OpenWrt 19.07.3 - Service Release - 20 May 2020

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 19.07.3, r11063-85e04e9f46
 -----------------------------------------------------

The OpenWrt community is proud to announce the third service release of OpenWrt 19.07. It focuses on security, stability and device support.

The OpenWrt project is a Linux operating system targeting embedded devices. It is a complete replacement for the vendor-supplied firmware of a wide range of wireless routers and non-network devices. See the Table of Hardware for supported devices. For more information about OpenWrt project organization, see the About OpenWrt pages.

Get OpenWrt firmware images at: https://downloads.openwrt.org/releases/

Only the main changes are listed below. See changelog-19.07.3 for the full changelog.

• Security Advisory 2020-05-06-2 - relayd out-of-bounds reads of heap data and possible buffer overflow (CVE-2020-11752)
• Security Advisory 2020-05-06-1 - umdns out-of-bounds reads of heap data and possible buffer overflow (CVE-2020-11750)
• libjson-c: fix out of bounds write vulnerability (CVE-2020-12762)
• Other security fixes

Note: security fixes for packages can also be applied by upgrading only the affected packages on running devices, without the need for a full firmware upgrade. This can be done with opkg update; opkg upgrade the_package_name or through the LuCI web interface.

Nevertheless, we encourage all users to upgrade their devices to OpenWrt 19.07.3 whenever possible.

• opkg: reduce memory usage: this should fix “Out of memory” issues when running opkg update, see FS#2734
• Services: respawn rpcd automatically if it crashes or stops
• Services: fix DNSSEC+NTP chicken-and-egg workaround in dnsmasq

• Add support for Luxul XAP-1610 and Luxul XWR-3150
• Add support for more devices in ath79: TP-Link TL-WR740N v5, TP-Link Archer C60 v3, TP-Link WDR3500 v1, TP-Link TL-WA850RE v1, TP-Link TL-WA860RE v1, TP-Link TL-WDR4310 v1

• Fix ar71xx - ath79 sysupgrade for some devices: TP-Link TL-WA901ND v2, TP-Link TL-WDR4900 v2, TP-Link TL-WR810N v1/v2, TP-Link TL-WR842N/ND v1, TP-Link TL-WR740N v1/v2/v3/v4/v5, TP-Link TL-WR741N/ND v1/v2, TP-Link TL-WR743ND v1, TP-Link TL-WR841N/ND v5/v6, TP-Link TL-WR941N/ND v2/v3/v4
• Various fixes and improvements for several devices: AVM FRITZ Repeater 450E, TP-Link Archer C7, TP-Link Archer C60 v1/v2, TP-Link TL-MR3040 v2, GL.iNet GL-AR750S, Mikrotik RB951G-2HnD, ZyXEL Keenetic, Embedded Wireless Dorin, Traverse LS1043, SolidRun ClearFog
• Fix “Illegal instruction” issues on some mvebu (Marvell Armada 370 CPU) and tegra2 devices: Globalscale Mirabox, CompuLab TrimSlice, possibly others
• Fix factory images for bcm53xx-based Asus devices
• Fix hang after reboot on OXNAS devices
• Fix multicast traffic not reaching the CPU for devices with a ar8229/ar8236 switch (FS#2848)
• Fix support for the 256M variant of ZBT MT7621
• Improve extraction of wireless calibration data (ath9k/ath10k) on Mikrotik devices
• Optimise sysupgrade process on bcm53xx to save space on tmpfs

• Services: add scriptarp option to dnsmasq that allows to run scripts in /etc/hotplug.d/neigh/ on arp-add and arp-del events
• Kernel: backport out-of-memory fix for non-Ethernet devices
• Build: fix build with GCC 10

See addressed_bugs for a complete list of bug fixes.

• Greatly improve loading performance when using LuCI with HTTPS (see uhttpd commit for details)
• Allow to configure WPA3 modes for Wi-Fi (#3363)
• Improve internationalisation by introducing support for plural translations and context
• Update translations from weblate
• Many additional bug fixes and improvements

• Update Linux kernel from 4.14.171 to 4.14.180
• Update mac80211 to version 4.19.120
• Update mt76 Wi-Fi driver to latest version
• Update wireless-regdb
• Update fstools to latest version
• Update openssl to 1.1.1g
• Update mbedtls to 2.16.6

• libubox regression: procd may fail to start or restart some services due to a regression in libubox (thread)

• Transition to ath79: several devices that are supported in ar71xx are not yet supported in ath79: this is a community effort. Helping to port devices to ath79 to make them available in future releases is very welcome.
• Device support: images for some device became too big to support a persistent overlay, causing such devices to lose configuration after a reboot. If you experience this problem, please report the affected device in the forum and consider downgrading to OpenWrt 18.06 or using the Image Builder to pack a smaller custom image
• Device support: unstable Ethernet link with atheros switch on some ath79 devices (such as TL-WR841N): FS#2216, FS#2730
• LuCI web interface: some optional GUI packages crash with an error about missing “cbi.lua”, install the luci-compat package to fix these
• LuCI web interface: due to changes in menu rendering, a logout/login cycle or device reboot might be required to make additional menu items appears after package installation (GH#4077)

See also: active bug reports for openwrt-19.07

Upgrading from previous OpenWrt 19.07 versions is straightforward thanks to the sysupgrade utility: sysupgrade from web interface or sysupgrade from command-line.

An upgrade from OpenWrt 18.06 to OpenWrt 19.07 is supported in many cases, including preserving configuration. A configuration backup is advised nonetheless when upgrading from OpenWrt 18.06.