Commit Graph

5623 Commits

Author SHA1 Message Date
Hannu Nyman b75749caab Revert "libfastjson: add missing runtime dependency on libm"
This reverts commit d114f46db1.

Apparently the libm does not exist as a package, so the commit is wrong.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2026-05-05 22:23:50 +03:00
Josef Schlehofer cba772d955 gots_engine: fix PKG_MIRROR_HASH
It was discovered by CI/CD that it is no longer valid.

Fixes:
```
2026-04-29T13:04:58.0170130Z SHELL= flock /builder/tmp/.gost_engine-3.0.3.tar.zst.flock -c '  	/builder/scripts/download.pl "/builder/dl" "gost_engine-3.0.3.tar.zst" "ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" "" || (  /builder/scripts/dl_github_archive.py --dl-dir="/builder/dl" --url="https://github.com/gost-engine/engine" --version="v3.0.3" --subdir="gost_engine-3.0.3" --source="gost_engine-3.0.3.tar.zst" --hash="ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" --submodules  || ( 	echo "Checking out files from the git repository..."; mkdir -p /builder/tmp/dl && cd /builder/tmp/dl && rm -rf gost_engine-3.0.3 && [ \! -d gost_engine-3.0.3 ] && git clone  https://github.com/gost-engine/engine gost_engine-3.0.3 && (cd gost_engine-3.0.3 && git checkout v3.0.3) && export TAR_TIMESTAMP=`cd gost_engine-3.0.3 && git log -1 --no-show-signature --format='\''@%ct'\''` && echo "Generating formal git archive (apply .gitattributes rules)" && (cd gost_engine-3.0.3 && git config core.abbrev 8 && git archive --format=tar HEAD --output=../gost_engine-3.0.3.tar.git) &&  tar --numeric-owner --owner=0 --group=0 --ignore-failed-read -C gost_engine-3.0.3 -f gost_engine-3.0.3.tar.git -r .git .gitmodules 2>/dev/null  && rm -rf gost_engine-3.0.3 && mkdir gost_engine-3.0.3 && tar -C gost_engine-3.0.3 -xf gost_engine-3.0.3.tar.git && (cd gost_engine-3.0.3 && git submodule update --init --recursive --  && rm -rf .git .gitmodules) && echo "Packing checkout..." && 	tar --numeric-owner --owner=0 --group=0 --mode=a-s --sort=name ${TAR_TIMESTAMP:+--mtime="$TAR_TIMESTAMP"} -c gost_engine-3.0.3 | 	zstd -T0 --ultra -20 -c > /builder/tmp/dl/gost_engine-3.0.3.tar.zst && mv /builder/tmp/dl/gost_engine-3.0.3.tar.zst /builder/dl/ && rm -rf gost_engine-3.0.3; );  )  && ( file_hash="$(/builder/staging_dir/host/bin/mkhash sha256 "/builder/dl/gost_engine-3.0.3.tar.zst")"; [ "$file_hash" = "ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" ] || [ "ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" = "skip" ] || { echo "Hash mismatch for file gost_engine-3.0.3.tar.zst: expected ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88, got $file_hash"; false; }; )    '
2026-04-29T13:04:58.0559677Z + curl -f --connect-timeout 5 --retry 3 --location https://sources.cdn.openwrt.org/gost_engine-3.0.3.tar.zst
2026-04-29T13:04:58.0616240Z   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
2026-04-29T13:04:58.0616964Z                                  Dload  Upload   Total   Spent    Left  Speed
2026-04-29T13:04:58.0617618Z
2026-04-29T13:04:58.1364520Z   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
2026-04-29T13:04:58.1365467Z 100  977k  100  977k    0     0  12.8M      0 --:--:-- --:--:-- --:--:-- 12.8M
2026-04-29T13:04:58.1453386Z Hash of the downloaded file does not match (file: b3a6701cd97e4db4f3e0f4b356c991075c6157dd3941d34851c8f36baa1d2721, requested: ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88) - deleting download.
```

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-05-05 09:19:19 +02:00
Alexandru Ardelean d2b2f5952d alsa-ucm-conf: update to 1.2.15.3
Changelog:
- Add UCM profiles for DualSense PS5 controller and multiple Qualcomm
  platforms
- Improve USB audio device handling and HDA initialization patterns
- Enhance phantom jack detection and optional headphone output handling
- Add support for Steinberg audio devices and new MediaTek SoC configs

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-05 08:54:20 +03:00
Alexandru Ardelean 58369e0a5d libssh: update to 0.12.0
Changelog:
- Add quantum-resistant hybrid key exchange (sntrup761x25519, mlkem
  variants)
- Add FIDO/U2F key support with libfido2 integration
- Add host-bound public key authentication and GSSAPI key exchange
- Add sshsig signing support (e.g. for git commit signing)
- Fix SFTP reliability when status messages lack error data
- Security fixes: path traversal in SCP and buffer management issues

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-05 08:54:20 +03:00
Alexandru Ardelean ba4135ff29 json-glib: update to 1.10.8
Changelog:
- Add strict JSON parsing mode (JsonParser:strict property)
- Add JsonGenerator.take_root() for improved generator handling
- Support parsing of files larger than 4 GB
- Add single-quoted strings support in non-strict mode (v1.10.6)
- Fix malformed Unicode error handling and parser conformance

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-05 08:54:20 +03:00
Alexandru Ardelean ea8faf5883 libidn2: update to 2.3.8
Changelog:
- Update to Unicode 15.1.0 standard with U+19DA marked DISALLOWED
- Switch from gnulib submodule to GNULIB_REVISION for build management
- Fix uninitialized memory and compiler warnings
- Improve reproducibility and cross-platform build compatibility

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-05 08:54:20 +03:00
Alexandru Ardelean 6895269702 libidn: update to 1.43
Changelog:
- Fix uninitialized value bug in idna_to_unicode_4z4z on malloc failure
- Restore Unicode table generation scripts for modern Perl compatibility
- Fix Windows/musl compatibility for version checking
- Achieve reproducible builds across tested platforms

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-05 08:54:20 +03:00
Alexandru Ardelean a68f79411e ngtcp2: update to 1.22.1
Changelog:
- Add Generic Segmentation Offload (GSO) packet aggregation via
  ngtcp2_conn_write_aggregate_pkt
- Fix CVE-2026-40170 (v1.22.1)
- Refine BBR congestion control and header protection cipher
- Improve error handling across the codebase

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-05 08:54:20 +03:00
Alexandru Ardelean 8a22595f49 nghttp3: update to 1.15.0
Changelog:
- Client-side stream scheduling is now incremental by default
- Add nghttp3_recv_settings2 API
- Add glitch protection and time-based features (v1.12.0)
- Optimize QPACK Huffman decoding performance
- Fix ENABLE_CONNECT_PROTOCOL handling

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-05 08:54:20 +03:00
Alexandru Ardelean 177daf61d4 boost: build libquadmath only on some archs
libquadmath is only packaged for x86 and powerpc targets in OpenWrt.
Declaring it as an unconditional runtime dependency of boost-charconv
causes apk installation failure on all other architectures (e.g.
i386, arm, mips) with "libquadmath (no such package)".

Guard the dependency with an ARCH filter so it is only pulled in on
platforms where the package actually exists.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>

boost: add x86 to libquadmath arch conditional in boost-charconv

libquadmath is available on x86 (i386) in addition to x86_64 and
powerpc variants. Include it in the filter so boost-charconv gets
the correct dependency on 32-bit x86 targets.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-03 20:59:28 +03:00
Alexandru Ardelean c3edf23676 libre2: update to 2025-11-05
Bump to latest upstream snapshot (2025-11-05). re2 uses date-based
versioning from git. This brings roughly two years of upstream
improvements including performance optimisations, bug fixes, and
C++17/20 compatibility improvements.

Reference:
  https://github.com/google/re2/releases/tag/2025-11-05

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-03 17:48:47 +03:00
Ernestas Kulik 1935316a49 libgpiod: add python-setuptools host build dep
If python3-gpiod is enabled and the python-setuptools host package is
missing, the setuptools.build_meta import will cause a build failure.
Fix this by adding a conditional build dependency.

Signed-off-by: Ernestas Kulik <ernestas@baltic.engineering>
2026-05-03 14:30:00 +03:00
Ernestas Kulik 2fc1a5deeb libgpiod: make Python bindings optional
The python3-light dependency gets lugged even with the package disabled,
so this commit makes python3-light a conditional dependency, similar to
gensio in 0c245fda70.

Signed-off-by: Ernestas Kulik <ernestas.k@iconn-networks.com>
2026-05-03 14:30:00 +03:00
micpf d114f46db1 libfastjson: add missing runtime dependency on libm
libfastjson uses modf() from libm but does not declare the dependency.
With BIND_NOW (CONFIG_PKG_RELRO_FULL), this can cause the dynamic linker
to process libfastjson's relocations before libm's GOT is set up,
triggering a crash in libm's IFUNC resolver on PowerPC.

Fixes: https://github.com/openwrt/packages/issues/29160
Signed-off-by: micpf <micpf@westermo.com>
2026-05-02 18:11:36 +03:00
Alexandru Ardelean 20873ba57e glib2: split package into separate libraries
Existing package contains five libraries, some of which are > 1MB. Allow
packages which depend on only some of them to only pull in the ones they
need by splitting this package into finer-grained packages. Transition
can be done piecemeal as depending on glib2 will still pull in all the
libraries.

The original split commit (6bb0d6bd2) had a typo: the glib2 meta-package
used 'DEPENDS:+glib2-gthread +glib2-gio' (missing '='), which caused
the meta-package to have no effective dependencies. This meant packages
declaring '+glib2' did not get the sub-packages installed, causing APK
dependency checks to fail for all glib2 libraries across ~60 packages.

This re-applies the split with 'DEPENDS:=+glib2-gthread +glib2-gio'
(correct assignment syntax), so the meta-package properly pulls in all
sub-packages for consumers that still declare '+glib2'.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-01 07:54:50 +03:00
Josef Schlehofer 537c2a631d treewide: avoid deref symlinks when installing .so
Deduplicate files

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-04-27 11:48:13 +02:00
Josef Schlehofer 9e3d098382 Revert "glib2: split package into separate libraries"
It causes multiple failures, which I noticed on OpenWrt buildbots [1]
for several packages [2].

It appears this change wasn't fully tested against a complete build
with all packages. Reverting for now until the issue is resolved.

[1] https://downloads.openwrt.org/snapshots/faillogs/
[2] https://github.com/openwrt/packages/pull/22544

This reverts commit 6bb0d6bd2a.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-04-27 09:24:06 +02:00
Peter Denison 6bb0d6bd2a glib2: split package into separate libraries
Existing package contains five libraries, some of which are > 1MB. Allow
packages which depend on only some of them to only pull in the ones they
need by splitting this package into finer-grained packages. Transition
can be done piecemeal as depending on glib2 will still pull in all the
libraries.

Signed-off-by: Peter Denison <openwrt@marshadder.org>
2026-04-26 14:11:40 -06:00
Matthew Cather fdcb89b61e valkey: add new package
Valkey is a community fork of the  key-value database Redis.
It is a drop in replacement to Redis so most of the files are
derived from their Redis equivalent.

Co-authored-by: George Sapkin <george@sapk.in>
Signed-off-by: Matthew Cather <mattbob4@gmail.com>
2026-04-24 06:51:29 +03:00
Philip Prindeville d3d6900ef6 libjemalloc: update to 5.3.1
Routine version bump.  Lots of bugfixes and optimizations.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2026-04-19 19:09:28 -06:00
Alexandru Ardelean 8d3c004213 treewide: set me where PKG_MAINTAINER empty
Seems a lot of packages are just getting abandoned by people.
Will pick these up and see them through.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-16 21:48:36 +03:00
Lu Dai 1c973fff92 glib2: fix builds by explicitly disabling libelf
The libelf Meson option defaults to auto. Since commit 71b7b44789 ("glib2: do not set default meson options"),
glib2 can enable libelf support nondeterministically depending on whether libelf.pc is visible during configure.

On failing builders Meson reports:

    Run-time dependency libelf found: YES 0.192

 and gresource later fails with:

    ../gio/gresource-tool.c:34:10: fatal error: libelf.h: No such file or directory

On passing builders we see:

    Run-time dependency libelf found: NO (tried pkgconfig and cmake)

So explicitly disable libelf again to restore deterministic builds.

Fixes: #23459
Fixes: 71b7b44789 ("glib2: do not set default meson options")
Signed-off-by: Lu Dai <lu.dai@mind.be>
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2026-04-16 12:42:24 +02:00
George Sapkin 7e99a65d72 sqlite3: bump to 3.53.0
Changes: https://sqlite.org/releaselog/3_53_0.html
Signed-off-by: George Sapkin <george@sapk.in>
2026-04-12 19:15:49 +03:00
Michał Kępień aa102d6ba8 lmdb: update to 0.9.35
Changelog: https://git.openldap.org/openldap/openldap/-/raw/LMDB_0.9.35/libraries/liblmdb/CHANGES

Signed-off-by: Michał Kępień <michal@isc.org>
2026-04-03 22:21:29 +03:00
Michał Kępień 8aa78ebebf lmdb: set SONAME for liblmdb.so
The LMDB shared library (liblmdb.so) does not currently have a SONAME
set, which can cause issues when linking against it.  Specifically, when
an object is linked against the library using its absolute path (for
example, in Meson builds), that path (as seen in the build environment)
is stored in the resulting object's DT_NEEDED entry.  This can prevent
the library from being found during runtime linking.  Set the SONAME to
liblmdb.so to ensure proper runtime linking.

Signed-off-by: Michał Kępień <michal@isc.org>
2026-04-03 09:38:58 +03:00
Alexandru Ardelean 35d9eadb5b treewide: remove Jan Pavlinec as maintainer
Jan Pavlinec <jan.pavlinec1@gmail.com> is no longer maintaining
these packages. Remove him from the PKG_MAINTAINER field across
all affected packages.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-29 09:00:28 +03:00
Luiz Angelo Daros de Luca b78b67fdf1 libvpx: update to 1.16.0
Update libvpx to v1.16.0 "Xenonetta Duck". Highlights include:
- Arm SVE2 and Neon optimizations for 12-tap filters.
- AVX512 implementations for Sum of Absolute Differences (SAD).
- Support for per-frame and per-spatial-layer PSNR calculation.
- ABI incompatible with the previous release.

Includes changes from intermediate releases:
- v1.15.2: Fixes CVE-2025-5283 (bug webm:413411335).
- v1.15.1: SO major version bump and changelog corrections.
- v1.15.0: New codec control for key frame filtering and RTC improvements.

Changelog: https://github.com/webmproject/libvpx/blob/v1.16.0/CHANGELOG
Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2026-03-24 08:58:39 +01:00
Alexandru Ardelean 63ffe5d5a3 libwebp: bump to 1.6.0
Changelog since 1.5.0:
- Binary compatible release
- New API: WebPValidateDecoderConfig
- AVX2/SSE2 optimizations and lossless compression improvements
- Fix -mt multi-threading consistency issue
- cwebp: -resize can be restricted with -resize_mode

Full changelog: https://chromium.googlesource.com/webm/libwebp/+/refs/tags/v1.6.0/ChangeLog

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-23 20:23:25 +02:00
Alexandru Ardelean 76786d2439 newt: bump to 0.52.25
Changes since 0.52.24:
- Bug fixes and maintenance updates

Need to revert a patch in the build, since it doesn't work for
cross-compilation.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-23 18:52:42 +02:00
Tianling Shen f35120face libtorrent-rasterbar: add boost as dependency for python package
`boost-python3` will be only selectable after `boost` is selected,
so add `boost` to dependencies as well.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-03-23 20:11:53 +08:00
John Audia fa477102eb libdaq3: update to 3.0.27
Release notes: https://github.com/snort3/libdaq/releases/tag/v3.0.27

Signed-off-by: John Audia <therealgraysky@proton.me>
2026-03-23 03:42:18 +01:00
Martin Neumann cfec2b08c8 libqmi: update to v1.38.0
* See changes (was v1.36.0): https://gitlab.freedesktop.org/
  mobile-broadband/libqmi/-/blob/main/NEWS

Signed-off-by: Martin Neumann <mneumann@teco.edu>
2026-03-22 17:52:26 +02:00
Hirokazu MORIKAWA 65513fab59 icu: bump to 78.3
Unicode® ICU 78.3 is a maintenance update on top of ICU 78 and 78.2, mostly for the CLDR 48.2 bug fixes. In addition, it fixes a C++ code point iterator bug, and updates to timezone data 2026a.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2026-03-20 18:16:10 +02:00
Fabrice Fontaine a778d8949b libs/jose: assign PKG_CPE_ID
cpe:/a:latchset:jose is the correct CPE ID for jose:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:latchset:jose

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-19 14:35:59 +02:00
Fabrice Fontaine 1483d9a4d8 libs/libesmtp: assign PKG_CPE_ID
cpe:/a:libesmtp_project:libesmtp is the correct CPE ID for libesmtp:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libesmtp_project:libesmtp

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-19 14:33:25 +02:00
Fabrice Fontaine f3c05de85e libs/libndpi: assign PKG_CPE_ID
cpe:/a:ntop:ndpi is the correct CPE ID for libndpi:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ntop:ndpi

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-19 14:33:01 +02:00
Fabrice Fontaine ccd3edfabf libs/libirecovery: assign PKG_CPE_ID
cpe:/a:libimobiledevice:libirecovery is the correct CPE ID for libirecovery:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:libirecovery

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-18 10:37:46 +01:00
Fabrice Fontaine 9bde150c24 libs/libimobiledevice: assign PKG_CPE_ID
cpe:/a:libimobiledevice:libimobiledevice is the correct CPE ID for libimobiledevice:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libimobiledevice:libimobiledevice

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-18 10:36:52 +01:00
Fabrice Fontaine 555db78d4c libs/libedit: assign PKG_CPE_ID
cpe:/a:libedit_project:libedit is the correct CPE ID for libedit:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libedit_project:libedit

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-18 09:19:32 +01:00
Fabrice Fontaine 48bbf8c4c2 libs/gperftools: assign PKG_CPE_ID
cpe:/a:gperftools_project:gperftools is the correct CPE ID for gperftools:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:gperftools_project:gperftools

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-18 09:09:24 +01:00
Fabrice Fontaine 0ba436e642 libs/libsoxr: drop PKG_CPE_ID
cpe:/a:sox:sox is not a correct CPE ID for libsoxr:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:sox:sox

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-18 09:01:30 +01:00
Fabrice Fontaine 36ddf0bfb7 libs/openpgm: drop PKG_CPE_ID
cpe:/a:openpgm:openpgm is not a correct CPE ID for openpgm:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:openpgm:openpgm

Fixes: 20f05f8e58 (openpgm: Add Pragmatic General Multicast library)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-18 09:00:27 +01:00
Fabrice Fontaine ca0710c714 libs/libxerces-c: assign PKG_CPE_ID
cpe:/a:apache:xerces-c\+\+ is the correct CPE ID for libxerces-c:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe%3A2.3%3Aa%3Aapache%3Axerces-c%5C%2B%5C%2B

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:24:48 +02:00
Fabrice Fontaine b527061c2d libs/linenoise: assign PKG_CPE_ID
cpe:/a:antirez:linenoise is the correct CPE ID for linenoise:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:antirez:linenoise

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:22:21 +02:00
Fabrice Fontaine cd5e19a043 libs/libulfius: assign PKG_CPE_ID
cpe:/a:ulfius_project:ulfius is the correct CPE ID for libulfius:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ulfius_project:ulfius

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:21:54 +02:00
Fabrice Fontaine 9bf5837536 libs/libtheora: assign PKG_CPE_ID
cpe:/a:xiph:theora is the correct CPE ID for libtheora:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:xiph:theora

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:21:40 +02:00
Fabrice Fontaine cd7ae5df23 libs/qrencode: assign PKG_CPE_ID
cpe:/a:qrencode_project:qrencode is the correct CPE ID for qrencode:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:qrencode_project:qrencode

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:20:28 +02:00
Fabrice Fontaine 050e5f4a32 libs/libwebp: assign PKG_CPE_ID
cpe:/a:webmproject:libwebp is the correct CPE ID for libwebp:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:webmproject:libwebp

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:16:25 +02:00
Fabrice Fontaine 8876699776 libs/libexif: fix PKG_CPE_ID
cpe:/a:libexif_project:libexif is the correct CPE ID for libexif:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:libexif_project:libexif

Fixes: 299e5b0a9b (treewide: add PKG_CPE_ID for better cvescanner coverage)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:12:48 +02:00
Fabrice Fontaine 8fad4f4942 libs/iniparser: fix PKG_CPE_ID
cpe:/a:ndevilla:iniparser is not a correct CPE ID for iniparser:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ndevilla:iniparser

Fixes: 456d8ff5d5 (iniparser: library for parsing of ini files in C)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-15 09:10:45 +02:00