Hey Hauke, thanks for taking care. If possible please have merge this PR[1] to improve the reproducibility.
Thanks, Paul [1]: https://github.com/openwrt/openwrt/pull/23846 > On 17. Jun 2026, at 01:52, Hauke Mehrtens <[email protected]> wrote: > > Hi, > > We got some reports about security problems in our software in the last > month. Some of the fixes are already in the main branch and I created PRs to > 25.12 for most of them. I am waiting for the odhcpd fixes from David. > > I merged some fixes into the main branch already, but did not disclose the > advisory yet. The fixes will go to 25.12 and 24.10 in the next days. > > Instead of extracting separate patches I would like to update most of the > OpneWrt components to the most recent versions from the main branch. Most of > them only have fixes and no new features. See the open PRs for details. I > will also add the patches for odhcpd and odhcp6c. > > I would tag 25.12.5 beginning of next week. > > Any objections to this plan? > > Open 25.12 PRs: > https://github.com/openwrt/openwrt/pulls?q=is%3Apr+sort%3Aupdated-desc+is%3Aopen+label%3Arelease%2F25.12 > > I will only add the important patches to 24.10. People should upgrade to > 25.12 to get the full set. > > What is the status of the package and luci feed? I directed some reporters to > these feeds with security issues. Please have a look at the github security > advisories: > https://github.com/openwrt/luci/security/advisories > https://github.com/openwrt/packages/security/advisories > > Hauke > > _______________________________________________ > openwrt-devel mailing list > [email protected] > https://lists.openwrt.org/mailman/listinfo/openwrt-devel _______________________________________________ openwrt-devel mailing list [email protected] https://lists.openwrt.org/mailman/listinfo/openwrt-devel
