPE_ID
cpe:/a:ndevilla:iniparser is not a correct CPE ID for iniparser:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ndevilla:iniparser

Fixes: 456d8ff5d5 (iniparser: library for parsing of ini files in C)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:10:45 +02:00
Fabrice Fontaine
881344798a net/rsync: fix PKG_CPE_ID
cpe:/a:samba:rsync is the correct CPE ID for rsync:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:samba:rsync

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:10:16 +02:00
Fabrice Fontaine
3924cc3af9 net/memcached: fix PKG_CPE_ID
cpe:/a:memcached:memcached is the correct CPE ID for memcached:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:memcached:memcached

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:09:50 +02:00
Fabrice Fontaine
fa203c818f lang/rust: assign PKG_CPE_ID
cpe:/a:rust-lang:rust is the correct CPE ID for rust:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:rust-lang:rust

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:08:57 +02:00
Alexandru Ardelean
c65017be6a python-mako: bump to 1.3.5
Changelog since 1.3.0:
- Fix escaped percent signs (%%) not rendering correctly when not at
  line beginnings (1.3.1/1.3.2)
- Add 'pass' statements to empty control blocks to prevent errors (1.3.3)
- Fix strict_undefined mode conflicts with comprehensions inside
  function definitions (1.3.3)
- Revert dictionary literal parsing changes that caused bracketed
  expression regressions (1.3.5)

Full changelog:
https://docs.makotemplates.org/en/latest/changelog.html

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-15 09:01:59 +02:00
Paul Donald
56453de58c openvpn: change tmp-dir to /tmp
This allows openvpn to create any temp files after
user or group change at exec time.

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2026-03-15 08:45:36 +02:00
Paul Donald
ef3ffde899 openvpn: change file/path types
move file and path type values to FILE type params
so they are better handled with quoting, in case
paths contain spaces.

Remove duplicate 'extra_certs'.

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2026-03-15 08:45:36 +02:00
Paul Donald
dc8198b960 openvpn: proto handler; write params to config file
writing the command line to a config file avoids
formatting pitfalls for the command line.

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2026-03-15 08:45:36 +02:00
Paul Donald
ea5daeae16 openvpn: proto handler; trim white-space from append
'append' inserts white-space by default (3rd parameter)

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2026-03-15 08:45:36 +02:00
Paul Donald
00471e0dc9 openvpn: shell proto script improvements
add mode server hook scripts hotplug handling

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2026-03-15 08:45:36 +02:00
Paul Donald
0d39f4ec8b openvpn: ucode hotplug script improvements
add mode server hook scripts hotplug handling

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2026-03-15 08:45:36 +02:00
Paul Donald
99a24f515a openvpn: hotplug script improvements
add mode server hook scripts hotplug handling

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2026-03-15 08:45:36 +02:00
Paul Donald
c0faf0714d openvpn: ucode proto script improvements
fix the pop() bug
write options to a config file in case argv length > 63

netifd has a hard limit of 64 argv entries for its ucode
proto.run_command whereby '--param' is one, and its
'option string' is two.

follow-up to affa96dc81

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2026-03-15 08:45:36 +02:00
Paul Donald
e8ae8b1a8f openvpn: sync with proto shell-script
add hotplug script handlers to ucode version

follow-up to 647b67e18b

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2026-03-15 08:45:36 +02:00
Paul Donald
ddb20d9880 openvpn: proto handler; handle user config file
Handle a user provided config file.

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
2026-03-15 08:45:36 +02:00