diff --git a/patches-25.12/0136-umdns-update-to-Git-HEAD-2026-06-27.patch b/patches-25.12/0136-umdns-update-to-Git-HEAD-2026-06-27.patch
new file mode 100644
index 000000000..54654a2bc
--- /dev/null
+++ b/patches-25.12/0136-umdns-update-to-Git-HEAD-2026-06-27.patch
@@ -0,0 +1,34 @@
+From 0c048d1101db968246cedaeeb0212360e54259b0 Mon Sep 17 00:00:00 2001
+From: Hauke Mehrtens <hauke@hauke-m.de>
+Date: Sat, 27 Jun 2026 17:29:48 +0200
+Subject: [PATCH 135/138] umdns: update to Git HEAD (2026-06-27)
+
+dbee55098c2e Change domain variable to const char* for gcc 15 compatibility
+
+(cherry picked from commit f5d928e52a5f8c3d236dc0602fb407a2d3ec0285)
+Link: https://github.com/openwrt/openwrt/pull/25589
+Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
+---
+ package/network/services/umdns/Makefile | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/package/network/services/umdns/Makefile b/package/network/services/umdns/Makefile
+index 40ee5ed492..d317fac304 100644
+--- a/package/network/services/umdns/Makefile
++++ b/package/network/services/umdns/Makefile
+@@ -12,9 +12,9 @@ PKG_RELEASE:=1
+ 
+ PKG_SOURCE_URL=$(PROJECT_GIT)/project/mdnsd.git
+ PKG_SOURCE_PROTO:=git
+-PKG_SOURCE_DATE:=2026-06-16
+-PKG_SOURCE_VERSION:=1b5e7bf1cec775b89f1a6068dc0b9df3593b5986
+-PKG_MIRROR_HASH:=7d9ec860af2b8217f65cd4af92a61be1925ad171dee9b536c4914cc0080e3303
++PKG_SOURCE_DATE:=2026-06-27
++PKG_SOURCE_VERSION:=dbee55098c2e7a0a76feec414a11d76838572918
++PKG_MIRROR_HASH:=726e7874f7399fd286d81479ff00cb1cdd231cf3a25b8f89e4a9a1c45bb670bc
+ 
+ PKG_MAINTAINER:=John Crispin <john@phrozen.org>
+ PKG_LICENSE:=LGPL-2.1
+-- 
+2.34.1
+
diff --git a/patches-25.12/0137-umdns-update-to-Git-HEAD-2026-10-04.patch b/patches-25.12/0137-umdns-update-to-Git-HEAD-2026-10-04.patch
new file mode 100644
index 000000000..cffb6509e
--- /dev/null
+++ b/patches-25.12/0137-umdns-update-to-Git-HEAD-2026-10-04.patch
@@ -0,0 +1,49 @@
+From e6ee9e415db4167caa98cdab1eeec2fb3fe4f9d1 Mon Sep 17 00:00:00 2001
+From: Hauke Mehrtens <hauke@hauke-m.de>
+Date: Sun, 4 Oct 2026 23:09:25 +0200
+Subject: [PATCH 136/138] umdns: update to Git HEAD (2026-10-04)
+
+33a031c818ad dns: bound dns_query() AVL walk with avl_is_last()
+15a507e099ff cache: terminate cached TXT record inside its allocation
+7ff4347014bd dns: check record allocation in dns_packet_answer()
+7aa74cc1239f dns,interface: guard against NULL ifa_addr and getifaddrs() failure
+4d3628f8634e ubus: bound TXT copy in umdns_announcements()
+93b2903c92f8 service: initialise SRV priority and weight
+5dc24e8c80d9 dns: handle missing unicast interface in parse_question()
+ba53b7c932e8 service: validate txt entries and stop leaking on empty ones
+e115784cb334 dns: reset packet after each batch in dns_query_pending()
+126426e66e19 interface: compare full IPv6 address in source check
+e035293d1d2b dns: include stdbool.h in dns.h
+5b9638a13631 tests: stub the udebug helpers
+defe7ccfd202 tests: add fuzz corpus entry for the dns_query() AVL walk
+
+Link: https://github.com/openwrt/openwrt/security/advisories/GHSA-j2f2-273j-r86h
+Link: https://github.com/openwrt/openwrt/security/advisories/GHSA-fc92-h6gc-rjjx
+Link: https://github.com/openwrt/openwrt/pull/25620
+(cherry picked from commit 11632ebe04cd505d1b49f00935222e1485b8105e)
+Link: https://github.com/openwrt/openwrt/pull/25655
+Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
+---
+ package/network/services/umdns/Makefile | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/package/network/services/umdns/Makefile b/package/network/services/umdns/Makefile
+index d317fac304..2820e66c7f 100644
+--- a/package/network/services/umdns/Makefile
++++ b/package/network/services/umdns/Makefile
+@@ -12,9 +12,9 @@ PKG_RELEASE:=1
+ 
+ PKG_SOURCE_URL=$(PROJECT_GIT)/project/mdnsd.git
+ PKG_SOURCE_PROTO:=git
+-PKG_SOURCE_DATE:=2026-06-27
+-PKG_SOURCE_VERSION:=dbee55098c2e7a0a76feec414a11d76838572918
+-PKG_MIRROR_HASH:=726e7874f7399fd286d81479ff00cb1cdd231cf3a25b8f89e4a9a1c45bb670bc
++PKG_SOURCE_DATE:=2026-10-04
++PKG_SOURCE_VERSION:=defe7ccfd20281b9ef4dfa45437813386a64f8ba
++PKG_MIRROR_HASH:=9069cf95ed96b7a5285cf3ff9dbd0f23244f3232b2507812fda4bdb03721bc20
+ 
+ PKG_MAINTAINER:=John Crispin <john@phrozen.org>
+ PKG_LICENSE:=LGPL-2.1
+-- 
+2.34.1
+