OpenWrt 18.06.5 - Fifth Service Release - 8 November 2019

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 18.06.5, r7897-9d401013fc
 -----------------------------------------------------

The OpenWrt Project is a Linux operating system targeting embedded devices. It is a complete replacement for the vendor-supplied firmware of a wide range of wireless routers and non-network devices. See the Table of Hardware for supported devices. For more information about OpenWrt project organization, see the About OpenWrt pages.

Get OpenWrt Firmware at: https://downloads.openwrt.org/releases/

The OpenWrt Community is proud to announce the fifth service release of the stable OpenWrt 18.06 series. OpenWrt 18.06.5 incorporates security updates for base packages, new versions of the Linux kernel, a bug fix related to signature verification, and fixes for various devices.

Some selected highlights of this service release are:

• Linux kernel updated from 4.9.184 to 4.9.198 and from 4.14.131 to 4.14.151, including security fixes
• Security fixes for LuCI, the web interface bundled with OpenWrt, fixing CRSF and XSS bugs
• Security fixes for the following base packages: musl, hostapd, wolfssl, openssl, iptables, ustream-ssl, libpcap, tcpdump, bzip2
• Wireless fixes for the brcmfmac driver, fixing crashes and facilitating debug (backported from Linux 5.4)
• Fix signature verification bug: in rare cases, usign would refuse a valid signature, making it impossible to install packages from an opkg feed. This bug has been fixed in usign, and a workaround has been implemented when generating package indexes, so that devices using an unfixed version of usign don't encounter this bug
• Device support fixes for several devices: WNR2200, WPJ531, HiveAP 121, DIR-615 H1

For more details, please see the detailed Changelog.

Note that updates to the package feeds are available immediately to all minor releases of OpenWrt: there is no need to upgrade to a new OpenWrt image to install newer versions of a package. This applies to core OpenWrt packages as well as community-maintained packages.

As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.

Have fun!

The OpenWrt Community