luci/applications/luci-app-advanced-reboot/tests/01_error_handling, branch masterLua Configuration Interface (mirror)https://git.openwrt.org/project/luci/atom?h=master2026-06-16T22:14:51Zluci-app-advanced-reboot: update to 1.1.2-62026-06-16T22:14:51ZStan Grishin2026-06-15T19:41:25Zurn:sha1:f85102548ee8325bfd581a0327b210b5f7670829
Update to 1.1.2-6. The headline change is a security fix
for GHSA-vj96-f37g-37f6.
- Security (GHSA-vj96-f37g-37f6, high): the previous read ACL granted
file.exec on /bin/sh (and dd, mount, sed, fw_setenv, etc.), so a user
delegated read-only access to this app could execute arbitrary
commands as root. Device-info gathering is now handled server-side in
the ucode rpcd backend, the broad file-exec grants are removed, and
the privileged actions(boot_partition, system reboot, poweroff) are
moved into a dedicated write block.
- New device support: Linksys EA7500v3, Linksys MX6200 (with a device
helper script), and Zyxel WSM20.
- Tests: added a ucode test suite (error handling, obtain_device_info,
and boot_partition) with a mock fs layer and a runner.
- Build: dropped the jq/host build dependency. Build/Prepare now merges
the per-device JSON files into devices.json with printf/cat, so the
merged file is no longer committed and the separate install hook is
gone.
- Maintenance: project moved to the mossdef-org org; melmac.ca URLs
updated to mossdef.org across the Makefile, README, and LuCI view.
Signed-off-by: Stan Grishin <stangri@melmac.ca>