luci-app-advanced-reboot: update to 1.1.2-6
authorStan Grishin <redacted>
Mon, 15 Jun 2026 19:41:25 +0000 (19:41 +0000)
committerStan Grishin <redacted>
Tue, 16 Jun 2026 22:14:51 +0000 (15:14 -0700)
commitf85102548ee8325bfd581a0327b210b5f7670829
tree8c7f4f8d62dad7de2754847d5c4499b73995b4c2
parent208c01eabd5b470af21c2f1a641c5be5a7d53974
luci-app-advanced-reboot: update to 1.1.2-6

Update to 1.1.2-6. The headline change is a security fix
for GHSA-vj96-f37g-37f6.

- Security (GHSA-vj96-f37g-37f6, high): the previous read ACL granted
  file.exec on /bin/sh (and dd, mount, sed, fw_setenv, etc.), so a user
  delegated read-only access to this app could execute arbitrary
  commands as root. Device-info gathering is now handled server-side in
  the ucode rpcd backend, the broad file-exec grants are removed, and
  the privileged actions(boot_partition, system reboot, poweroff) are
  moved into a dedicated write block.
- New device support: Linksys EA7500v3, Linksys MX6200 (with a device
  helper script), and Zyxel WSM20.
- Tests: added a ucode test suite (error handling, obtain_device_info,
  and boot_partition) with a mock fs layer and a runner.
- Build: dropped the jq/host build dependency. Build/Prepare now merges
  the per-device JSON files into devices.json with printf/cat, so the
  merged file is no longer committed and the separate install hook is
  gone.
- Maintenance: project moved to the mossdef-org org; melmac.ca URLs
  updated to mossdef.org across the Makefile, README, and LuCI view.

Signed-off-by: Stan Grishin <redacted>
70 files changed:
applications/luci-app-advanced-reboot/Makefile
applications/luci-app-advanced-reboot/README.md
applications/luci-app-advanced-reboot/htdocs/luci-static/resources/view/system/advanced-reboot.js
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices.disabled/linksys-ea9500.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices.disabled/netgear-wac510.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices.disabled/xiaomi-ax3600.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices.disabled/xiaomi-ax9000.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices.json [deleted file]
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/_device_json_transform.jq [deleted file]
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/dlink-fgs1210-28.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-e4200v2-ea4500.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-e4200v2.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-e7350.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea3500.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea4500.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea6350v3.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea6350v4.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea7300v1.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea7300v2.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea7500v1.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea7500v2.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea7500v3.json [new file with mode: 0644]
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea8100v1.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea8100v2.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea8300.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-ea8500.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mr5500.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mr7350.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mr7500.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mr8300.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mr9000.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mx2000.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mx4200v1.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mx4200v2.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mx4300.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mx5300.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mx5500.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mx6200.json [new file with mode: 0644]
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-mx8500.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-spnmx56.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-whw01v1.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-whw03.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-whw03v2.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-wrt1200ac.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-wrt1900ac.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-wrt1900acs.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-wrt1900acv2.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-wrt3200acm.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/linksys-wrt32x.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/mercusys-mr90xv1.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/netgear-gs308t-v1.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/zyxel-nbg6817.json
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/devices/zyxel-wsm20.json [new file with mode: 0644]
applications/luci-app-advanced-reboot/root/usr/share/advanced-reboot/helpers/linksys-mx6200.sh [new file with mode: 0755]
applications/luci-app-advanced-reboot/root/usr/share/rpcd/acl.d/luci-app-advanced-reboot.json
applications/luci-app-advanced-reboot/root/usr/share/rpcd/ucode/luci.advanced-reboot
applications/luci-app-advanced-reboot/tests/01_error_handling/01_no_board_name [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/01_error_handling/02_no_device_match [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/01_error_handling/03_invalid_boot_arg [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/01_error_handling/04_partition_not_found [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/02_obtain_device_info/01_linksys_e7350 [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/02_obtain_device_info/02_zyxel_nbg6817 [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/02_obtain_device_info/03_zyxel_wsm20 [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/03_boot_partition/01_linksys_e7350_switch [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/03_boot_partition/02_set_env_failure [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/03_boot_partition/03_zyxel_wsm20_switch [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/lib/mocklib.uc [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/lib/mocklib/fs.uc [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/mocks/fs/open~_usr_share_advanced-reboot_devices_json.txt [new file with mode: 0644]
applications/luci-app-advanced-reboot/tests/run_tests.sh [new file with mode: 0644]
git clone https://git.99rst.org/PROJECT