9287454eee
This fixes the following security isseus with CVE numbers: CVE-2026-55614: GHSA-mcfg-c4r7-pjpf — case-sensitive Transfer-Encoding matching CVE-2026-55612: GHSA-p55c-rmhc-qfm5 — invalid chunk-length state reset CVE-2026-55613: GHSA-wgwp-64hh-f52p — ubus POST body parse-error desync The branch also carries hardening with no CVE: one-byte overflow in uh_urldecode, off-by-one OOB read in uh_b64decode, constant-time password compare, $p$ crypt-hash handling. Link: https://github.com/openwrt/openwrt/pull/24259 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit f68fa732873c280f290f16aef32b3240c790b390) |
||
|---|---|---|
| .. | ||
| config | ||
| ipv6 | ||
| services | ||
| utils | ||