mirror of https://github.com/openwrt/packages.git
15a3b19e0a
This is a security release.
Notable Changes
(CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
(CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
(CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
(CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
(CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
(CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)
(CVE-2026-111497) deps: brotli: cherry-pick 0ed4268a4401abcb44720963 (Evgenii Kliuchnikov)
crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
deps: update timezone to 2026e (Node.js GitHub Bot)
deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
deps: update sqlite to 3.53.4 (Node.js GitHub Bot)
deps: update undici to 6.29.1 (Node.js GitHub Bot)
Signed-off-by: Paweł Owoc <frut3k7@gmail.com>
|
||
|---|---|---|
| .. | ||
| patches | ||
| Makefile | ||