OpenWrt 19.07.8 service release
Hauke Mehrtens
hauke at hauke-m.de
Sat Aug 7 11:59:17 PDT 2021
Hi,
The OpenWrt community is proud to announce the eighth service release of
OpenWrt 19.07. It fixes security issues, improves device support, and
brings a few bug fixes.
The main changes from OpenWrt 19.07.7 are:
Security fixes
==============
* Fix FragAttacks (fragmentation and aggregation attacks)
vulnerabilities in cfg80211, mac80211, ath10k and ath10k-ct
* We are not sure if some closed source firmware files are still
affected by these problems.
* Security Advisory 2021-08-01-1 - XSS via missing input validation of
host names displayed (CVE-2021-32019)
* Security Advisory 2021-08-01-2 - Stored XSS in hostname UCI variable
(CVE-2021-33425)
* Security Advisory 2021-08-01-3 - luci-app-ddns: Multiple
authenticated RCEs (CVE-2021-28961)
* Various security fixes in packages
Major bug fixes
===============
* Minor bugfixes to support GCC 11 as host compiler
Device support
==============
* TP-Link C7v5 allow flashing from vendor firmware bigger than v1.1
* FRIZZ!Box 7320 Activate power supply to USB ports.
Various fixes and improvements
==============================
* Only pack the signing keys for OpenWrt 19.07 and 21.02 and not the
personal keys any more.
Core components
===============
* Update Linux kernel from 4.14.221 to 4.14.241
* Update mac80211 from 4.19.161-1 to 4.19.193-1
* Update ath10k-ct 4.19 driver from 2019-09-09 to 2021-06-03
* Update OpenVPN from 2.4.7 to 2.4.11
* Update openssl from 1.1.1i to 1.1.1k
* Update mbedtls from 2.16.9 to 2.16.10
* Update wolfssl from 4.6.0 to 4.7.0
Full release notes and upgrade instructions are available at
https://openwrt.org/releases/19.07/notes-19.07.8
In particular, make sure to read the regressions and known issues before
upgrading:
https://openwrt.org/releases/19.07/notes-19.07.8#regressions
For a very detailed list of all changes since 19.07.7, refer to
https://openwrt.org/releases/19.07/changelog-19.07.8
For latest information about the 19.07 series, refer to the wiki at:
https://openwrt.org/releases/19.07/
To download a OpenWrt 19.07.8 firmware image for your device, head to
the Table of Hardware:
https://openwrt.org/toh/start
Or use the new firmware selector:
https://firmware-selector.openwrt.org/
You can also navigate directly in the list of firmware images:
https://downloads.openwrt.org/releases/19.07.8/targets/
As always, a big thank you goes to all our active package maintainers,
testers, documenters, and supporters.
Have fun!
The OpenWrt Community
---
To stay informed of new OpenWrt releases and security advisories, there
are new channels available:
* a low-volume mailing list for important announcements:
https://lists.openwrt.org/mailman/listinfo/openwrt-announce
* a dedicated "announcements" section in the forum:
https://forum.openwrt.org/c/announcements/14
* other announcement channels (such as RSS feeds) might be added in the
future, they will be listed at https://openwrt.org/contact
More information about the openwrt-devel
mailing list