OpenWrt 25.12.5 release plan

[Hauke Mehrtens]

Hi,

We got some reports about security problems in our software in the last 
month. Some of the fixes are already in the main branch and I created 
PRs to 25.12 for most of them. I am waiting for the odhcpd fixes from David.

I merged some fixes into the main branch already, but did not disclose 
the advisory yet. The fixes will go to 25.12 and 24.10 in the next days.

Instead of extracting separate patches I would like to update most of 
the OpneWrt components to the most recent versions from the main branch. 
Most of them only have fixes and no new features. See the open PRs for 
details. I will also add the patches for odhcpd and odhcp6c.

I would tag 25.12.5 beginning of next week.

Any objections to this plan?

Open 25.12 PRs:
https://github.com/openwrt/openwrt/pulls?q=is%3Apr+sort%3Aupdated-desc+is%3Aopen+label%3Arelease%2F25.12

I will only add the important patches to 24.10. People should upgrade to 
25.12 to get the full set.

What is the status of the package and luci feed? I directed some 
reporters to these feeds with security issues. Please have a look at the 
github security advisories:
https://github.com/openwrt/luci/security/advisories
https://github.com/openwrt/packages/security/advisories

Hauke