Table of Contents

OpenWrt v23.05.4 Changelog

This changelog lists all commits done in OpenWrt since the v23.05.3 tag, grouped by subsystem. The changes are chronologically ordered from top to bottom and cover the Git repository history until the tagging of the 23.05.4 release.

See also the release notes that provide a more accessible overview of the main changes in 23.05.4.

Build System / Buildroot (28 changes)

6734cbd kernel: bump 5.15 to 5.15.151 (+77,-77)
ecf390c kernel: bump 5.15 to 5.15.152 (+53,-105)
8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)
340e3dc build: fix kernel component in CycloneDX SBOM (+2)
33612fd kernel: introduce KERNEL_WERROR config option (+17,-1)
915dfbd config: select KERNEL_WERROR if building with default GCC version (+5,-2)
451b51f kernel: bump 5.15 to 5.15.155 (+336,-331)
fd42798 kernel: bump 5.15 to 5.15.156 (+143,-145)
438e593 kernel: bump 5.15 to 5.15.157 (+255,-258)
01c58a0 kernel: bump 5.15 to 5.15.158 (+38,-130)
d1fc2ea host-build: always define Host/Prepare/Default (+3,-5)
61c50bd quilt.mk: use CURDIR instead of ./ for PATCH_DIR and FILES_DIR (+2,-2)
349c3c1 quilt.mk: don't error on refresh/update if patches doesn't exist (+12,-9)
cc0527b build: add explicit timezone in CycloneDX SBOM (+1,-1)
cd2fdaf kernel: bump 5.15 to 5.15.159 (+15,-116)
1589572 kernel: bump 5.15 to 5.15.160 (+7,-7)
866b1bb kernel: bump 5.15 to 5.15.161 (+109,-156)
4c03fe2 target.mk: fix arm architecture level detection (+9,-1)
1f701c9 kernel: Extract kmod-nf-dup-inet (+19,-9)
f8690ca scripts/ext-toolchain: add missing libc library specs (+7,-1)
04b0f1e config: kernel: remove KASAN_EXTRA (-10)
4df592f scripts: Add GNU ftp mirror redirector for GNU and Savannah (+2)
7448f7a config: Enable ext4 journaling by default. (+1)
7764d48 kernel: bump 5.15 to 5.15.162 (+75,-210)
08f95e8 mediatek: Moved recovery image creation to include/image-commands.mk (+52,-27)
a812b70 image: make images and artifacts dependent of initramfs (+3,-3)
d53f1ca image: exclude initramfs-images dependency with IB (+2,-2)
d8dd03c build: include tests/Makefile if available (+3)

Build System / Host Utilities (10 changes)

82ba1d2 tools/cpio: update to 2.15 (+2,-2)
a48786e tools: b43-tools: fix compilation with GCC14 (+1,-1)
3d037b8 tools: macOS: types.h: fix missing unsigned types (+5)
eda76b3 gengetopt: backport patch fixing support for c++17 (+58)
9897724 tools/missing-macros: install files from HOST_BUILD_DIR instead of src (+2,-2)
aa77c79 tools/padjffs2: use Host/Prepare/Default instead of raw commands (+1,-2)
28bf013 tools: refresh all patches (+67,-97)
c587573 tools/zlib: fix PKG_CPE_ID (+1,-1)
11b8b62 tools/flex: fix PKG_CPE_ID (+1,-1)
6928faa tools/sparse: fix compilation with GCC14 (+128,-1)

Build System / SDK (1 change)

817a1cb sdk: include lib/crtsavres.o for powerpc (+4)

Build System / Toolchain (6 changes)

915dfbd config: select KERNEL_WERROR if building with default GCC version (+5,-2)
e8cc17e config: fix CONFIG_GDB appearing in main menuconfig menu (+5,-5)
c337226 toolchain: kernel-headers: fix check target for external Git trees (+3)
7c7cc28 toolchain: kernel-headers: remove debugging env dump (-1)
ed12436 toolchain/gdb: backport patch for macOS to fix invalid range (+130)
6b39170 toolchain/nasm: fix PKG_CPE_ID (+1,-1)

Kernel (30 changes)

6734cbd kernel: bump 5.15 to 5.15.151 (+77,-77)
ecf390c kernel: bump 5.15 to 5.15.152 (+53,-105)
8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)
f314deb ath79: add support for Huawei AP5030DN (+343)
11d88de kernel: backport upstream mediatek WED changes (+4.9K,-269)
726d4be kernel: add kmod-leds-lp5562 and kmod-leds-lp55xx-common (+34)
33612fd kernel: introduce KERNEL_WERROR config option (+17,-1)
2b6b6e2 kernel: backport ipeth CDC NCM support (+427)
451b51f kernel: bump 5.15 to 5.15.155 (+336,-331)
fd42798 kernel: bump 5.15 to 5.15.156 (+143,-145)
438e593 kernel: bump 5.15 to 5.15.157 (+255,-258)
01c58a0 kernel: bump 5.15 to 5.15.158 (+38,-130)
cd2fdaf kernel: bump 5.15 to 5.15.159 (+15,-116)
866b1bb kernel: bump 5.15 to 5.15.161 (+109,-156)
85f3603 generic: add more DT LED color and function definitions (+76)
355bc64 kernel: backport some useful LED_FUNCTION_* defines for DT (+69)
1f701c9 kernel: Extract kmod-nf-dup-inet (+19,-9)
7f833b8 kernel: Fix kmod-lib-lz4 packaging (+35,-8)
03299b3 kernel: Add kmod-crypto-blake2b (+13,-1)
9bf1089 kernel: Add kmod-crypto-xxhash (+27,-6)
ffe97a6 kernel: Add kmod-mfd (+13,-1)
aa27bd7 kernel: crypto: remove FCRYPT from miscellany (-1)
7764d48 kernel: bump 5.15 to 5.15.162 (+75,-210)
ca9b71c generic: move accepted patches for mtk_eth_soc to backport-5.15 (+87,-76)
e4d4715 kernel: backport mtd_wed/mtk_eth_soc patch for devices with more than 4GB of ... (+103,-12)
93ce299 generic: 6.6: backport upstream commits for mtk_eth_soc (+398,-34)
8c46dd1 generic: 5.15: mtk_eth_soc: import accepted patches (+29)
97e6cc4 generic: 6.6: mtk_eth_soc: add support for flow-control settings (+59,-4)
7382943 mediatek: fix WED + wifi reset (+51,-2)
6f72d62 kernel: update deprecated license information (+2,-2)

Packages / Boot Loaders (18 changes)

0a2047c kirkwood: add ix4-200d support to uboot-envtools (+1)
f314deb ath79: add support for Huawei AP5030DN (+343)
c19f507 Revert "uboot-sunxi: add missing type __u64" (-10)
8695bc3 Revert "uboot-mediatek: fix build on Mac OS X" (-10)
f11e6e2 mediatek: filogic: add support for Xiaomi AX3000T (+820,-240)
51822a9 mediatek: drop NMBM layout for Xiaomi WR30U (-43)
7735421 mediatek: add support for Zbtlink ZBT-Z8103AX (+294,-2)
e4015c4 uboot-envtools: filogic: reorder alphabetically (+21,-21)
9ac1523 mediatek: add Comfast CF-E393AX support (+284)
d0744c1 mediatek: Add support for D-Link EAGLE PRO AI R32 (+521,-384)
b67b3a6 uboot-mediatek: add support for JDCloud RE-CP-03 (+337)
2a25de2 mediatek: add support for JDCloud RE-CP-03 (+341,-1)
7bfdc4e uboot-mediatek: add Netcore N60 support (+447)
6e51ff8 filogic: Add support for D-Link AQUILA PRO AI M30 (+342)
e573b6b ramips: add support for D-Link DIR-806A B1 router (+184,-1)
2928063 ramips: add support for Netgear EAX12 series (+231)
9f739da uboot-mediatek: fix patch order ()
a064567 uboot-mediatek: enable rootwait for jdcloud re-cp-03 (+1,-1)

Packages / Common (31 changes)

26548c4 unetd: update to Git HEAD (2024-03-31) (+3,-3)
52144f7 pex: after receiving data update req, notify peer of local address/port (+16,-1)
29aacb9 pex: track indirect hosts (reachable via gateway) as peers without adding the... (+19,-12)
4804952 pex: do not send peer notifications for hosts with a gateway (+6)
12ac684 pex: do not query for hosts with a gateway (+1,-1)
203c888 pex: fix endian issues on config transfer (+5,-5)
a29d45c network: fix endian issue in converting port to network id (+2,-2)
cbbe9d3 unet-cli: emit id by default (+2,-2)
8064576 unet-cli: strip initial newline in usage message (+1,-2)
507f943 lua: fix CVE-2014-5461 (+48,-26)
a6bb1df wifi-scripts: fix creation of IBSS in legacy (non-HT) mode (+4,-3)
6d6384f libxml2: update to 2.11.6 (+2,-2)
a8a8fbc libxml2: update to 2.12.1 (+2,-14)
6ea90db libxml2: update to 2.12.3 (+2,-2)
ced6809 libxml2: update to 2.12.4 (+2,-2)
968d943 libxml2: update to 2.12.5 (+2,-2)
a691e7d gettext-full: link libiconv when building host pkg (+2,-4)
85ff47c hostapd: don't ignore probe-requests with invalid DSSS params (+39)
ef4fc5c hostapd: bump PKG_RELEASE (+1,-1)
97c588e wolfssl: update to 5.6.6 (+3,-3)
2410b4c wolfssl: Update to 5.7.0 (+3,-3)
4aabbd6 openssl: update to 3.0.14 (+2,-2)
318db3b openssl: conditionally disable engine section (+3,-1)
b110c33 package/libs/pcre2: fix PKG_CPE_ID (+1,-1)
6ea9cf3 package/network/services/dropbear: fix PKG_CPE_ID (+1,-1)
8c20083 package/libs/libjson-c: fix PKG_CPE_ID (+1,-1)
16601bb package/network/utils/iptables: fix PKG_CPE_ID (+1,-1)
95fac7d package/utils/secilc: drop PKG_CPE_ID (-1)
e0837a1 iw: sync nl80211.h (+18,-8)
80a3659 hostapd: use strdup on string passed to hostapd_add_iface (+5,-1)
287e256 hostapd: fix crash on interface setup failure (+21)
3941633 uencrypt: Fix compile warnings (+2,-2)
dee4309 mbedtls: Update to 2.28.8 (+8,-8)
d0c7b19 hostapd: fix a crash corner case (+1,-1)
7d135dc libxml2: add host build dependency on libiconv-full (+1)
c439003 filogic: Add LED driver for GCA230718 (+262)
9b12d41 ca-certificates: add missing license information (+3)
553a7a3 ucode: update to Git 1a8a0bcf725520820802ad433db22d8f64fbed6c (2024-07-11) (+3,-3)
96f74b5 ubus: make ubus_context first in uc_ubus_connection_t (+60,-60)
7e5830e nl80211: fix datatype of NL80211_BAND_IFTYPE_ATTR_HE_CAP_{MAC,PHY} attrs (+2,-2)
5c8fd34 nl80211: fix parsing of NL80211_BAND_ATTR_VHT_MCS_SET attribute (+1,-1)
e8d4e4f nl80211: fix decoding of NL80211_BAND_IFTYPE_ATTR_HE_CAP_MCS_SET attribute (+4,-4)
30a3f7a rtnl: store callback in listener registry only on success (+4,-1)
9cbe829 rtnl: optimize reception of rtnl events (+14,-1)
5344171 rtnl: increase event socket rx buffer size limit to 1 MiB (+1,-1)
3f9811d compiler: close upvalues on loop control statements (+24,-1)
ee4af9b vm: rework object iteration (+203,-36)
a275399 uci: refactor uci.changes() to match documentation (+8,-7)
1220992 ubus: automatically clear error information (+31,-30)
d6fd940 uci: automatically clear error information (+19,-18)
99837f2 uloop: automatically clear error information (+34,-33)
ba3855a lib: fix documentation typo for `pop()` function (+1,-1)
be767ae vm: rework `in` operator semantics (+163,-15)
4ade84e ubus: add explicit support for deferring incoming requests (+16,-1)
⇒ + 29 more...
84b000e wolfssl: Update to version 5.7.2 (+5,-3)

Packages / Firmware (8 changes)

09a8f75 wireless-regdb: update to 2024.05.08 (+2,-2)
0fb2ee4 firmware: intel-microcode: update to 20240531 (+2,-2)
add63dd linux-firmware: realtek: update rtl8821ae firmware (+1,-1)
242f193 linux-firmware: package Intel AX201 firmware (+7)
42dada5 wireless-regdb: add missing license information (+2)
437d198 linux-firmware: add LICENSE_FILES and LICENSE file handling (+2)
130aa67 linux-firmware: add missing LICENSE_FILES info (+55,-55)
0cdbbd8 wireless-regdb: Update to version 2024.07.04 (+2,-2)

Packages / OpenWrt base files (3 changes)

4058d0e base-files: add mmc_get_mac_ascii function (+25,-5)
9988f8a base-files: minor fix to mmc_get_mac_ascii function (+1)
ccac75a base-files: fix uid/gid auto-enumeration to avoid 16-bit limit (+2,-2)

Packages / OpenWrt network userland (1 change)

afb5fdd netifd: packet-steering: silence error on applying queue mask (+2,-2)

Packages / OpenWrt system userland (1 change)

2541ff3 procd: make mDNS TXT record parsing more solid (+9,-6)

Target / armsr (4 changes)

be4d0d0 armsr: armv8: enable serial console for Renesas platforms (+5)
299893c kernel: armsr: Renesas: RZ: Ethernet module and ttySC0 (+17,-1)
7a4f468 armsr: enable framebuffer emulation for virtio-gpu/drm displays (+3)
2a099d3 armsr: add realtek and smsc ethernet phy drivers to the default image (+2,-1)

Target / at91 (2 changes)

8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)
438e593 kernel: bump 5.15 to 5.15.157 (+255,-258)

Target / ath79 (3 changes)

f314deb ath79: add support for Huawei AP5030DN (+343)
7764d48 kernel: bump 5.15 to 5.15.162 (+75,-210)
9276bb1 ath79: replace "mac-address-ascii" with "mac-base" (+134,-93)

Target / bcm27xx (10 changes)

6734cbd kernel: bump 5.15 to 5.15.151 (+77,-77)
ecf390c kernel: bump 5.15 to 5.15.152 (+53,-105)
8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)
9b33b74 bcm27xx: refresh kernel patches (+1,-1)
451b51f kernel: bump 5.15 to 5.15.155 (+336,-331)
438e593 kernel: bump 5.15 to 5.15.157 (+255,-258)
cd2fdaf kernel: bump 5.15 to 5.15.159 (+15,-116)
1589572 kernel: bump 5.15 to 5.15.160 (+7,-7)
866b1bb kernel: bump 5.15 to 5.15.161 (+109,-156)
7764d48 kernel: bump 5.15 to 5.15.162 (+75,-210)

Target / bcm47xx (1 change)

01c58a0 kernel: bump 5.15 to 5.15.158 (+38,-130)

Target / bcm4908 (1 change)

8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)

Target / bcm53xx (2 changes)

ecf390c kernel: bump 5.15 to 5.15.152 (+53,-105)
7764d48 kernel: bump 5.15 to 5.15.162 (+75,-210)

Target / bmips (1 change)

7764d48 kernel: bump 5.15 to 5.15.162 (+75,-210)

Target / ipq40xx (9 changes)

677ecd0 ipq40xx: whw03v2: enable additional 5 GHz channels (+2,-3)
3704eb3 ipq40xx: whw03v2: fix handling of RGB LED (-3)
567af39 ipq40xx: whw03v2: change LED color for 'running' state to blue (+1,-1)
11b0034 ipq40xx: Enable NVMEM_U_BOOT_ENV config (+1)
89088ba ipq40xx: convert Engenius EAP1300 to DSA (+18)
66952b9 ipq40xx: Properly set MAC addresses for the EAP1300 (+11,-4)
7a0d5a5 ipq40xx: Enable the Engenius EAP1300 (+1,-2)
d062070 ipq40xx: fix broken image generation for EX6150v2 (+96,-2)
a0d2dda ipq40xx: eap1300: add eap1300ext as alt model (+2)

Target / ipq806x (6 changes)

ecf390c kernel: bump 5.15 to 5.15.152 (+53,-105)
8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)
ec8f647 ipq806x: swap lan leds for Meraki MR52 (+8,-8)
438e593 kernel: bump 5.15 to 5.15.157 (+255,-258)
e61f06c ipq806x: mr42/mr52: fix PCIe ports (-12)
08becaf ipq806x: rt4230w-rev6: fix status reporting via the LEDs (+4,-3)

Target / ipq807x (3 changes)

8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)
26e882f ipq807x: prpl-haze: enable LED driver on device tree (+50,-1)
451b51f kernel: bump 5.15 to 5.15.155 (+336,-331)

Target / lantiq (2 changes)

451b51f kernel: bump 5.15 to 5.15.155 (+336,-331)
7764d48 kernel: bump 5.15 to 5.15.162 (+75,-210)

Target / mediatek (34 changes)

e2f3aef mediatek: filogic: add Unielec U7981-01 support (+379)
8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)
11d88de kernel: backport upstream mediatek WED changes (+4.9K,-269)
451b51f kernel: bump 5.15 to 5.15.155 (+336,-331)
01c58a0 kernel: bump 5.15 to 5.15.158 (+38,-130)
0f1b249 mediatek: fix broken PCIe caused by update to 5.15.158 (+9)
c82c117 mediatek: filogic: fix failsafe mode on devices with no lan1 (+9)
f11e6e2 mediatek: filogic: add support for Xiaomi AX3000T (+820,-240)
51822a9 mediatek: drop NMBM layout for Xiaomi WR30U (-43)
9f9b600 mediatek: fix sysupgrade error for WR30U (-1)
ed3a80d mediatek: add support for Cudy TR3000 v1 (+252)
cd2fdaf kernel: bump 5.15 to 5.15.159 (+15,-116)
866b1bb kernel: bump 5.15 to 5.15.161 (+109,-156)
46aa8c7 mediatek: add kmod-usb3 to default package set of the ZBT-Z8102AX (+1,-1)
7735421 mediatek: add support for Zbtlink ZBT-Z8103AX (+294,-2)
387e143 mediatek: add support for Adtran SmartRG Bonanza Peak series (+859,-3)
f377e7f mediatek: add support for YunCore AX835 (+285,-2)
9ac1523 mediatek: add Comfast CF-E393AX support (+284)
d0744c1 mediatek: Add support for D-Link EAGLE PRO AI R32 (+521,-384)
2a25de2 mediatek: add support for JDCloud RE-CP-03 (+341,-1)
5632227 mediatek: filogic: add Netcore N60 support (+312,-1)
feb5b07 mediatek: add missing SPDX header (+1)
7764d48 kernel: bump 5.15 to 5.15.162 (+75,-210)
1dd9f26 mediatek: filogic: set wan label in preinit (+15)
cb2cda2 mediatek: filogic: avoid sub-shell invovation in netdev rename loop (+2,-2)
08f95e8 mediatek: Moved recovery image creation to include/image-commands.mk (+52,-27)
6e51ff8 filogic: Add support for D-Link AQUILA PRO AI M30 (+342)
ca9b71c generic: move accepted patches for mtk_eth_soc to backport-5.15 (+87,-76)
e4d4715 kernel: backport mtd_wed/mtk_eth_soc patch for devices with more than 4GB of ... (+103,-12)
93ce299 generic: 6.6: backport upstream commits for mtk_eth_soc (+398,-34)
7382943 mediatek: fix WED + wifi reset (+51,-2)
84ecd7c mediatek: fix lan/wan macaddr for jdcloud re-cp-03 (+3,-3)
74df6ce mediatek: filogic: add support for Cudy M3000 v1 (+242)
d3552cc mediatek: filogic: prevent faulty mac address assignment (+2,-5)

Target / mpc85xx (7 changes)

447eef2 mpc85xx: convert WS-AP3710i to simpleImage wrapper (+158,-28)
438e593 kernel: bump 5.15 to 5.15.157 (+255,-258)
530d4db mpc85xx: add support for Hewlett Packard MSM460 (+388,-1)
6698e6e mpc85xx: add label-mac for HP MSM460 (+1)
3001d3c mpc85xx: fix WS-AP3710i boot (+17,-15)
d8415fa mpc85xx: fix Enterasys WS-AP3710i eth mac-address (+3)
e367ba9 mpc85xx: fix label-mac-address for Enterasys WS-AP3710i (+4,-1)

Target / mvebu (3 changes)

8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)
5cae98c mvebu: puzzle-m90x: wipe rootfs_data on sysupgrade (+2)
438e593 kernel: bump 5.15 to 5.15.157 (+255,-258)

Target / octeontx (2 changes)

8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)
451b51f kernel: bump 5.15 to 5.15.155 (+336,-331)

Target / oxnas (2 changes)

8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)
438e593 kernel: bump 5.15 to 5.15.157 (+255,-258)

Target / ramips (11 changes)

11d88de kernel: backport upstream mediatek WED changes (+4.9K,-269)
3287d82 ramips: samknows whitebox v8: set wifi frequency (+1)
f12cf43 ramips: yuncore_g720: fix buttons (+7,-1)
7be58cc ramips: mt76x8: add support for Cudy TR1200 v1 (+213)
3fcf619 ramips: mt76x8: sync Cudy TR1200 v1 naming (+3,-3)
e573b6b ramips: add support for D-Link DIR-806A B1 router (+184,-1)
b20da12 ramips: add wan2 support for MQmaker WiTi (+17,-4)
2928063 ramips: add support for Netgear EAX12 series (+231)
07742a7 ramips: add Edimax BR-6208AC V2 support (+245)
5c21ab2 ramips: Refresh kernel patches (+2,-2)
78858e5 ramips: limit max spi clock frequency to 50 MHz (+27,-27)

Target / realtek (5 changes)

77b7c10 realtek: support common GPIOs on D-Link DGS-1210-16 (+1)
451b51f kernel: bump 5.15 to 5.15.155 (+336,-331)
c5ed115 realtek: Change LLTP register to LLDP (+11,-11)
5b7240c realtek: Trap LLDP packets to the CPU (+7)
7764d48 kernel: bump 5.15 to 5.15.162 (+75,-210)

Target / rockchip (2 changes)

f90b1d9 rockchip: remove 'swiotlb' parameter from boot script (+1,-1)
705954a rockchip: remove redundant 'console' parameter from boot script (+1,-1)

Target / sifiveu (1 change)

8f8d5de kernel: bump 5.15 to 5.15.153 (+751,-937)

Target / sunxi (1 change)

675d9a2 sunxi: fix network bringup on Olinuxino Micro boards (+1,-1)

Target / tegra (1 change)

5a42318 tegra: Activate CONFIG_SND_DRIVERS (-1)

Target / x86 (3 changes)

451b51f kernel: bump 5.15 to 5.15.155 (+336,-331)
fd42798 kernel: bump 5.15 to 5.15.156 (+143,-145)
01c58a0 kernel: bump 5.15 to 5.15.158 (+38,-130)

Wireless / Common (9 changes)

afe2ddf mac80211: backport some upstream EHT patches (+1.6K,-20)
17501f8 mac80211: backport ieee80211_vif_is_mld() (+825)
c69482a mac80211: backport ieee80211_set_sband_iftype_data() (+49)
323e249 mac80211: Update to version 6.1.97-1 (+454,-1.5K)
bed2272 mac80211: fix flush during station removal (+64)
c145f0f mac80211: add fix for receiving STP frames on mesh (+26,-1)
e82759f mac80211: add missing config for third 160MHz width for 5GHz radio (+1)
f5d64e3 mac80211: add missing license information (+3)
2b1ed7b mac80211: fix mesh id corruption on 32 bit systems (+62)

Wireless / MT76 (13 changes)

11d88de kernel: backport upstream mediatek WED changes (+4.9K,-269)
5c4c9ae mt76: update to the latest version (+52,-4)
b3f739a wifi: mt76: mt7996: add eht rx rate support (+27,-11)
ca49170 wifi: mt76: mt76x0: remove dead code in mt76x0_phy_get_target_power (-3)
325a0c4 wifi: mt76: mt7996: fill txd by host driver (+4,-9)
cd371fc mt76: mt7996: sync with upstream (+1,-4)
d71f8d1 wifi: mt76: use atomic iface iteration for pre-TBTT work (+22,-10)
8d5ea32 wifi: mt76: remove unused error path in mt76_connac_tx_complete_skb (+4,-24)
01860c0 wifi: mt76: add DMA mapping error check in mt76_alloc_txwi() (+5)
62ddb6d wifi: mt76: connac: introduce helper for mt7925 chipset (+11,-4)
0837f37 wifi: mt76: mt792x: support mt7925 chip init (+40,-15)
899ff37 wifi: mt76: connac: export functions for mt7925 (+24,-7)
c3858b5 wifi: mt76: connac: add eht support for phy mode config (+15,-1)
5df6b26 wifi: mt76: connac: add eht support for tx power (+18,-9)
a808134 wifi: mt76: connac: add data field in struct tlv (+1)
9b38aeb wifi: mt76: connac: add more unified command IDs (+7)
84984e6 wifi: mt76: connac: add more unified event IDs (+7)
6fe9239 wifi: mt76: mt7996: set correct wcid in txp (+5,-5)
⇒ + 25 more...
06be957 mt76: update to Git HEAD (2023-12-08) (+381,-28)
890ae4d wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (+11,-9)
fcc2f3d wifi: mt76: fix lock dependency problem for wed_lock (+4,-4)
77cc145 wifi: mt76: mt792x: move mt7921_skb_add_usb_sdio_hdr in mt792x module (+21,-36)
bc85355 wifi: mt76: mt792x: move some common usb code in mt792x module (+37,-59)
c27f01c wifi: mt76: mt7996: get tx_retries and tx_failed from txfree (+22,-5)
30aba4c wifi: mt76: mt7996: Add mcu commands for getting sta tx statistic (+130)
119bebf wifi: mt76: mt7996: enable PPDU-TxS to host (+48,-17)
a4005e0 wifi: mt76: mt7996: remove periodic MPDU TXS request (+21,-19)
d6cc20b wifi: mt76: reduce spin_lock_bh held up in mt76_dma_rx_cleanup (+4,-2)
5d94251 wifi: mt76: mt7921: move connac nic capability handling to mt7921 (+121,-122)
266341b wifi: mt76: mt7921: enable set txpower for UNII-4 (+1,-1)
581449a wifi: mt76: mt7921: add 6GHz power type support for clc (+46,-1)
9bfd669 wifi: mt76: mt7921: get regulatory information from the clc event (+41,-4)
4a0f839 wifi: mt76: mt7921: update the channel usage when the regd domain changed (+64,-2)
f4df423 wifi: mt76: add ability to explicitly forbid LED registration with DT (+25,-14)
54d369e wifi: mt76: mt7921: support 5.9/6GHz channel config in acpi (+64,-1)
⇒ + 63 more...
e32782b mt76: update to Git HEAD (2023-12-11) (+3,-37)
f63f87c wifi: mt76: mt7996: fix shift overflow warning on 32 bit systems (+7,-3)
4be4d20 mt76: update to Git HEAD (2023-12-18) (+3,-34)
bebd9cf wifi: mt76: mt7921: fix 6GHz disabled by the missing default CLC config (+1)
a39e47e mt76: update to Git HEAD (2024-01-18) (+3,-3)
83e3947 linux-firmware: update firmware for MT7922 WiFi device ()
ddaa8cb linux-firmware: update firmware for MT7921 WiFi device ()
f83b160 linux-firmware: update firmware for MT7922 WiFi device ()
61d334a linux-firmware: add firmware for MT7925 ()
a7836e4 wifi: mt76: disable HW AMSDU when using fixed rate (+3,-1)
a8571eb wifi: mt76: check txs format before getting skb by pid (+8)
3d5890e wifi: mt76: mt7915: fix error recovery with WED enabled (+3,-6)
703c26d wifi: mt76: mt7915: add locking for accessing mapped registers (+41,-5)
f771881 wifi: mt76: mt7915: update mt798x_wmac_adie_patch_7976 (+2,-1)
ffd0074 mt76: update to Git HEAD (2024-02-03) (+80,-172)
a9693e1 linux-firmware: add firmware for MT7996 ()
0258dc9 wifi: mt76: mt7603: fix reading target power from eeprom (+4,-2)
3e81173 wifi: mt76: mt7603: initialize chainmask (+1)
786a339 wifi: mt76: mt7996: fix fortify warning (+2,-1)
bc37a7e wifi: mt76: mt7996: fix fw loading timeout (+2,-1)
027bab6 wifi: mt76: usb: create a dedicated queue for psd traffic (+7,-10)
e8909c6 wifi: mt76: usb: store usb endpoint in mt76_queue (+25,-22)
8b3d96f wifi: mt76: mt792xu: enable dmashdl support (+36,-38)
7864d7a wifi: mt76: mt76x2u: add netgear wdna3100v3 to device table (+1)
27c81f7 wifi: mt76: mt7925: fix connect to 80211b mode fail in 2Ghz band (+1,-3)
b7443c6 wifi: mt76: mt7925: fix SAP no beacon issue in 5Ghz and 6Ghz band (+15,-4)
bab721a wifi: mt76: mt7925: fix mcu query command fail (+5,-1)
1f0f71e wifi: mt76: mt7925: fix wmm queue mapping (+21,-2)
bcfe2ad wifi: mt76: mt7925: fix fw download fail (+1,-1)
f982c3d wifi: mt76: mt7925: fix WoW failed in encrypted mode (+103,-57)
6a72716 wifi: mt76: mt7925: fix the wrong header translation config (+8,-24)
⇒ + 26 more...
2568b30 mt76: backport mt7603 fixes important for its stability (+124,-1)
a9e117e mt76: fix mt7603 compilation (+34,-1)
50148a4 mt76: update to Git HEAD (2024-03-18) (+3,-31)
a903d31 wifi: mt76: mt7921: fix a potential association failure upon resuming (+18)
eb0d0ce wifi: mt76: mt7921: fix suspend issue on MediaTek COB platform (+7)
841bf82 wifi: mt76: fix the issue of missing txpwr settings from ch153 to ch177 (+1,-1)
ce7ccc5 wifi: mt76: Remove redundant assignment to variable tidno (+1,-1)
a238df9 wifi: mt76: mt7915: initialize rssi on adding stations (+4)
46c7d18 wifi: mt76: replace skb_put with skb_put_zero (+6,-6)
b5640b3 wifi: mt76: fix tx packet loss when scanning on DBDC (+11,-8)
7b054e5 wifi: mt76: mt7915: fix mcu command format for mt7915 tx stats (+24,-12)
3f27a64 wifi: mt76: mt7915: fix bogus Tx/Rx airtime duration values (+9,-2)
4f681a8 wifi: mt76: mt7915: fix HE PHY capabilities IE for station mode (+6,-2)
8ede229 wifi: mt76: mt7915: only set MT76_MCU_RESET for the main phy (+1,-3)
2330781 wifi: mt76: mt7996: only set MT76_MCU_RESET for the main phy (+2,-6)
e5fb699 wifi: mt76: mt7915: add support for disabling in-band discovery (+2,-3)
b4a9174 wifi: mt76: mt7915: add mt7986, mt7916 and mt7981 pre-calibration (+147,-33)
2135e20 mt76: mt7915: add fallback in case of missing precal data (+12,-7)
f64576f mt76: update to Git HEAD (2024-04-03) (+4,-301)
605624a mt76: fix path to page_pool helper include (+5,-1)
e4de359 wifi: mt76: mt7603: fix tx queue of loopback packets (+32,-14)
446f652 wifi: mt76: mt7603: add wpdma tx eof flag for PSE client reset (+1)
669aba4 wifi: mt76: mt7915: fix HE PHY capability regression (+1,-1)
5914ea5 wifi: mt76: mt7915: workaround dubious x | !y warning (+2,-1)
e8b5991 wifi: mt76: mt7915: workaround too long expansion sparse warnings (+3,-3)
e507b4e wifi: mt76: mt7921: fix fw used for offload check for mt7922 (+1,-1)
725f531 wifi: mt76: connac: check for null before dereferencing (+1,-1)
b108dda wifi: mt76: mt7996: fix size of txpower MCU command (+6,-2)
5b76164 wifi: mt76: mt7921: introduce mt7920 PCIe support (+22,-3)
0436995 wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (+4,-5)
75759dc wifi: mt76: mt7925: ensure 4-byte alignment for suspend & wow command (+2,-1)
b96ab5e wifi: mt76: mt7996: fix uninitialized variable in mt7996_irq_tasklet() (+1,-1)
7ff11c7 wifi: mt76: sdio: move mcu queue size check inside critical section (+7,-4)
02846a5 wifi: mt76: mt7915: Remove unused of_gpio.h (-1)
cb8df32 wifi: mt76: mt7996: disable rx header translation for BMC entry (+5,-4)
⇒ + 8 more...
e1eac53 mt76: Fix PKG_MIRROR_HASH (+1,-1)
9f3f5cf mt76: mt7996: select required kernel and hostap options (+1,-1)

Miscellaneous (1 change)

f2366d7 .gitignore: ignore link if target is included from feed (+1)

Security fixes

CVE-2014-5461

Description: Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5461
Commits:
507f943 lua: fix CVE-2014-5461 (+48,-26)

CVE-2023-6935

Description: wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher style attack, when built with the following options to configure: --enable-all CFLAGS="-DWOLFSSL_STATIC_RSA" The define “WOLFSSL_STATIC_RSA” enables static RSA cipher suites, which is not recommended, and has been disabled by default since wolfSSL 3.6.6. Therefore the default build since 3.6.6, even with "--enable-all", is not vulnerable to the Marvin Attack. The vulnerability is specific to static RSA cipher suites, and expected to be padding-independent. The vulnerability allows an attacker to decrypt ciphertexts and forge signatures after probing with a large number of test observations. However the server’s private key is not exposed.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6935
Commits:
97c588e wolfssl: update to 5.6.6 (+3,-3)

CVE-2023-6936

Description: In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6936
Commits:
97c588e wolfssl: update to 5.6.6 (+3,-3)

CVE-2023-6937

Description: wolfSSL prior to 5.6.6 did not check that messages in one (D)TLS record do not span key boundaries. As a result, it was possible to combine (D)TLS messages using different keys into one (D)TLS record. The most extreme edge case is that, in (D)TLS 1.3, it was possible that an unencrypted (D)TLS 1.3 record from the server containing first a ServerHello message and then the rest of the first server flight would be accepted by a wolfSSL client. In (D)TLS 1.3 the handshake is encrypted after the ServerHello but a wolfSSL client would accept an unencrypted flight from the server. This does not compromise key negotiation and authentication so it is assigned a low severity rating.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6937
Commits:
97c588e wolfssl: update to 5.6.6 (+3,-3)

CVE-2023-45733

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45733
Commits:
0fb2ee4 firmware: intel-microcode: update to 20240531 (+2,-2)

CVE-2023-45745

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45745
Commits:
0fb2ee4 firmware: intel-microcode: update to 20240531 (+2,-2)

CVE-2023-46103

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46103
Commits:
0fb2ee4 firmware: intel-microcode: update to 20240531 (+2,-2)

CVE-2023-47855

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-47855
Commits:
0fb2ee4 firmware: intel-microcode: update to 20240531 (+2,-2)

CVE-2024-0901

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0901
Commits:
2410b4c wolfssl: Update to 5.7.0 (+3,-3)

CVE-2024-1544

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1544
Commits:
84b000e wolfssl: Update to version 5.7.2 (+5,-3)

CVE-2024-1545

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1545
Commits:
2410b4c wolfssl: Update to 5.7.0 (+3,-3)

CVE-2024-2511

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511
Commits:
4aabbd6 openssl: update to 3.0.14 (+2,-2)

CVE-2024-4603

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603
Commits:
4aabbd6 openssl: update to 3.0.14 (+2,-2)

CVE-2024-4741

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741
Commits:
4aabbd6 openssl: update to 3.0.14 (+2,-2)

CVE-2024-5288

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5288
Commits:
84b000e wolfssl: Update to version 5.7.2 (+5,-3)

CVE-2024-5814

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5814
Commits:
84b000e wolfssl: Update to version 5.7.2 (+5,-3)

CVE-2024-5991

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5991
Commits:
84b000e wolfssl: Update to version 5.7.2 (+5,-3)

CVE-2024-25062

Description: An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25062
Commits:
968d943 libxml2: update to 2.12.5 (+2,-2)

CVE-2024-28960

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28960
Commits:
dee4309 mbedtls: Update to 2.28.8 (+8,-8)