On 6/18/26 09:09, Baptiste Jonglez wrote:
On 17-06-26, Hauke Mehrtens wrote:
Hi,
We got some reports about security problems in our software in the last
month. Some of the fixes are already in the main branch and I created PRs to
25.12 for most of them. I am waiting for the odhcpd fixes from David.
I merged some fixes into the main branch already, but did not disclose the
advisory yet. The fixes will go to 25.12 and 24.10 in the next days.
Thanks for the work!
Instead of extracting separate patches I would like to update most of the
OpneWrt components to the most recent versions from the main branch. Most of
them only have fixes and no new features. See the open PRs for details. I
will also add the patches for odhcpd and odhcp6c.
Most of our components have openwrt-25.12 and openwrt-24.10 branches, it
seems risky and hard to understand to got back to main branch for stable
releases.
Most of our components do not have it for 25.12, I saw this only for
odhcpd and odhcp6c. For odhcp6c the branch matches master.
I would tag 25.12.5 beginning of next week.
Any objections to this plan?
Minor caveat: we are almost out of space on the main download server.
Each minor release takes 80 GB, and we have only 240 GB left. So it's OK
for these two releases, but it might block new releases after that.
We have been talking about cleaning up old releases but it's hard to do
without breaking downloads and mirrors, discussion started here:
https://lists.openwrt.org/pipermail/openwrt-adm/2026-January/002910.html
In the short term, I will ask the provider if they can allocate more disk space.
Baptiste
Thanks for the warning. With such a big update we should be prepared to
do an other fix something breaks. It would be good to always have enough
space for 3 additional release.
Hauke
_______________________________________________
openwrt-devel mailing list
[email protected]
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
