Firmware selector not downloaing

[Nightwalker83]

Hi,

I am not sure where I am suppose to post this not lately whenever try to build custom image using the Firmware Builder it does not do anything. I choose my board (in this instance "Banana Pi R64" and the version of image 23.5.05 (or whichever it is). I then modify the package list to included new packages to install such as nano-full and luci-proto-relay. However,
When I click on the "Request Build" but that is suppose to generate info nothing happens apart from the error section turning read but being shown.

Thanks,

Aaron

[brada4]

https://openwrt.org/advisory/2024-12-06 (read 1st issue)

[Nightwalker83]

Command Injection in Imagebuilder: During image builds, user-supplied package names are incorporated into make commands without proper sanitization. This allows malicious users to inject arbitrary commands into the build process, resulting in the production of malicious firmware images signed with the legitimate build key.

What does that mean?

[brada4]

That image builder backend is shut down.

[Nightwalker83]

Oh ok! How long until it is back up?

[brada4]

No idea, I am just passive observer from the internet as you. Install local imagebuilder and dont add semicolons in package list

[Nightwalker83]

Ah ok! Yeah, I put spaces between each package like so "luci nano-full luci-proto-relay".

[Nightwalker83]

The Firmware downloader is back online now.