OpenWrt 24.10.8 Changelog

This changelog lists all commits done in OpenWrt since the v24.10.7 tag, grouped by subsystem. The changes are chronologically ordered from top to bottom and cover the Git repository history until the tagging of the 24.10.8 release.

See also the release notes that provide a more accessible overview of the main changes in 24.10.8.

4508dd6 kernel: bump 6.6 to 6.6.142 (+177,-549)
b704cf7 kernel: bump 6.6 to 6.6.143 (+80,-77)
25920e8 kernel: bump 6.6 to 6.6.144 (+61,-145)

886e024 tools/util-linux: include macOS system uuid header (+13)
ee6e56c tools/cmake: backport bootstrap fix for GCC 16 (+33,-2)
0c5fe13 tools: ccache: disable build testing (+2,-1)

81b3344 toolchain: gdb: backport patch to fix build with Clang 21 (+242)
818f696 toolchain: musl: backport patches with CVE fixes (+481,-9)
f05b9f9 toolchain: gcc: 14/15: fix libcody compilation with GCC16 (+500)
35369da toolchain: gcc: fix include memory against GCC 16 (+144)

4508dd6 kernel: bump 6.6 to 6.6.142 (+177,-549)
33a8c1c generic: fix PATH_MAX macro redefined in exec-cmd.c on macOS 15.4 (+13)
b704cf7 kernel: bump 6.6 to 6.6.143 (+80,-77)
25920e8 kernel: bump 6.6 to 6.6.144 (+61,-145)

cd8d701 backport: update dnsmasq to v2.93 from master (+60,-408)
95d0ca0 openssl: update to version 3.0.21 (+5,-5)
3944c02 ead: fix integer underflow in handle_send_a() (+5,-2)
58264cc ead: Increase PKG_RELEASE (+1,-1)
81bc4a3 umdns: update to Git HEAD (2026-05-22) (+3,-3)
⇒ bd7599d fix calloc_a size argument type (+3,-3)
924f06e umdns: update to Git HEAD (2026-06-16) (+3,-3)
⇒ 1b5e7bf cache: bound cache size and clamp hostile TTLs (+51,-2)
452bc24 hostapd: fix security advisory 2026-1 (+215,-14)
262c093 dropbear: backport some security fixes from 2026.90 (+1.0K,-7)
26471f3 busybox: Save shell history into /tmp (+7,-3)
8b29bf4 ca-certificates: update to 20260601 (+2,-2)

9f11fa9 wireless-regdb: update to version 2026.05.30 (+2,-2)

67c5b71 odhcpd: cherry pick patches from main (+1.6K,-11)
b9ad54d odhcp6c: cherry pick patches from main (+804,-1)

f68fa73 uhttpd: cherry pick patches from main (+894,-1)
b421c63 rpcd: cherry pick patches from main (+1.1K,-1)

4508dd6 kernel: bump 6.6 to 6.6.142 (+177,-549)
443ec40 airoha: update PCS driver with new upstream version (+5.8K,-4.0K)

b704cf7 kernel: bump 6.6 to 6.6.143 (+80,-77)

4508dd6 kernel: bump 6.6 to 6.6.142 (+177,-549)
b704cf7 kernel: bump 6.6 to 6.6.143 (+80,-77)

4508dd6 kernel: bump 6.6 to 6.6.142 (+177,-549)
b704cf7 kernel: bump 6.6 to 6.6.143 (+80,-77)
25920e8 kernel: bump 6.6 to 6.6.144 (+61,-145)

4508dd6 kernel: bump 6.6 to 6.6.142 (+177,-549)

8c3c253 ipq806x: ap3935: disable hibernation on LAN1 (+1)

b704cf7 kernel: bump 6.6 to 6.6.143 (+80,-77)
25920e8 kernel: bump 6.6 to 6.6.144 (+61,-145)

b704cf7 kernel: bump 6.6 to 6.6.143 (+80,-77)

b704cf7 kernel: bump 6.6 to 6.6.143 (+80,-77)
25920e8 kernel: bump 6.6 to 6.6.144 (+61,-145)

b704cf7 kernel: bump 6.6 to 6.6.143 (+80,-77)
25920e8 kernel: bump 6.6 to 6.6.144 (+61,-145)

6cfbe53 mac80211: update to version 6.12.96 (+109,-109)

d91a9ac ci: rework and move build-on-comment action (+12)
04fd025 github: github-release: update dependencies (+2,-2)
263acdf github: labeler: Update dependencies (+1,-1)
a30deed CI: migrate to webhook bot and simplify labeler (+28,-32)
7df79b2 CI: remove labeler workflow and enable webhook-based labeling (+2,-20)

Description: OpenWrt 24.10 and MacOS - failing toolchain/gdb
Link: https://github.com/openwrt/openwrt/issues/23122
Commits:
81b3344 toolchain: gdb: backport patch to fix build with Clang 21 (+242)

Description: An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111
Commits:
262c093 dropbear: backport some security fixes from 2026.90 (+1.0K,-7)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6042
Commits:
818f696 toolchain: musl: backport patches with CVE fixes (+481,-9)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7383
Commits:
95d0ca0 openssl: update to version 3.0.21 (+5,-5)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9076
Commits:
95d0ca0 openssl: update to version 3.0.21 (+5,-5)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34180
Commits:
95d0ca0 openssl: update to version 3.0.21 (+5,-5)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34182
Commits:
95d0ca0 openssl: update to version 3.0.21 (+5,-5)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35385
Commits:
262c093 dropbear: backport some security fixes from 2026.90 (+1.0K,-7)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40200
Commits:
818f696 toolchain: musl: backport patches with CVE fixes (+481,-9)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42766
Commits:
95d0ca0 openssl: update to version 3.0.21 (+5,-5)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42770
Commits:
95d0ca0 openssl: update to version 3.0.21 (+5,-5)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45445
Commits:
95d0ca0 openssl: update to version 3.0.21 (+5,-5)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45446
Commits:
95d0ca0 openssl: update to version 3.0.21 (+5,-5)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447
Commits:
95d0ca0 openssl: update to version 3.0.21 (+5,-5)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53918
Commits:
67c5b71 odhcpd: cherry pick patches from main (+1.6K,-11)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53920
Commits:
67c5b71 odhcpd: cherry pick patches from main (+1.6K,-11)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53921
Commits:
67c5b71 odhcpd: cherry pick patches from main (+1.6K,-11)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53922
Commits:
67c5b71 odhcpd: cherry pick patches from main (+1.6K,-11)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55612
Commits:
f68fa73 uhttpd: cherry pick patches from main (+894,-1)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55613
Commits:
f68fa73 uhttpd: cherry pick patches from main (+894,-1)

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55614
Commits:
f68fa73 uhttpd: cherry pick patches from main (+894,-1)