Download Firmware OpenWrt 19.07.8

A new update for version 19.07 of OpenWrt has been released. OpenWrt is an alternative open source firmware for a large number various routers and embedded devices. By means of the opkg package management system there is the possibility to determine for yourself what the router can and cannot do. Also on GoT there are several people actively working on it, see this topic. You can simply update the version with sysupgrade from the web interface. The main improvements made in this release are listed below.

Main changes from OpenWrt 19.07.7

Only the main changes are listed below. see changelog-19.07.8 for the full changelog.

Security fixes

• Fix FragAttacks (fragmentation and aggregation attacks) vulnerabilities in cfg80211, mac80211, ath10k and ath10k-ct
  • We are not sure if some closed source firmware files are still affected by these problems.
• Various security fixes in packages

Note: security fixes for most packages can also be applied by upgrading only the affected packages on running devices, without the need for a full firmware upgrade. This can be done with opkg update; opkg upgrade the_package_name or through the LuCI web interface. Nevertheless, we encourage all users to upgrade their devices to OpenWrt 19.07.8 or later versions whenever possible.

Major bug fixes

• Minor bug fixes to support GCC 11 as host compiler

Device support

• TP-Link C7v5 allow flashing from vendor firmware bigger than v1.1
• FRIZZ!Box 7320 Activate power supply to USB ports.

Various fixes and improvements

• Only pack the signing keys for OpenWrt 19.07 and 21.02 and not the personal keys any more.

see addressed_bugs for a complete list of bug fixes.

LuCI web interface

• luci-app-ddns: fix multiple authenticated RCEs
• luci-mod-status: fix potential XSS via specially crafted DNS names (CVE-2021-32019)
• themes: Call striptags() on hostname to prevent XSS (CVE-2021-33425)

Core components

• Update Linux kernel from 4.14.221 to 4.14.241
• Update mac80211 from 4.19.161-1 to 4.19.193-1
• Update ath10k-ct 4.19 driver from 2019-09-09 to 2021-06-03
• Update OpenVPN from 2.4.7 to 2.4.11
• Update openssl from 1.1.1i to 1.1.1k
• Update mbedtls from 2.16.9 to 2.16.10
• Update wolfssl from 4.6.0 to 4.7.0

Regressions

No regressions known so far.

Known issues

• Transition to ath79: some devices that are supported in ar71xx are not yet supported in ath79: this is a community effort. Helping to port devices to ath79 to make them available in future releases is very welcome.
• device support: images for some device became too big to support a persistent overlay, causing such devices to lose configuration after a reboot. If you experience this problem, please report the affected device in the forum and consider downgrading to OpenWrt 18.06 or using the Image Builder to pack a smaller custom image
• device support: conversely, certain images for devices with small flash (4 MB) are no longer built for the release

See also: active bug reports for openwrt-19.07

Upgrading to OpenWrt 19.07.8

Upgrading from previous OpenWrt 19.07 versions is straightforward thanks to the sysupgrade utility: sysupgrade from web interface or sysupgrade from command line.

An upgrade from OpenWrt 18.06 to OpenWrt 19.07 is supported in many cases, including preserving configuration. A configuration backup is advised nevertheless when upgrading from OpenWrt 18.06.