Antony Kolitsos
2c8a433cd2
mbedtls: update to 3.6.4
...
This release includes fixes for security issues.
Mbed TLS 3.6 is a long-term support (LTS) branch. It will be supported with bug-fixes and security fixes until at least March 2027.
Security Advisories
For full details, please see the following links:
Race condition in AESNI support detection [1]
Heap buffer under-read when parsing PEM-encrypted material [2]
Unchecked return value in LMS verification allows signature bypass [3]
Out-of-bounds read in mbedtls_lms_import_public_key() [4]
Timing side-channel in block cipher decryption with PKCS#7 padding [5]
NULL pointer dereference after using mbedtls_asn1_store_named_data() [6]
Misleading memory management in mbedtls_x509_string_to_names() [7]
[1] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-1/
[2] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-2/
[3] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-3/
[4] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-4/
[5] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-5/
[6] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-6/
[7] https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2025-06-7/
Signed-off-by: Antony Kolitsos <zeusomighty@hotmail.com >
Link: https://github.com/openwrt/openwrt/pull/19291
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-07-04 11:10:16 +02:00
Thomas Richard
c5c894f7ff
usbgadget: add OS descriptors support
...
Add OS descriptors support. Configuring OS descriptors allows Microsoft
Windows to bind the right drivers without any additional configuration.
Signed-off-by: Thomas Richard <thomas.richard@bootlin.com >
Link: https://github.com/openwrt/openwrt/pull/19237
Signed-off-by: Chuanhong Guo <gch981213@gmail.com >
2025-07-04 09:50:24 +08:00
John Audia
e2cdcf8e46
openssl: update to 3.5.1
...
Automatically rebased: 100-Configure-afalg-support.patch
Changes between 3.5.0 and 3.5.1:
Fix x509 application adds trusted use instead of rejected use.
Issue summary: Use of -addreject option with the openssl x509 application
adds a trusted use instead of a rejected use for a certificate.
Impact summary: If a user intends to make a trusted certificate rejected
for a particular use it will be instead marked as trusted for that use.
(CVE-2025-4575)
Aligned the behaviour of TLS and DTLS in the event of a no_renegotiation
alert being received. Older versions of OpenSSL failed with DTLS if a
no_renegotiation alert was received. All versions of OpenSSL do this for TLS.
From 3.2 a bug was exposed that meant that DTLS ignored no_rengotiation.
We have now restored the original behaviour and brought DTLS back into line
with TLS.
Signed-off-by: John Audia <therealgraysky@proton.me >
Link: https://github.com/openwrt/openwrt/pull/19283
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-07-03 13:03:39 +02:00
Felix Fietkau
d9cd67b542
ubus: update to Git HEAD (2025-07-02)
...
5952b48e251c ubusd: do not call socket callback from ubus_msg_send
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-07-02 19:10:33 +02:00
Thomas Weißschuh
7b954b4901
util-linux: update to v2.41.1
...
Release Notes:
https://www.kernel.org/pub/linux/utils/util-linux/v2.41/v2.41.1-ReleaseNotes
Remove upstreamed:
0001-meson-add-feature-for-translated-documentation.patch
0001-meson-remove-tinfo-dependency-from-more.patch
0100-include-linux-unistd-h.patch
Signed-off-by: Thomas Weißschuh <thomas@t-8ch.de >
Link: https://github.com/openwrt/openwrt/pull/19236
Signed-off-by: Nick Hainke <vincent@systemli.org >
2025-07-01 23:04:15 +02:00
Felix Fietkau
90cd8640bd
ubus: update to Git HEAD (2025-07-01)
...
27839f854a58 ubusd: make txq_len field signed
b35b2bc63e8e ubusd: treat EACCES on write like EAGAIN
713e9d19b2b6 ubusd: retry write on EINTR
8bb523ab20e0 ubusd: fix txq_len accounting
b1b783c74742 ubusd: add another tx attempt on enqueueing the first message for a client
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-07-01 20:48:49 +02:00
Shubham Vishwakarma
52e339b8ed
qualcommax: ipq50xx: Add support for Yuncore AX830
...
Specifications:
SOC: Qualcomm IPQ5018 (64-bit dual-core ARM Cortex-A53 @ 1.0Ghz)
Memory: 512MB DDR3L
Standard: 802.11ax/ac/b/g/n
Flash: SPI NOR 8MB (Winbond W25Q64DW) + NAND 128MB (Winbond W25N01GWZEIG)
2.4G Frequency: 2.4GHz - 2.484GHz
2.4G Wi-Fi standard: 802.11b/g/n/ax
5.8G Frequency: 4.9~5.9G
5.8G Wi-Fi Standard: 802.11 a/n/ac/ax
Interface:
Optional 1(Without 8081):
1 * 10/100 /1000Mbps RJ45 WAN Port and PoE port;
1* Gigabit Console port;
Optional 2(With 8081):
1 * 10/100/1000/2500Mbps RJ45 WAN port and PoE port,
1*10/100/1000Mbps LAN port
Buttons: 1 * Reset button, press 10 seconds to revert to default setting
Antenna: Build in 4*4dBi dual band MIMO Antenna
Data Rate: 3000Mbps (2.4G 600Mbps, 5.8G 2400Mbps)
End Users: 128+
2.4G RF Power: ≤ 23dBm
5.8G RF Power: ≤ 23dBm
DC: 12V----2A
PoE: 48V (IEEE 802.3at)
LED Light: Sys, WAN, LAN
Power Consumption: ≤ 20W
BACKUP YOUR STOCK FIRMWARE:
- Put openwrt-*-initramfs-uImage.itb to your
TFTP server and rename it to initramfs.bin
- Enable serial console and enter to u-boot cli
and exec these commands:
```
tftpboot <your_tftp_server_ip>:initramfs.bin
bootm
```
- Once boot completed and you get the openwrt shell
execute below commands:
```
device=ax830
mkdir -p /tmp/fw_backup; cd /tmp/fw_backup
rootfs=$(cat /proc/mtd | grep \"rootfs\" | cut -d: -f1)
rootfs_1=$(cat /proc/mtd | grep \"rootfs_1\" | cut -d: -f1)
dd if=/dev/${rootfs} of=rootfs_${rootfs} bs=1M
dd if=/dev/${rootfs_1} of=rootfs_1_${rootfs_1} bs=1M
cp /sys/firmware/fdt fdt.dtb
md5sum * > md5sum
tar -cvzf /tmp/${device}.tar.gz .
sum=$(md5sum /tmp/${device}.tar.gz | cut -d' ' -f1)
mv /tmp/${device}.tar.gz /tmp/${device}_${sum}.tar.gz
echo "stock fw backup saved to: /tmp/${device}_${sum}.tar.gz"
```
- Upload/save your backup to a safe place.
STOCK FIRMWARE RECOVERY:
- Boot initramfs image
- Upload your backed-up stock fw tarball to the device
using scp or download it from the device using wget.
- Enter device ssh cli or tty and exec:
```
cd /tmp && wget <your_web_server_ip>/${stock_fw_backup}.tar.gz`
tar -xpzf ${stock_fw_backup}.tar.gz
rootfs=$(cat /proc/mtd | grep \"rootfs\" | cut -d: -f1)
rootfs_1=$(cat /proc/mtd | grep \"rootfs_1\" | cut -d: -f1)
ubiformat /dev/${rootfs} -y -f /tmp/rootfs_${rootfs}
ubiformat /dev/${rootfs_1} -y -f /tmp/rootfs_1_${rootfs_1}
reboot
```
INSTALLATION:
1. initramfs method
- Put openwrt-*-initramfs-uImage.itb to your
TFTP server and rename it to initramfs.bin
- Enable serial console and enter to u-boot cli
and exec these commands:
```
tftpboot <your_tftp_server_ip>:initramfs.bin
bootm
```
- Once boot completed and you get the openwrt shell
execute below commands:
```
cd /tmp && wget <your_web_server_ip>/factory.ubi`
export rootfs=$(cat /proc/mtd | grep rootfs | cut -d: -f1)
export rootfs_1=$(cat /proc/mtd | grep rootfs_1 | cut -d: -f1)
ubiformat /dev/${rootfs} -y -f factory.ubi
ubiformat /dev/${rootfs_1} -y -f factory.ubi
reboot
```
2. u-boot factory.ubi image method
- Put factory.ubi to your TFTP server and
enter u-boot cli and exec these commands:
```
tftpboot <your_tftp_server_ip>:factory.ubi
#After downloading is finished:
flash rootfs
flash rootfs_1
reset
```
Signed-off-by: Shubham Vishwakarma <shubhamvis98@fossfrog.in >
Link: https://github.com/openwrt/openwrt/pull/18968
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-30 14:04:31 +02:00
Robert Marko
6716fbb122
ipq-wifi: update to Git HEAD (2025-06-23)
...
63bd0faafd4a Add IPQ5018 BDF for Yuncore AX830.
Link: https://github.com/openwrt/openwrt/pull/18968
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-30 14:04:31 +02:00
John Audia
99851c7a3f
linux-firmware: update to 20250627
...
% git log --no-merges --pretty=oneline --abbrev-commit 20250613...20250627
cb826c70e912 WHENCE: extract license texts
db6e24385793 WHENCE: expand the advansys license statement
e8a4acb51210 WHENCE: some older AMD drivers are MIT licensed
ebbcfe361cbf qcom: update firmware binary for SM8550
09db581815f8 amdgpu: DMCUB updates for DCN401
c319d6bea7a6 qcom: venus-5.4: add the firmware binary for qcs615
dbfe16e9e8ac Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
cbbce56d6dcc amdgpu: update dmcub fw for dcn401
8c091f4b0ec5 qcom: Add sdx61 Foxconn vendor firmware image file
1c4846b614e0 brcm: Fix symlinks for Khadas VIM SDIO wifi config
f191695a00ba amdgpu: update renoir firmware
c71a6daecc53 amdgpu: update vcn 5.0.0 firmware
72a8d25438c0 amdgpu: update smu 14.0.3 firmware
9f33f83a3245 amdgpu: update sdma 7.0.1 firmware
ef19800204dd amdgpu: update psp 14.0.3 firmware
103e235bafd0 amdgpu: update gc 12.0.1 firmware
f69dbbbd61b1 amdgpu: update navy flounder firmware
839067097384 amdgpu: update psp 14.0.4 firmware
0fde9638f26e amdgpu: update gc 11.5.2 firmware
128b759e5c8f amdgpu: update sienna cichlid firmware
94e718de8906 amdgpu: add raven2 ip discovery firmware
cbd24c08ceff amdgpu: update smu 14.0.2 firmware
fe7f99e3d01b amdgpu: update sdma 7.0.0 firmware
20e709912411 amdgpu: update psp 14.0.2 firmware
0e6cf73ebe2a amdgpu: update gc 12.0.0 firmware
00ce8ee06be2 amdgpu: update vcn 4.0.6 firmware
ed9525cb5743 amdgpu: update psp 14.0.1 firmware
cd7f739592db amdgpu: update gc 11.5.1 firmware
56accbf3cc71 amdgpu: update psp 13.0.11 firmware
03523034b0a5 amdgpu: update gc 11.0.4 firmware
1035014812d6 amdgpu: add picasso ip discovery firmware
7e14bde8ffdf amdgpu: add raven ip discovery firmware
2427860b84e9 amdgpu: update vega20 firmware
c354a0967253 amdgpu: update vega12 firmware
6e36b3917519 amdgpu: update smu 13.0.7 firmware
97e3e9cb4d96 amdgpu: update vcn 4.0.4 firmware
52f8bb5fd748 amdgpu: update psp 13.0.7 firmware
b2f81cf8dd1d amdgpu: update gc 11.0.2 firmware
46646de90c81 amdgpu: update navi14 firmware
6d59ec7d67dd amdgpu: update vega10 firmware
6a451a89f175 amdgpu: update gc 10.3.6 firmware
aa3e04655f08 amdgpu: update smu 13.0.10 firmware
97c3f575f445 amdgpu: update psp 13.0.10 firmware
c58be58dc9b4 amdgpu: update gc 11.0.3 firmware
403f1c578204 amdgpu: update navi12 firmware
a21004dd4edb amdgpu: update vangogh firmware
d45a9e3e51f5 amdgpu: update navi10 firmware
c70bcef9759d amdgpu: add smu 13.0.0 kicker firmware
c5077ee16e2c amdgpu: add psp 13.0.0 kicker firmware
25fbfc9a9fe6 amdgpu: add gc 11.0.0 kicker firmware
9fff2b17d3b1 amdgpu: add vcn 5.0.1 firmware
fea4ac9c76cb amdgpu: add sdma 4.4.4 firmware
8a9e3b47ef3d amdgpu: add psp 13.0.12 firmware
41e2f753b3a7 amdgpu: add gc 9.5.0 firmware
38945107950a amdgpu: add arcturus IP discovery firmware
49447aed4821 amdgpu: update vcn 4.0.0 firmware
734cc9b82e60 amdgpu: update smu 13.0.0 firmware
36934f24c008 amdgpu: update psp 13.0.0 firmware
464402529b3f amdgpu: update gc 11.0.0 firmware
1f9ea1b74498 amdgpu: update psp 13.0.14 firmware
877eed711964 amdgpu: update gc 9.4.4 firmware
a4a2882f0391 amdgpu: update psp 13.0.6 firmware
49105d8ee7e1 amdgpu: update gc 9.4.3 firmware
976433406ee3 amdgpu: update beige_goby firmware
3073095c049f amdgpu: update vcn 4.0.5 firmware
f2f8b021e7ca amdgpu: update gc 11.5.0 firmware
ad90939ad7a8 amdgpu: update vcn 4.0.2 firmware
6937d2e155c9 amdgpu: update gc 11.0.1 firmware
00198a7ab7a8 amdgpu: update dimgrey_cavefish firmware
95f5f3cc1044 amdgpu: update aldebaran firmware
b8369884e1db WHENCE: fix subtly incorrect licensing
a26e413e7481 amdgpu: update dmcub fw for dcn32 and dcn401
3c5341f382e0 mediatek: Update mt8186 SCP firmware
9096bad65cb9 amdgpu: Update DMCUB fw for DCN401 & DCN315
0a0b23e207c9 WHENCE: unify Driver statements
4cb2b59c30c2 qcom: add gpu firmwares for X1P42100 chipset
Build system: x86/64
Build-tested: x86/64
Run-tested: x86/64
Signed-off-by: John Audia <therealgraysky@proton.me >
Link: https://github.com/openwrt/openwrt/pull/19251
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-30 10:37:16 +02:00
xiao bo
fbfca67aee
kernel: allow seamless migration from I40EVF
...
Resolve the issue of seamless migration from I40EVF
link: https://github.com/openwrt/openwrt/pull/19197/files#r2173571237
Signed-off-by: xiao bo <peterwillcn@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/19255
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-29 15:45:52 +02:00
Felix Fietkau
ba2ae60a00
wifi-scripts: ucode: fix invalid generated MAC address
...
macaddr_base can be NULL, in which case it needs to be passed as an empty string
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-27 13:09:17 +02:00
Paweł Owoc
165ca3f375
uboot-tools: move ubootenv_add_ubi_default to common functions
...
The same function is used twice, so let's make it common.
Signed-off-by: Paweł Owoc <frut3k7@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/18818
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-26 23:12:20 +02:00
Paweł Owoc
8aae84757d
uboot-tools: use ubootenv_add_* functions
...
Use ubootenv_add_* functions for code simplification.
Signed-off-by: Paweł Owoc <frut3k7@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/18818
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-26 23:12:20 +02:00
Paweł Owoc
40e4dd5d31
uboot-tools: update ubootenv_add_* functions
...
Add posibility to specify:
- ROOTDEV (mmc)
- number of blocks (mtd)
Signed-off-by: Paweł Owoc <frut3k7@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/18818
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-26 23:12:20 +02:00
Paweł Owoc
68527d87cc
uboot-tools: move ubootenv_add_* functions to common functions
...
Functions ubootenv_add_mtd, ubootenv_add_sys_mtd and ubootenv_add_mmc
can be shared so make them common.
Signed-off-by: Paweł Owoc <frut3k7@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/18818
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-26 23:12:20 +02:00
Felix Fietkau
35a4608a30
wifi-scripts: iwinfo(ucode): add missing null checks
...
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-26 19:44:43 +02:00
Felix Fietkau
fdcb0e0b24
wifi-scripts: fix validation of require_mode
...
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-26 19:18:49 +02:00
Felix Fietkau
945d168dbe
wifi-scripts: fix missing variables for setting frag/rts
...
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-26 19:16:42 +02:00
Mario Andrés Pérez
dc80e69801
uboot-envtools: set nonshared flag correctly per-subpackage
...
Currently, uboot-envtools is being built for a (shared) instruction
set (phase2 in buildbots) instead of target-specific (phase1 in builbots).
So the package does not contain the uci-defaults file specific for each
target_subtarget. (Only the fortunate target with coincidentally the same
instruction set and target as the SDK chosen by the buildbot will have the
uci-defaults file.)
This commit sets the nonshared flag correctly in the Makefile so that
uboot-envtools is built for the target-specific (phase 1).
This is done by using the PKGFLAGS variable which is intended for
per-binary flags (instead of PKG_FLAGS which has a global scope), as
stated in some old commits 349e7b635e[1], 2d7eaf2e15[2], 064e7c8f00[3] and
2cb75cd8b9[4].
While at here, use PKG_URL, instead of URL, which is intended for global
scope. As stated in commit e32edf712b[5].
[1] 349e7b635e
[2] 2d7eaf2e15
[3] 064e7c8f00
[4] 2cb75cd8b9
[5] e32edf712b
Fixes : #19040
Fixes: 46e376c ("uboot-tools: migrate uboot-envtools to uboot-tools")
Signed-off-by: Mario Andrés Pérez <mapb_@outlook.com >
Link: https://github.com/openwrt/openwrt/pull/19180
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-25 20:51:47 +02:00
Felix Fietkau
126dc7ddb9
wifi-scripts: fix another regression in the ucode auth_type changes
...
Clear the right variable
Handle psk2 explicitly
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-25 13:26:59 +02:00
Felix Fietkau
8ad5416d99
wifi-scripts: fix corner case in RSN override support
...
When used, all relevant parameters need to be set
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-25 10:49:05 +02:00
Mantas Pucka
d324d6f07e
qualcommbe: ipq95xx: add 8devices Kiwi-DVK support
...
Specifications:
SoC: Qualcomm IPQ9570
RAM: 1 GiB DDR4
Flash: 4 GiB eMMC
ETH1: 2.5G Maxlinear GPY211C (48V POE-in)
ETH2: 10G Realtek RTL8261N
SFP: 10G SFP+ cage
WLAN1: QCN9274 2.4GHz 802.11b/g/n/ax/be 2x2
WLAN2: QCN9274 5-6GHz 802.11a/n/ac/ax/be 2x2
PCIE0: Gen3x1 mPCIe or M.2(B+M)
PCIE1: Gen3x1 M.2(A+E) or M.2(B+M)
PCIE2: Gen3x2 M.2(A+E)
USB: 1x 3.0
Console: USB-C via FTDI
Button: Reset
Install using sysupgrade:
sysupgrade openwrt-qualcommbe-ipq95xx-8devices_kiwi-dvk-squashfs-sysupgrade.bin
Install using U-Boot:
* Put factory.bin at TFTP server(192.168.2.254) as fwupdate.bin
* Run 'run do_recovery' in U-Boot shell
Signed-off-by: Mantas Pucka <mantas@8devices.com >
Link: https://github.com/openwrt/openwrt/pull/18435
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-25 10:20:38 +02:00
Mantas Pucka
10055976ec
qualcommbe: package PPE and PCS drivers as kmods
...
This will allow more flexibility in using PHY drivers as kmods.
Signed-off-by: Mantas Pucka <mantas@8devices.com >
Link: https://github.com/openwrt/openwrt/pull/18435
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-25 10:20:37 +02:00
Alexandru Gagniuc
597fc65a04
kernel: modules: support Maxlinear GPHY
...
Add support for Maxlinear GPHY module. Also add support for
kmod-polynomial, which is a dependency for this module.
Signed-off-by: Alexandru Gagniuc <mr.nuke.me@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/18435
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-25 10:20:37 +02:00
Daniel Golle
72b895b631
uboot-tools: envtools: ipq806x: add env for IgniteNet SS-W2-AC2600
...
The IgniteNet SunSpot AC Wave2 uses the standard smem-assigned partition
for its bootloader environment.
Signed-off-by: Daniel Golle <daniel@makrotopia.org >
2025-06-25 02:06:57 +01:00
Daniel Golle
2ce1ca11b0
uboot-tools: envtools: ipq806x: ignore case of partition name
...
The qcomsmem MTD partition parser converts all partition names to
lower case while the vendor solution uses upper case names, which
often made their way into OpenWrt as labels in 'fixed-partitions'
(probably due to contributors and reviewers being unaware of the
qcomsmem parsers).
Use case-insensitive matching of the 'APPSBLENV' name to make
ubootenv_mtdinfo() work in both cases.
Signed-off-by: Daniel Golle <daniel@makrotopia.org >
2025-06-25 02:06:57 +01:00
Daniel Golle
d8303b4721
ipq-wifi: add BDF for IgniteNet SS-W2-AC2600
...
The IgniteNet SunSpot AC Wave2 comes with 2x QCA9994 ath10k chips
connected to the IPQ8068 SoC via PCIe.
Add board-2.bin for both radios on this board.
3ac4a64 qca9984: add BDFs for IgniteNet SS-W2-AC2600
Signed-off-by: Daniel Golle <daniel@makrotopia.org >
2025-06-25 02:06:57 +01:00
Felix Fietkau
b48925fd9c
wifi-scripts: add support for RSN overide and use it for improved WPA3 compat
...
Override via RSNE is a relatively new feature, which can be used to enable
WPA3 features in a way that is invisible to older clients.
Use it by default to mask the GCMP-256 cipher from older clients, since
there are compatibility issues with existing devices.
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-24 15:07:23 +02:00
Felix Fietkau
f940f7c1ac
hostapd: preserve vif radio mask for extra bss interfaces
...
Fixes status information and scanning on extra BSS interfaces when operating
on multi-radio devices.
Reported-by: Chad Monroe <chad.monroe@adtran.com >
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-23 11:23:12 +02:00
Konstantin Demin
e3cf7088f1
libcrypt-compat: introduce package
...
glibc 2.39 has removed libcrypt completely.
solution: build libxcrypt with glibc compatibility.
Signed-off-by: Konstantin Demin <rockdrilla@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/19160
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-23 11:19:08 +02:00
Mario Andrés Pérez
47b6b9de1a
base-files: handle packages alternatives when apk removes packages
...
On commit 3010ab8 ("base-files: add update_alternatives function") was
implemented the function to handle ALTERNATIVES when using APK (OPKG
handle it internally) but in commit bcc6415 ("base-files: add
compatibility for APK and OPKG") was only called when adding a package,
so call it also when removing packages.
While we are here, check for a more specific *.alternatives files instead
of *.list, and remove redundant "filelist" variable definition.
Fixes: bcc6415 ("base-files: add compatibility for APK and OPKG")
Fixes: https://github.com/openwrt/openwrt/issues/19090
Fixes: https://github.com/openwrt/openwrt/issues/16991
Reported-and-tested-by: Eric Fahlgren <ericfahlgren@gmail.com >
Signed-off-by: Mario Andrés Pérez <mapb_@outlook.com >
Link: https://github.com/openwrt/openwrt/pull/19093
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-23 09:39:12 +02:00
Eric Fahlgren
fccd1dd0ae
rpcd: update to Git HEAD (2025-06-22)
...
9389775ceb47 rpc-sys: update packagelist call to handle apk abiversion tag
ed0d01e4360b file: linkstat to get link stat info
Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/19211
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-23 09:36:32 +02:00
Mieczyslaw Nalewaj
dc95180540
mt76: Change CRLF to LF in patch 002
...
Change CRLF to LF in patch 002-wifi-mt76-replace-strlcpy-with-strscpy.patch
Fixes: 225622e0f9 ("mt76: replace strlcpy with strscpy")
Signed-off-by: Mieczyslaw Nalewaj <namiltd@yahoo.com >
Link: https://github.com/openwrt/openwrt/pull/19185
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-22 22:57:34 +02:00
INAGAKI Hiroshi
2a3cb0e32d
uboot-envtools: add support for Check Point V-81
...
Add support for Check Point V-81 to add/edit bootcmd variables for
booting OpenWrt.
Signed-off-by: INAGAKI Hiroshi <musashino.open@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/16904
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-22 22:17:20 +02:00
INAGAKI Hiroshi
92a5a4935e
uboot-envtools: add support for Check Point V-80
...
Add support for Check Point V-80 to add/edit bootcmd variables for
booting OpenWrt.
Signed-off-by: INAGAKI Hiroshi <musashino.open@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/16904
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-22 22:17:20 +02:00
INAGAKI Hiroshi
f9743c5190
base-files: add dtb support to emmc_upgrade_tar()
...
Add dtb support for emmc_upgrade_tar() to update dtb separately.
Signed-off-by: INAGAKI Hiroshi <musashino.open@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/16904
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-22 22:17:20 +02:00
INAGAKI Hiroshi
21347caf7e
base-files: add gzip-compressed tar support to emmc_upgrade_tar()
...
Add support for the tar archive compressed by gzip to emmc_upgrade_tar()
function.
Signed-off-by: INAGAKI Hiroshi <musashino.open@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/16904
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-22 22:17:19 +02:00
Niall McGee
07dfb9b710
base-files: ignore initscript output in sysupgrade
...
Suppress output from `/etc/init.d/service enabled` to avoid corrupting
of the sysupgrade tarball.
Fixes: 0ad062a21b ("base-files: sysupgrade: add uci-defaults script disabling services #2 ")
Signed-off-by: Niall McGee <niall.mcgee@bt.com >
Signed-off-by: Daniel Golle <daniel@makrotopia.org >
2025-06-22 19:45:02 +01:00
Josef Schlehofer
e7044dce96
omnia-eeprom: simplify Makefile
...
1. No need to explicitly call the defaults
2. There is efficient way how to set PKG_BUILD_DIR,
which allows to drop PKG_SOURCE_DIR.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/19105
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-22 18:58:49 +02:00
xiao bo
bc6806d31f
kernel: remove expired i40evf drivers
...
In the development history of Intel's drivers, the i40evf driver was later
renamed the iavf driver. For example, some documents mention that
Intel® Network Connections Software Version 24.0 renamed the i40evf
and ixlv drivers to iavf. In subsequent versions, the i40evf driver was
gradually removed, and its functions were taken over by the iavf driver.
In the Linux system, relevant configuration instructions also exist. For
instance, the User Guide for X722 Onboard Network Card states that the
i40evf driver module should be disabled, and the iavf driver should be
installed and used.
blamed commit: 5d81b28a82
Signed-off-by: xiao bo <peterwillcn@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/19197
Signed-off-by: Robert Marko <robimarko@gmail.com >
2025-06-22 09:46:45 +02:00
Felix Fietkau
583f81ef0e
wifi-scripts: enforce management frame protection on 6 GHz
...
Configurations that don't enforce it are rejected by hostapd
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-21 20:34:12 +02:00
Felix Fietkau
254dd7d7d9
wifi-scripts: enable GCMP-256 by default on WPA3/OWE configurations with HE or EHT
...
GCMP-256 support is mandatory with EHT, but HE hardware can already be expected
to support it.
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-21 20:34:09 +02:00
Felix Fietkau
a17c3be409
wifi-scripts: on psk-sae configurations, disable PSK support on 6 GHz
...
This allows sharing a wifi-iface section across bands while enforcing the no-PSK
rule for 6 GHz
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-21 20:34:06 +02:00
Felix Fietkau
91a50b27bc
unetmsg: make remote connection TCP timeout more aggressive
...
It is meant for reliable network connections, so requests should fail
early if a node goes down.
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-21 17:12:46 +02:00
Thomas Richard
74011c5c1c
kernel: modules: iio: package industrialio-backend module
...
The stm32-dfsdm-adc module depends on it (kernel 6.12).
Signed-off-by: Thomas Richard <thomas.richard@bootlin.com >
Link: https://github.com/openwrt/openwrt/pull/18740
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-21 14:28:42 +02:00
Wei-Ting Yang
8ef981698e
util-linux: add wdctl
...
Add the wdctl utility.
Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/19041
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-21 14:13:44 +02:00
Wei-Ting Yang
695548128f
util-linux: remove redundant slashes
...
Remove redundant slashes.
Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com >
Link: https://github.com/openwrt/openwrt/pull/19041
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-21 14:04:20 +02:00
Mathew McBride
3e5a70482b
kernel: enable memory mapped TPM interface on armsr
...
The memory mapped TPM interface (TIS) can be used for
emulated or virtualized TPM instances with QEMU and
a simulation package like swtpm.
On QEMU the device will appear in the device tree
with a "tcg,tpm-tis-mmio" compatible.
For example:
qemu-system-aarch64 -machine virt -cpu max \
-bios u-boot.bin \
-nographic \
.... \
-hda openwrt-armsr-armv8-combined-efi.img \
-chardev socket,id=chrtpm,path=/tmp/mytpm/swtpm-sock \
-tpmdev emulator,id=tpm0,chardev=chrtpm \
-device tpm-tis-device,tpmdev=tpm0
Signed-off-by: Mathew McBride <matt@traverse.com.au >
Link: https://github.com/openwrt/openwrt/pull/19188
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-21 14:00:36 +02:00
Shiji Yang
0ef4c3dfa0
uboot-envtools: cns3xxx: remove config file
...
This file is a leftover of cns3xxx target which has been dropped
in commit a9790dff53 ("cns3xxx: drop target").
Signed-off-by: Shiji Yang <yangshiji66@outlook.com >
Link: https://github.com/openwrt/openwrt/pull/19191
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de >
2025-06-21 13:57:06 +02:00
Felix Fietkau
bbd95c0523
ucode: add ubus refcounting fix
...
Fixes a regression in the last ucode update
Signed-off-by: Felix Fietkau <nbd@nbd.name >
2025-06-20 22:54:32 +02:00