OpenWrt v19.07.1 Changelog

This changelog lists all commits done in OpenWrt since the v19.07.0 tag, grouped by subsystem. The changes are chronologically ordered from top to bottom and cover the Git repository history until the tagging of the 19.07.1 release.

19ff3f5 ath79: add support for the TP-LINK CPE220 V3 (+233,-125)
abaf329 tools: tplink-safeloader: update soft_ver for TP-Link Archer C6 v2 (EU) (+1,-1)

9298c44 kernel: bump 4.14 to 4.14.164 (+124,-124)
945db9f kernel: bump 4.14 to 4.14.165 (+3,-3)
ae95344 kernel: bump 4.14 to 4.14.166 (+4,-4)
1c5ac59 kernel: bump 4.14 to 4.14.167 (+7,-7)
8ab2b42 kernel: fix dst reference leak in flow offload (+12,-11)

a1502b0 uboot-envtools: ar71xx: add support for gl-ar150/-domino/-mifi (+5)
177c9ed uboot-envtools: ath79: add support for glinet,gl-ar150 (+3)

44c8272 ethtool: fix PKG_CONFIG_DEPENDS (+1,-1)
25e1afb ucert: update to version 2019-12-19 (+3,-3)
⇒ fa0bf4e cmake: add proper include and library dependencies (+9,-3)
⇒ 7e53906 add initial GitLab CI support (+6)
⇒ e284ed9 cmake: enable hardening compiler flags and fix the reported issues (+18,-8)
⇒ 5d7626a cmake: reindent the file (+7,-7)
⇒ 5fe64b5 cmake: split usign bits into static library (+5,-3)
⇒ 4462ff9 add cram based unit tests (+114)
⇒ 9dba44d fix possibly garbage value returned in cert_process_revoker (+1,-1)
⇒ 19a7225 fix leaking memory in cert_dump_blob (+8,-1)
⇒ 14a2794 fix certificate blob parsing vulnerability by using blob_parse_untrusted (+1,-1)
dd4d49d cryptodev-linux: remove DEFAULT redefinition (-1)
455ba76 hostapd: cleanup IBSS-RSN (+2,-6)
1636e99 urngd: update to latest Git head (+4,-4)
⇒ d474977 Add initial GitLab CI support (+7)
⇒ 193586a Fix wrong types in format strings used in debug build (+2,-2)
⇒ 9e758e6 jitterentropy-rngd: update to version v1.1.0 + clang compile fix (+1,-1)
⇒ 40f939d Tag version 1.0.1 (+1,-1)
eed8f30 urngd: update to version 2020-01-21 (+3,-3)
⇒ 236b7a0 Fix blocked entropy generation (+5,-3)
⇒ c7f7b6b Tag version 1.0.2 (+1,-1)
4a58a87 hostapd: fix faulty WMM IE parameters with ETSI regulatory domains (+88)
6ee0138 mbedtls: update to 2.16.4 (+24,-24)
3212290 lantiq: ltq-ptm: vr9: fix skb handling in ptm_hard_start_xmit() (+4,-1)
c155900 opkg: update to latest Git HEAD (+3,-3)
⇒ 80d161e opkg: Fix -Wformat-overflow warning (+1,-2)
⇒ c09fe20 libopkg: fix skipping of leading whitespace when parsing checksums (+2,-2)

5ca066a fstools: backport fix from version 2020-01-18 (+3,-3)
⇒ 189b41b libblkid-tiny: fix f2fs labels by increasing label buffer (+1,-1)
f8902d1 libubox: update to version 2020-01-20 (+3,-3)
⇒ 379cd33 tests: include json script shunit2 based testing (+1.3K)
⇒ 20a070f tests: blobmsg/json: add more test cases (+275,-27)
⇒ f0da3a4 blobmsg_json: fix int16 serialization (+13,-13)
⇒ a36ee96 blobmsg: blobmsg_add_json_element() 64-bit values (+24,-18)
⇒ b0886a3 cmake: add a possibility to set library version (+6)
⇒ a2aab30 jshn: prefer snprintf usage (+9,-7)
⇒ 132ecb5 blobmsg: blobmsg_vprintf: prefer vsnprintf (+8,-1)
⇒ 1ffa415 blobmsg_json: prefer snprintf usage (+50,-30)
⇒ 5c0faaf tests: prefer dynamically allocated buffers (+55,-21)
⇒ 43a103f blobmsg: blobmsg_parse and blobmsg_parse_array oob read fixes (+56,-20)
8038846 procd: update to version 2020-01-24 (+4,-4)
⇒ 153820c instance: fix pidfile and seccomp attributes double free (+20,-2)
⇒ 44dd941 instance: fix typo in error message (+1,-1)
⇒ 0a11aa4 instance: Fix instance_config_move_strdup() function (+4,-5)
⇒ 557f11b instance: provide error feedback if ujail binary is missing (+7,-2)
⇒ 31e4b2d state: fix reboot causing shutdown inside LXC container (+30,-22)

67c8e58 ar71xx/mikrotik: use ath10k-ct-smallbuffers for 64 MiB devices (+1,-1)
9298c44 kernel: bump 4.14 to 4.14.164 (+124,-124)
1b4b4e3 ar71xx: ubnt-rocket-m-ti: fix RSSI LED definitions (+8,-6)
b6675c2 ar71xx: change u-boot-env to read-write for gl-ar150/-domino/mifi (+3,-3)
1c5ac59 kernel: bump 4.14 to 4.14.167 (+7,-7)

19ff3f5 ath79: add support for the TP-LINK CPE220 V3 (+233,-125)
bd3eb07 ath79: add support for TP-Link TL-WR841N/ND v10 (+26,-3)
7a0d9b2 ath79: add support for TP-Link TL-WR841N/ND v12 (+48,-23)
fd28ef5 ath79: add SUPPORTED_DEVICES for TP-Link TL-WR841N/ND v9 to v12 (+4)
9298c44 kernel: bump 4.14 to 4.14.164 (+124,-124)
1c5ac59 kernel: bump 4.14 to 4.14.167 (+7,-7)
da5b5ae ath79: remove SUPPORTED_DEVICES for TP-Link Archer D50 v1 (-1)
4793594 ath79: fix SUPPORTED_DEVICES not matching ar71xx board names (+8,-11)

9298c44 kernel: bump 4.14 to 4.14.164 (+124,-124)
1c5ac59 kernel: bump 4.14 to 4.14.167 (+7,-7)

d3c2547 brcm47xx: fix switch port order for Netgear WNR3500 V2 (+1)
c1245eb brcm47xx: fix switch port order for Netgear WN2500RP V1 (+5)

9298c44 kernel: bump 4.14 to 4.14.164 (+124,-124)

f638ef4 kirkwood: fix HDD LED labels for Zyxel NSA325 in 01_leds (+2,-2)

9298c44 kernel: bump 4.14 to 4.14.164 (+124,-124)
ae95344 kernel: bump 4.14 to 4.14.166 (+4,-4)

08d9828 ramips: fix leds for TP-Link Archer C20 v4 (+3,-2)
fe197b8 ramips: mt7621: disable images for gehua_ghl-r-001 (+1)
e18c87e ramips: fix wps leds/btn for TP-Link TL-WA801ND v5 (+16,-4)
a885f7d ramips: add kmod-mt7615e to Xiaomi Mi Router 3 Pro images (+5,-3)
03c35bd ramips: fix HiWiFi HC5962 switch configuration (+4,-1)
d46b00c ramips: fix HiWiFi HC5962 status LED (+4,-3)
9c6913c ramips: add mt7615e support to Netgear R6350 (+10,-1)
67595ce ramips: add factory image for Netgear R6350 (+6,-1)
d3eabe4 ramips: mt7620/mt7621: remove invalid mediatek,portmap (+2,-3)
49b240c ramips: fix portmap for TP-Link Archer C50 v4 (+1,-1)
1d56a7b ramips: mt76x8: fix bogus mediatek,portmap (+58,-13)
f6ab1f1 ramips: rt305x: remove unnecessary mediatek,portmap (-2)
4e91c4e ramips: mt7621: ubnt-erx: allow sysupgrade from master (+2)

9298c44 kernel: bump 4.14 to 4.14.164 (+124,-124)

a3b6ffe mac80211: fix sta TID stats leak on a few nl80211 calls (+21)
44b3777 mac80211: fix a page refcounting issue leading to leaks/crashes in rx A-MSDU ... (+25)
f84981f mac80211: Update to version 4.19.98 (+74,-570)

Description: procd: reboot inside lxc container causes shutdown
Link: https://bugs.openwrt.org/index.php?do=details&task_id=2666
Commits:
8038846 procd: update to version 2020-01-24 (+4,-4)
⇒ 153820c instance: fix pidfile and seccomp attributes double free (+20,-2)
⇒ 44dd941 instance: fix typo in error message (+1,-1)
⇒ 0a11aa4 instance: Fix instance_config_move_strdup() function (+4,-5)
⇒ 557f11b instance: provide error feedback if ujail binary is missing (+7,-2)
⇒ 31e4b2d state: fix reboot causing shutdown inside LXC container (+30,-22)

Description: Bad 5 GHz Wi-Fi performance with some wireless NICs (hostapd 2.9)
Link: https://bugs.openwrt.org/index.php?do=details&task_id=2679
Commits:
4a58a87 hostapd: fix faulty WMM IE parameters with ETSI regulatory domains (+88)

Description: Kernel panic during boot on Gehua ghl-r-001
Link: https://bugs.openwrt.org/index.php?do=details&task_id=2695
Commits:
fe197b8 ramips: mt7621: disable images for gehua_ghl-r-001 (+1)

Description: After libubus/ubox: procd - failed to open/remove pidfile and/or crashing
Link: https://bugs.openwrt.org/index.php?do=details&task_id=2723
Commits:
8038846 procd: update to version 2020-01-24 (+4,-4)
⇒ 153820c instance: fix pidfile and seccomp attributes double free (+20,-2)
⇒ 44dd941 instance: fix typo in error message (+1,-1)
⇒ 0a11aa4 instance: Fix instance_config_move_strdup() function (+4,-5)
⇒ 557f11b instance: provide error feedback if ujail binary is missing (+7,-2)
⇒ 31e4b2d state: fix reboot causing shutdown inside LXC container (+30,-22)

Description: block command throws error with f2fs
Link: https://bugs.openwrt.org/index.php?do=details&task_id=2735
Commits:
5ca066a fstools: backport fix from version 2020-01-18 (+3,-3)
⇒ 189b41b libblkid-tiny: fix f2fs labels by increasing label buffer (+1,-1)

Description: Device tl-wr2543n not supported while upgrading from ar71xx to ath79
Link: https://bugs.openwrt.org/index.php?do=details&task_id=2751
Commits:
4793594 ath79: fix SUPPORTED_DEVICES not matching ar71xx board names (+8,-11)

Description: R3P Xiaomi Wireless don't work
Link: https://bugs.openwrt.org/index.php?do=details&task_id=2755
Commits:
a885f7d ramips: add kmod-mt7615e to Xiaomi Mi Router 3 Pro images (+5,-3)

Description: The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18222
Commits:
6ee0138 mbedtls: update to 2.16.4 (+24,-24)

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7982
Commits:
c155900 opkg: update to latest Git HEAD (+3,-3)
⇒ 80d161e opkg: Fix -Wformat-overflow warning (+1,-2)
⇒ c09fe20 libopkg: fix skipping of leading whitespace when parsing checksums (+2,-2)