mirror of
https://github.com/openwrt/packages.git
synced 2026-10-12 03:47:10 +04:00
1.30.4: - Heap buffer overflow with the map directive and regex matching (CVE-2026-42533). - Uninitialized memory access with unnamed regex captures and the slice directive or background cache update (CVE-2026-60005). - Use-after-free in ngx_http_ssi_filter_module with a crafted proxied backend response (CVE-2026-56434). 1.30.5: - Heap buffer overflow with HTTP/3 and OpenSSL 3.5.0 and earlier (CVE-2026-90439). All patches apply without changes. Changelog: https://nginx.org/en/CHANGES-1.30 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>