Firmware-update: OpenWrt 24.10.3

Versie 24.10.3 van OpenWrt is uitgekomen. OpenWrt is alternatieve opensourcefirmware voor een groot aantal verschillende routers en embedded devices. Door middel van het opkg-packagemanagementsysteem is er de mogelijkheid om zelf te bepalen wat de router allemaal wel en niet kan. Ook op GoT zijn er diverse mensen actief mee bezig: zie daarvoor dit topic. Bijwerken van de versie kan met een Attended Sysupgrade, handmatig met een voorgecompileerde firmwareversie van het apparaat dat je gebruikt of compileer je eigen variant met de firmwareselectie. De changelog voor deze uitgave kan hieronder worden gevonden.

Device support

• Added new devices:
  • mediatek: Cudy TR3000 256MB v1 flash version
  • mediatek: Huasifei WH3000 Pro
  • mediatek: ipTIME AX3000Q
  • mediatek: ipTIME AX3000SM
  • mediatek: OpenFi 6C
  • mediatek: Zbtlink ZBT-Z8102AX v2
  • qualcommax: ipq807x: Linksys HomeWRK
  • ramips: Hongdian H7920 v40
  • rockchip: Radxa ROCK 4C+
  • rockchip: Radxa ROCK 4SE
• armsr: Fix problem creating kthread in boot up on qemu
• armsr: Fix serial console regression on device tree systems
• ath79: COMFAST CF-EW71 v2: Fix LED GPIOs
• ath79: MikroTik hAP ac: Enable USB by default
• ath79: Ubiquiti: Fix flash write unlock on multiple devices
• ath79: Xiaomi AIoT AC2350: Fix 5GHz Wifi
• imx: Add device tree overlay support
• ipq40xx: Reduce SPI clock frequency to 24MHz
• lantiq: DSL: Fix reading downstream band borders
• lantiq: Fix occasional kernel panic in ltq-adsl driver
• mediatek: Cudy tr3000 v1: Add ubootmod layout
• mediatek: Fix tx vlan tag for llc packets
• mediatek: mt7981: Reduce DMA memory usage regression
• mediatek: mt7986: Reduce DMA memory usage regression
• mediatek: Prevent PPE flow tables to leak across reboots
• mediatek: Ruijie RG-X60 Pro: Fix LAN port status light
• mediatek: Xiaomi AX3000T: Fix Foresee NAND
• mpc85xx: TP-Link: TL-WDR4900: Add back 5ghz LED
• ramips: mt7621: Reduce DMA memory usage regression
• ramips: rt5350: Reduce DMA memory usage regression
• ramips: TP-Link mr600: Fix 5 GHz Wifi
• realtek: Avoid interrupt storm on mass packet receive
• realtek: Fix stall after restart of otto timer
• rockchip: Fix for MSI/MSI-X bug: no MSI/MSI-X, Back to INTx.
• rockchip: NanoPC-T6 with A3A444 chips: Fix eMMC corruption
• rockchip: rk35xx: Increase the number of serial ports
• tegra: Bring back workaround for spurious interrupts
• x86: Fix boot problems by activating CONFIG_PCI_MMCONFIG

Various fixes and improvements

• busybox: Fix login applet on selinux
• hostapd: Reduce debug logging
• kernel: Add support for FudanMicro FM25S01A SPI-NAND
• kernel: Fix netdev trigger for PHY LEDs
• mac80211: Improve WiFi-7 TX performance
• mt76: Improve system recovery routine for MT7915
• wifi-scripts: Correctly set basic-rates with wpa_supplicant

Core components update

• Linux kernel: update from 6.6.93 to 6.6.104
• mac80211: update from 6.12.6 to 6.12.44
• mt76: update from 2025-02-14 to 2025-09-15
• kmod-r8125: update from 9.016.00 to 9.016.01
• kmod-r8126: update from 10.015.00 to 10.016.00
• kmod-r8127: update from 11.014.00 to 11.015.00
• libubox: update from 2024-12-19 to 2025-07-23
• udebug: update from 2023-12-06 to 2025-08-24
• ucode: update from 2025-05-11 to 2025-07-18
• uhttpd: update from 2023-06-25 to 2025-07-06
• uqmi: update from 2024-08-25 to 2025-07-30
• rpcd: update from 2024-09-17 to 2025-09-01
• ubus: update from 2025-05-16 to 2025-07-02
• libxml2: update from 2.13.6 to 2.14.5
• mbedtls: update from 3.6.3 to 3.6.4
• openssl: update from 3.0.16 to 3.0.17
• ca-certificates: update from 20241223 to 20250419
• wireless-regdb: update from 2025.02.20 to 2025.07.10

Versienummer	24.10.3
Releasestatus	Final
Website	OpenWrt
Download	https://firmware-selector.openwrt.org
Licentietype	GPL

Reacties (2)

[topper007]

In deze release zijn ook 9 beveiligingslekken (CVEs) gedicht. Advies is dan ook om zo snel mogelijk te updaten/upgraden

Zie deze pagina voor meer informatie: https://openwrt.org/releases/24.10/changelog-24.10.3#security_fixes

Het lijstje:

CVE-2025-0395

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0395
Commits:
toolchain: glibc: Update glibc 2.38 to recent HEAD

CVE-2025-4802

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4802
Commits:
toolchain: glibc: Update glibc 2.38 to recent HEAD

CVE-2025-6170

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6170
Commits:
libxml2: update to 2.14.5

CVE-2025-32108

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32108
Commits:
uhttpd: update to Git HEAD (2025-07-06) (
⇒ client: don't send stray EOF chunk on connection timeout
⇒ proc: inhibit chunked transfer encoding on existing TEs or known length
⇒ file: prevent writes beyond end of uh_buf on enumerating directories
⇒ client: reject requests with multiple content-lengths and/or TEs
⇒ client: Allow sending content in DONE state

CVE-2025-32414

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32414
Commits:
libxml2: update to 2.14.5

CVE-2025-32415

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32415
Commits:
libxml2: update to 2.14.5

CVE-2025-49794

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49794
Commits:
libxml2: update to 2.14.5

CVE-2025-49795

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49795
Commits:
libxml2: update to 2.14.5


CVE-2025-49796

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49796
Commits:
libxml2: update to 2.14.5

[rollie444]

Mooie update weer en met de 'luci-app-attendedsysupgrade' package is het makkelijk te sysupgraden