From a quick look at the openwrt home page, they had really bad timing this time: they had just released an important security release two days ago (on the 12th), one day before this new set of vulnerabilities was announced yesterday (on the 13th).