Hauke Mehrtens 029fa04f50 odhcpd: cherry pick patches from main ... CVE-2026-53918: Use-after-free (dangling first lease pointer) CVE-2026-53920: Stack memory disclosure via truncated IA_NA/IA_PD option (GHSA-p769-5v73-pc4f) CVE-2026-53921: Out-of-bounds write in build_ia (stack overflow in IA reply serialization) CVE-2026-53922: Integer/size_t underflow DoS in dhcpv6_ia_handle_IAs GHSA-hhmc-92hw-535f: odhcpd/LuCI stored XSS — unauth DHCPv6 client injects lease-file lines via crafted FQDN TOB-OWRT-5: Trail of Bits audit finding (snprintf return handling) There's also an unassigned NDP hop-limit spoofing fix, CVSS 5.4, that IS included: ndp: enforce RFC4861 §7.1.1 hop-limit. Link: https://github.com/openwrt/openwrt/pull/24184 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 67c5b71d77e5277dc7f364238588d8e37e9a3ffa)		2026-08-18 11:40:42 +01:00
..
bridger	bridger: update to Git HEAD (2024-04-22)	2024-04-22 11:02:52 +02:00
dnsmasq	backport: update dnsmasq to v2.93 from master	2026-08-18 11:40:41 +01:00
dropbear	dropbear: backport some security fixes from 2026.90	2026-08-18 11:40:42 +01:00
ead	ead: Increase PKG_RELEASE	2026-08-18 11:40:42 +01:00
hostapd	hostapd: fix security advisory 2026-1	2026-08-18 11:40:42 +01:00
ipset-dns	treewide: update PKG_MIRROR_HASH to zst	2024-04-06 11:24:18 +02:00
lldpd	lldpd: enable hardware inventory information (TLV) management	2025-06-08 21:25:07 +02:00
odhcpd	odhcpd: cherry pick patches from main	2026-08-18 11:40:42 +01:00
omcproxy	omcproxy: update to latest version	2025-02-27 20:12:15 +01:00
ppp	ppp: add reqprefix norelease ac_mac	2026-07-09 10:57:34 +01:00
relayd	treewide: update PKG_MIRROR_HASH to zst	2024-04-06 11:24:18 +02:00
uhttpd	uhttpd: cherry pick patches from main	2026-08-18 11:40:42 +01:00
umdns	umdns: update to Git HEAD (2026-06-16)	2026-08-18 11:40:42 +01:00
unetd	unetd: update to Git HEAD (2025-03-09)	2025-03-16 18:53:59 +01:00
ustp	ustp: update to Git HEAD (2023-05-29)	2024-04-27 11:40:04 +02:00