OpenWrt 23.05.4 - Service Release

Fri Jul 19 16:09:59 PDT 2024

Hi,

The OpenWrt community is proud to announce the newest stable release of 
the OpenWrt 23.05 stable series. It improves device support and brings a 
few bug fixes including security fixes.

Download firmware images using the OpenWrt Firmware Selector:
   * https://firmware-selector.openwrt.org/?version=23.05.4

Download firmware images directly from our download servers:
   * https://downloads.openwrt.org/releases/23.05.4/targets/

Main changes between OpenWrt 23.05.3 and OpenWrt 23.05.4
================================================

Device support
============

   *  Support for the following devices was added:
      * ath79: Huawei AP5030DN
      * mediatek: Unielec U7981-01
      * mediatek: Xiaomi AX3000T
      * mediatek: Cudy TR3000 v1
      * mediatek: Zbtlink ZBT-Z8103AX
      * mediatek: Adtran SmartRG Bonanza Peak series
      * mediatek: YunCore AX835
      * mediatek: Comfast CF-E393AX
      * mediatek: D-Link EAGLE PRO AI R32
      * mediatek: JDCloud RE-CP-03
      * mediatek: Netcore N60
      * mediatek: D-Link AQUILA PRO AI M30
      * mediatek: Cudy M3000 v1
      * mpc85xx: Hewlett Packard MSM460
      * ramips: D-Link DIR-806A B1
      * ramips: Netgear EAX12 series
      * ramips: Edimax BR-6208AC V2
      * ramips: Cudy TR1200 v1
   * armsr: enable framebuffer emulation for virtio-gpu/drm displays used
     by Hetzner console
   * armsr: add Realtek and smsc Ethernet phy drivers to the default
     image
   * armsr: Renesas: RZ: Ethernet module and ttySC0
   * ipq40xx: Linksys WHW03 v2: enable additional 5 GHz channels
   * ipq40xx: Engenius EAP1300: Enable device
   * ipq40xx: NETGEAR EX6150v2: fix broken image generation
   * ipq806x: Meraki MR52: swap LAN LEDs
   * mediatek: backport multiple Ethernet fixes from master
   * mediatek: filogic: fix failsafe mode on devices with no lan1
   * mediatek: Xiaomi WR30U: drop device with NMBM layout
   * mediatek: Xiaomi WR30U: fix sysupgrade error
   * mpc85xx: Enterasys WS-AP3710i: fix boot
   * mpc85xx: Enterasys WS-AP3710i: fix eth mac-address
   * rockchip: improve stability and fix console
   * realtek: D-Link DGS-1210-16: Fix reboot hang
   * realtek: Trap LLDP packets to the CPU and do not forward
   * ramips: limit max spi clock frequency to 50 MHz

Various fixes and improvements
==========================

   * Added missing and fixed license information for multiple packages
   * Added CPE IDs to multiple packages
   * Fix communication with tethered iOS devices in CDC NCM mode
   * base-files: fix uid/gid auto-enumeration to avoid 16-bit limit
   * wifi-scripts: fix creation of IBSS in legacy (non-HT) mode
   * hostapd: don't ignore probe-requests with invalid DSSS params
   * mac80211: backport many (security) fixes
   * mac80211: add missing config for third 160MHz width for 5GHz radio
   * kernel: Add missing dependencies for kmod-fs-btrfs
   * kernel: allow installing kmod-ipt-tee and kmod-nft-dup-inet at the
     same time.
   * config: Enable ext4 journaling by default.
   * linux-firmware: package Intel AX201 firmware

Core components update
==========================

   * Update Linux from 5.15.150 to 5.15.162
   * Update mac80211 from 6.1.24 to 6.1.97-1
   * Update mt76 from 2023-09-11 to 2024-04-03
   * Update wireless-regdb from 2024.01.23 to 2024.07.04
   * Update libxml2 from 2.11.4 to 2.12.5
   * Update mbedtls from 2.28.7 to 2.28.8
   * Update OpenSSL from 3.0.13 to 3.0.14
   * Update wolfssl from 5.6.4 to 5.7.2
   * Update unetd from 2023-05-31 to 2024-03-31
   * Update ucode from 2023-11-07 to 2024-07-11
   * Update intel-microcode from 20240312 to 20240531

Upgrading to 23.05.4
================

Sysupgrade can be used to upgrade a device from 22.03 to 23.05, and 
configuration will be preserved in most cases.

  * Sysupgrade from 21.02 to 23.05 is not officially supported.
  * ipq40xx EA6350v3, EA8300, MR8300 and WHW01 require tweak to the
    U-Boot environment on update from 22.03 to 23.05. Refer to the Device
    wiki or the instruction on sysupgrade on how to do this change.
    Config needs to be reset on sysupgrade.

Known issues
============

   * lantiq/xrx200 target shows error messages in DSA switch
     configuration of the integrated GSWIP switch. (see:
     https://github.com/openwrt/openwrt/pull/13200)
   * OpenWrt 23.05.4 was signed with the wrong signing keys. The keys
     from OpenWrt snapshot were used for OpenWrt 23.05.4,
     OpenWrt 23.05.3, OpenWrt 23.05.2, OpenWrt 23.05.0 and the release
     candidates. A later OpenWrt 23.05 service release will use a
     different key.

See up to date information here:
https://openwrt.org/releases/23.05/notes-23.05.4#known_issues

-----------------

Full release notes and upgrade instructions are available at
https://openwrt.org/releases/23.05/notes-23.05.4

In particular, make sure to read the regressions and known issues before 
upgrading:
https://openwrt.org/releases/23.05/notes-23.05.4#known_issues

For a detailed list of all changes since 23.05.3, refer to
https://openwrt.org/releases/23.05/changelog-23.05.4

To download the 23.05.4 images, navigate to:
https://downloads.openwrt.org/releases/23.05.4/targets/
Use OpenWrt Firmware Selector to download:
https://firmware-selector.openwrt.org/?version=23.05.4

As always, a big thank you goes to all our active package maintainers, 
testers, documenters and supporters.

Have fun!

The OpenWrt Community

---

To stay informed of new OpenWrt releases and security advisories, there 
are new channels available:

   * a low-volume mailing list for important announcements:
https://lists.openwrt.org/mailman/listinfo/openwrt-announce

   * a dedicated "announcements" section in the forum:
https://forum.openwrt.org/c/announcements/14

   * other announcement channels (such as RSS feeds) might be added in 
the future, they will be listed at https://openwrt.org/contact
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x93DD20630910B515.asc
Type: application/pgp-keys
Size: 19909 bytes
Desc: OpenPGP public key
URL: <http://lists.openwrt.org/pipermail/openwrt-devel/attachments/20240720/726b7584/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openwrt.org/pipermail/openwrt-devel/attachments/20240720/726b7584/attachment-0001.sig>