OpenWrt 18.06.7 - Service Release - 31 January 2020

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 18.06.7, r7976-ca47026b7d
 -----------------------------------------------------

The OpenWrt Project is a Linux operating system targeting embedded devices. It is a complete replacement for the vendor-supplied firmware of a wide range of wireless routers and non-network devices. See the Table of Hardware for supported devices. For more information about OpenWrt project organization, see the About OpenWrt pages.

Get OpenWrt Firmware at: https://downloads.openwrt.org/releases/

The OpenWrt Community is proud to announce the seventh service release of the stable OpenWrt 18.06 series. OpenWrt 18.06.7 brings important security fixes, as well as the usual device support fixes and core components update.

The main highlights of this service release are:

• Security Advisory 2020-01-31-2 - libubox tagged binary data JSON serialization vulnerability (CVE-2020-7248)
• Security Advisory 2020-01-31-1 - Opkg susceptible to MITM (CVE-2020-7982)
• Security fixes for other packages: security_fixes
• Linux kernel updated from 4.9.208 to 4.9.211 and from 4.14.162 to 4.14.167
• Device support fixes for several devices: Zyxel NSA325, Netgear WN2500RP v1, Netgear WNR3500 v2, HiWiFi HC5962

For more details, please see the detailed Changelog.

Note that updates to the package feeds are available immediately to all minor releases of OpenWrt: there is no need to upgrade to a new OpenWrt image to install newer versions of a package. This applies to core OpenWrt packages as well as community-maintained packages.

As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.

Have fun!

The OpenWrt Community