3 ms·
As I linked above, introduced Feb 2017 found Jan 2020 https://openwrt.org/advisory/2020-01-31-1 https://openwrt.org/advisory/2020-01-31-1 A bug in the package
by outsomnia 6y ago
As I linked above, introduced Feb 2017 found Jan 2020
https://openwrt.org/advisory/2020-01-31-1 https://openwrt.org/advisory/2020-01-31-1
A bug in the package list parse logic of OpenWrt's opkg fork caused the package manager to ignore SHA-256 checksums embedded in the signed repository index, effectively bypassing integrity checking of downloaded .ipk artifacts.