3.89.11

What's Changed

• chore(build): replace Java device type stripper with Bash and awk by @jens-maus in #37.
• fix: update to upstream 3.89.11 including several upstream JSON-API related security fixes:
  • added input validation and sanitization for JSON-API calls creating system variables (homematicip#13)
  • sanitized HomeMatic Script variable identifiers and improved argument escaping (homematicip#14)
  • added HTML escaping for system variable data displayed in the WebUI (homematicip#13)
  • hardened user.setLanguage by avoiding shell command execution and sanitizing the target profile filename (homematicip#13)
  • raised system.saveObjectModel access level to USER ((homematicip#14)

Full Changelog: 3.89.9...3.89.11

3.89.9

What's Changed

• Fix signed-char corruption of .dev sysinfo on x86_64 (type byte >= 0x80) by @hausbus in #9
• disable obsolete tclticks package by @jens-maus in #10
• rfd: Resolve libusb include/link discovery when HAS_USB_SUPPORT is enabled by @jens-maus with @Copilot in #11
• rfd: improve LAN gateway reconnect recovery by @virgin09 in #13
• fix multiple c++ compiler related warnings. by @jens-maus in #15
• finalizing build env to also generate webui files from www_source by @jens-maus in #14
• rfd: synchronize LGW controller lifetime during reconnect by @virgin09 in #16
• LAN gateway: fix case-sensitive serial mismatch between connection and status by @virgin09 in #17
• build environment fixes by @jens-maus in #18
• update libxmlparser to V1.13 version by @jens-maus in #19
• add compat-libraries custom build target for libxmlparser/libXmlRpc builds only by @jens-maus in #20
• modify DEVDB create script to use lsort for deterministic creation by @jens-maus in #21
• update eq3_char_loop to version 1.4 including kernel v6 compatibility by @jens-maus in #22
• bump rfd version to 1.2.0 and hs485d version to 2.6.0 by @jens-maus in #23
• update tclrega and tclrpc to latest 1.4 versions by @jens-maus in #24
• add fixes for devicetypes generation to abort build if necessary by @jens-maus in #25
• improve version file generation in cmake build by @jens-maus in #26
• libXmlRpc: preserve dispatcher registration during reconnect failure by @jens-maus in #27
• add CI workflow by @jens-maus in #28
• libxmlparser: fix unsafe XMLNode array handling by @jens-maus in #29
• fix compiler warnings in hss_led, libeq3config and rfd by @jens-maus in #30
• webui: cleanup obsolete files not required by @jens-maus in #31
• add missing serial.tcl and tclload.tcl to add missing GetSerialNumber and tcl load statements. by @jens-maus in #32
• downgrading HMServer.jar to working HomeMatic-only version by @jens-maus in #33
• fix HmIP-RFUSB fwmap by defining firmware 4.4.18 the default by @jens-maus in #34
• hss_led: add missing PLATFORM_CCU3 define by @jens-maus in #35

New Contributors

• @hausbus made their first contribution in #9
• @virgin09 made their first contribution in #13

Full Changelog: https://github.com/OpenCCU/OpenCCU-Base/commits/3.89.9