From 1f285825919cd4eea23bf0c3ddf09b56f3526004 Mon Sep 17 00:00:00 2001 From: apcameron Date: Sun, 8 Aug 2021 20:25:12 -0500 Subject: [PATCH] openwrt: bump version to 19.07.08 to address security fixes Security fixes Fix FragAttacks (fragmentation and aggregation attacks) vulnerabilities in cfg80211, mac80211, ath10k and ath10k-ct We are not sure if some closed source firmware files are still affected by these problems. Security Advisory 2021-08-01-1 - XSS via missing input validation of host names displayed (CVE-2021-32019) Security Advisory 2021-08-01-2 - Stored XSS in hostname UCI variable (CVE-2021-33425) Security Advisory 2021-08-01-3 - luci-app-ddns: Multiple authenticated RCEs (CVE-2021-28961) Various security fixes in packages --- openwrt.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openwrt.mk b/openwrt.mk index 2cd49fea..8bb1e60e 100644 --- a/openwrt.mk +++ b/openwrt.mk @@ -2,5 +2,5 @@ OPENWRT_SRC=https://github.com/openwrt/openwrt.git # what branch, tag or commit in this repo? -OPENWRT_COMMIT=v19.07.7 +OPENWRT_COMMIT=v19.07.8