An update to the OpenWrt 23.05.3 distribution has been published, aimed at use in various network devices such as routers, switches and access points. OpenWrt supports many different platforms and architectures and has an assembly system that allows for simple and convenient cross-compilation, including various components in the assembly, which makes it easy to create ready-made firmware or a disk image with the desired set of pre-installed packages adapted for specific tasks. Assemblies are generated for 35 target platforms.
Main changes in OpenWrt 23.05.3:
- mwlwifi, a wifi driver for Marvell chips, adds support for WPA3 wireless network security technology.
- Added support for new devices:
- ath79:
- UniFi UK-Ultra
- mediatek:
- Acelink EW-7886CAX
- ASUS RT-AX59U
- ASUS TUF AX6000
- Buffalo WSR-3200AX4S
- Cetron CT3003
- Confiabits MT7981
- Cudy RE3000 v1
- D-Link EAGLE PRO AI M32
- GL.iNet GL-MT6000
- JCG Q30 PRO
- Routerich AX3000
- TP-Link EAP225v5
- Ubiquiti UniFi 6 Plus
- Zbtlink ZBT-Z8102AX
- ZyXEL EX5700 (Telenor)
- ramips:
- Cudy WR1300 v3
- D-Link COVR-X1860 A1
- Rostelecom RT-FE-1A
- Rostelecom RT-FL-1 (Sercomm RT-FL-1)
- Rostelecom S1010 (Sercomm S1010.RT)
- TP-Link EX220 v1
- YunCore G720
- Z-ROUTER ZR-2660
- ath79:
- Issues have been resolved for Netgear GS110TPP, IEI-World Puzzle M90x, Sercomm NA502, Unielec u7621-01, Ctera C200 V1, Mercusys MR90X v1, Loco M5 XW, TP-Link TL-WDR3600 and TL-WDR4300 devices.
- The amount of available memory has been increased when running on the Extreme Networks WS-AP3825i device.
- Improved Ethernet stability in Orange Pi R1 Plus and devices based on Mediatek MT7981 and MT7986 chips.
- Added firmware for Mediatek MT7922 chips.
- The Dropbear SSH server has improved data transfer speed when using the scp utility.
- The kernel includes patches for loading Aquantia PHY firmware.
- Kernel versions have been updated Linux 5.15.150, dnsmasq 2.90, mbedtls 2.28.7, openssl 3.0.13, mwlwifi 2023-11-20, mt76 2023-09-11, netifd 2024-01-04, jsonfilter 2024-01-23, bcm27xx-gpu-fw 2024-01-11, wireless-regdb 2024.01.23, intel-microcode 20240312.
- Fixed vulnerabilities: integer overflow (CVE-2023-36328) and missing packet integrity check (CVE-2023-48795 - Terrapin attack) in Dropbear SSH; NSEC3 vulnerability in dnsmasq's DNSSEC implementation (CVE-2023-50868).
Additionally, it is worth noting the release of a specialized DietPi 9.2 distribution, designed for use on single-board PCs based on ARM and RISC-V architectures, such as Raspberry Pi, Orange Pi, NanoPi, BananaPi, BeagleBone Black, Rock64, Rock Pi, Quartz64, Pine64, Asus Tinker, Odroid and VisionFive 2. The distribution is built on a package base Debian and is available in builds for over 50 boards. DietPi can also be used to create compact environments for virtual machines and regular PCs based on the x86_64 architecture. The board builds are compact (130 MB on average) and take up less storage space than Raspberry Pi OS and Armbian. The tools for building and maintaining the distribution are licensed under the GPLv2.
The new version expands the capabilities of assemblies for NanoPi R4S boards. In the interface for installing DietPi-Software applications, it is possible to run a command to display a list of packages, regardless of the presence of another instance of the application already running (for example, viewing the list of applications in DietPi-Dashboard no longer leads to freezing if DietPi-Software is already running in the terminal). DietPi-Software also added the ability to access repositories via SSH during the installation and reinstallation stages. Information about the amount of free RAM has been added to various utilities supported by the project, such as the DietPi-Config configurator, the DietPi-Backup backup system, the interface for setting the priorities of DietPi-Services processes, and the DietPi-Update update delivery system.
Source: opennet.ru
