OpenWrt 19.07.7 service release

[Baptiste Jonglez]

Hi,

The OpenWrt community is proud to announce the seventh service release of
OpenWrt 19.07. It fixes security issues, improves device support, and
brings a few bug fixes.

The main changes from OpenWrt 19.07.6 are:

Security fixes
==============

* Security Advisory 2021-02-02-1 - netifd and odhcp6c routing loop on IPv6
  point to point links (CVE-2021-22161)

* Security Advisory 2021-02-02-2 - wolfSSL heap buffer overflow in
  RsaPad_PSS (CVE-2020-36177)

Major bug fixes
===============

* Fix dnsmasq error messages such as "failed to send packet: Network
  unreachable" or "failed to send packet: Address family not supported by
  protocol" that could be filling up logs. This was a regression caused by
  the dnsmasq update in 19.07.6.

* Fix opkg so that it purges obsolete packages from its local cache. This
  fixes a long-standing issue in the ImageBuilder where a manual cleanup
  was needed before rebuilding.

Device support
==============

* Improve stability of mediatek Ethernet switch (affects many mt7621
  devices)

* Fix Wi-Fi band detection on some Broadcom-based devices

* Fix poor 2.4 GHz Wi-Fi performance on TP-Link Archer C50 v4 due to a
  missing EEPROM chip ID

* Make initramfs image usable out-of-the-box on Turris Omnia

* Use full flash size on Nucom R5010UN v2

* Fix support for TP-Link TL-WR810N v1 in ath79

* Remove broken factory image for TP-Link Archer C2 v1

* Fix unintended failsafe mode during boot on Netgear EX6150

Various fixes and improvements
==============================

* The ImageBuilder no longer requires compilers (gcc, g++) and
  libncurses-dev. This was partially implemented in 19.07.6 but one part
  was missing to make it actually work.

* Update to a new major version of ksmbd to fix several bugs. This breaks
  compatibility with previous versions of OpenWrt (19.07.0 to 19.07.6): it
  is no longer possible to install a working version of ksmbd-tools on
  previous versions of OpenWrt. Existing installations will keep working,
  but ksmbd-tools should not be upgraded with opkg.

Unfortunately, this ksmbd update introduced a regression: the kernel
module package for ksmbd depends on the non-existant kmod-crypto-arc4.
If you are affected by this issue, see https://openwrt.org/releases/19.07/notes-19.07.7#regressions
for a workaround.

LuCI web interface
==================

* Fix array sorting on Chrome
* Add nextdns.io and quad 101 providers to luci-app-https-dns-proxy package

Core components
===============

* Update Linux kernel from 4.14.215 to 4.14.221

* Update wolfssl from 4.5.0 to 4.6.0


Full release notes and upgrade instructions are available at
https://openwrt.org/releases/19.07/notes-19.07.7

In particular, make sure to read the regressions and known issues before
upgrading:
https://openwrt.org/releases/19.07/notes-19.07.7#regressions

For a very detailed list of all changes since 19.07.6, refer to
https://openwrt.org/releases/19.07/changelog-19.07.7

For latest information about the 19.07 series, refer to the wiki at:
https://openwrt.org/releases/19.07/

To download a OpenWrt 19.07.7 firmware image for your device, head to the
Table of Hardware:
https://openwrt.org/toh/start

Or use the new firmware selector:
https://firmware-selector.openwrt.org/

You can also navigate directly in the list of firmware images:
https://downloads.openwrt.org/releases/19.07.6/targets/

As always, a big thank you goes to all our active package maintainers,
testers, documenters, and supporters.

Have fun!

The OpenWrt Community

---

To stay informed of new OpenWrt releases and security advisories, there
are new channels available:

 * a low-volume mailing list for important announcements:
https://lists.openwrt.org/mailman/listinfo/openwrt-announce

 * a dedicated "announcements" section in the forum:
https://forum.openwrt.org/c/announcements/14

 * other announcement channels (such as RSS feeds) might be added in the
   future, they will be listed at https://openwrt.org/contact
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.openwrt.org/pipermail/openwrt-devel/attachments/20210218/3b3a1c23/attachment.sig>