OpenWrt 17.01
Get firmware on Downloads (latest 17.01.7).
Each version's full technical changelog lives on the
wiki; the notes below are the per-release summary.
OpenWrt OpenWrt/LEDE 17.01.7 — Seventh Service Release · June 2019
Highlights In OpenWrt/LEDE 17.01.7
The OpenWrt Community is proud to announce the seventh service release of the stable OpenWrt/LEDE 17.01 series. The OpenWrt/LEDE 17.01.7 release is the final release of the stable OpenWrt/LEDE 17.01 series, the 17.01 series is considered end of life with the 17.01.7 release and no further releases or package updates, even for severe security problems, are planned.
OpenWrt/LEDE 17.01.7 “Reboot” incorporates a fair number of fixes back ported from the development branch during the last 10 months.
Some selected highlights of the service release are:
- Linux kernel updated to version 4.4.182 (from 4.4.153 in v17.01.6)
- Security fixes to curl, dropbear, wpa_supplicant, openssl, mbedtls, bzip2, grub2 and the Linux kernel
For a detailed list of changes since 17.01.6 refer to https://openwrt.org/releases/17.01/changelog-17.01.7
As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.
OpenWrt OpenWrt/LEDE 17.01.6 — Sixth Service Release · September 2018
Highlights In OpenWrt/LEDE 17.01.6
The OpenWrt Community is proud to announce the sixth service release of the stable OpenWrt/LEDE 17.01 series.
OpenWrt/LEDE 17.01.6 “Reboot” incorporates a fair number of fixes back ported from the development branch during the last 2 months.
Some selected highlights of the service release are:
- Linux kernel updated to version 4.4.153 (from 4.4.140 in v17.01.5)
- Security fixes to curl, dropbear, wpa_supplicant, openssl, mbedtls, bzip2, grub2 and the Linux kernel
- Update cake scheduler to version from 16. July 2018
- Multiple fixes for building with host glibc 2.28
- Fix some problems with SDK build
- Update Intel and AMD CPU microcode
- Update brcmfmac driver
- Assorted platform fixes for apm821xx, brcm47xx and mpc85xx
For a detailed list of changes since 17.01.5 refer to https://openwrt.org/releases/17.01/changelog-17.01.6
As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.
OpenWrt OpenWrt/LEDE 17.01.5 — Fifth Service Release · July 2018
Highlights In OpenWrt/LEDE 17.01.5
The OpenWrt Community is proud to announce the Fifth service release of stable OpenWrt/LEDE 17.01 series, which is the first service release after the remerger of the LEDE and OpenWrt projects.
OpenWrt/LEDE 17.01.5 “Reboot” incorporates a fair number of fixes back ported from the development branch during the last 9 months.
Some selected highlights of the service release are:
- Linux kernel updated to version 4.4.140 (from 4.4.92 in v17.01.4)
- Security fixes to openssl, mbedtls, wolfssl, samba, dnsmasq, openvpn, libunwind and the Linux kernel
- Update cake scheduler to version from 7. January 2018
- Update Wireguard VPN software to 0.0.20180519
- Enable SSL cache in ustream-ssl to improve TLS performance
- Fixes for building with host glibc 2.27 (Used in Ubuntu 18.04)
- lantiq: Make ADSL and VDSL SNR configurable
- x86: Added Spectre and Meltdown mitigations as well as microcode
loading support
- Assorted platform fixes for apm821xx, ar71xx, bcm53xx, brcm47xx, ipq806x, lantiq, mvebu, ramips, rb532, sunxi, x86 and xburst
For a detailed list of changes since 17.01.4 refer to https://openwrt.org/releases/17.01/changelog-17.01.5
As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.
OpenWrt LEDE 17.01.4 — Fourth Service Release · October 2017
Highlights In LEDE 17.01.4
The LEDE Community is proud to announce the fourth service release of stable LEDE 17.01 series.
LEDE 17.01.4 “Reboot” incorporates a fair number of fixes back ported from the development branch during the last two weeks.
Some selected highlights of the service release are:
- Linux kernel updated to version 4.4.92 (from 4.4.89 in v17.01.3)
- Security fixes to brcmfmac, hostapd, mac80211, toolchain/gdb and the Linux kernel
- Introduce latest version of the Wireguard VPN software (0.0.20171017)
- Fix Xen support in the x86/generic subtarget, add Xen support in the x86/64 subtarget
- Assorted platform fixes for ar71xx, bcm53xx, ramips and x86
About the KRACK attack
While the LEDE 17.01.4 release includes fixes for the KRACK bugs in the WPA Protocol disclosed earlier this week in the router firmware, these fixes do not fix the problem on the client-side. You still need to update all your client devices - computers, phones, tablets, cameras, refrigerators, thermostats, light bulbs, and any other device using Wi-Fi. Since some client devices might never receive an update, hostapd contains an optional AP-side workaround to complicate these attacks, slowing them down. Please note that this does not fully protect you from them, especially when running older versions of wpa_supplicant vulnerable to CVE-2017-13086, which the workaround does not address. As this workaround can cause interoperability issues and reduced robustness of key negotiation, this workaround is disabled by default.
Due to the version bump of toolchain/gdb to 8.0.1, at least GCC 4.8 is now required to build LEDE.
For a detailed list of changes since 17.01.3 refer to https://lede-project.org/releases/17.01/changelog-17.01.4
As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.
Have fun!
The LEDE Community
OpenWrt LEDE 17.01.3 — Third Service Release · October 2017
Highlights In LEDE 17.01.3
The LEDE Community is proud to announce the third service release of stable LEDE 17.01 series.
LEDE 17.01.3 “Reboot” incorporates a fair number of fixes back ported from the development branch during the last sixteen weeks.
Some selected highlights of the service release are:
- Linux kernel updated to version 4.4.89 (from 4.4.71 in v17.01.2)
- Numerous security fixes to curl, dnsmasq, mbedtls, tcpdump and the Linux kernel
- Assorted platform fixes for ar7, ar71xx, bcm53xx, brcm63xx, imx6, ipq806x, lantiq, ramips, sunxi and x86
As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.
Have fun!
The LEDE Community
OpenWrt LEDE 17.01.2 — Second Service Release · June 2017
Highlights In LEDE 17.01.2
The LEDE Community is proud to announce the second service release of stable LEDE 17.01 series.
LEDE 17.01.2 “Reboot” incorporates a fair number of fixes back ported from the development branch during the last seven weeks.
Some selected highlights of the service release are:
- Linux kernel updated to version 4.4.71 (from 4.4.61 in v17.01.1)
- Fixed TX power limit handling of ath9k
- Various fixes to the rt2x00 wireless driver
- Various fixes to odhcpd
- Various fixes to firewall
- Security fixes to vulnerabilities in Samba, Dropbear, OpenVPN and Linux kernel
- Assorted platform fixes for ar71xx, bcm53xx, brcm63xx, ipq806x, lantiq, ramips and x86
As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.
Have fun!
The LEDE Community
OpenWrt LEDE 17.01.1 — First Service Release · April 2017
Highlights In LEDE 17.01.1
The LEDE Community is proud to announce the first service release of the LEDE 17.01 stable series. It incorporates a fair number of fixes back ported from the development branch during the last six weeks.
Some selected highlights of the service release are:
- Linux kernel updated to version 4.4.61 (from 4.4.50 in v17.01.0)
- Reworked opkg to reduce resource usage
- Bug fixes and improvements for MT7620 radios
- Bug fixes and improvements for the odhcpd DHCPv6 server
- Bug fixes for the umdns mDNS implementation
- Fixed and improved nslookup applet
- API additions to the libubox library
- Improved service termination logic in procd
- Assorted platform fixes for ar71xx, arc770, archs38, bcm53xx, brcm2708, kirkwood, lantiq, mvebu, ramips and x86
As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.
Have fun!
The LEDE Community
OpenWrt LEDE 17.01.0 — First Stable Release · February 2017
Highlights In LEDE 17.01.0
The LEDE Community is proud to announce the first stable release of the LEDE 17.01 version series. It incorporates thousands of commits over the last nine months of effort. With this release, the LEDE development team closes out an intense effort to modernize many parts of OpenWrt and incorporate many new modules, packages, and technologies. These are some of the highlights compared to OpenWrt Chaos Calmer:
- Linux kernel updated to version 4.4.50 (from 3.18 in Chaos Calmer)
- Update of essential software:
- dnsmasq updated to 2.76 (from 2.73 in Chaos Calmer)
- busybox updated to 1.25.1 (from 1.23.2 in Chaos Calmer)
- mbedtls version 2.4.0 (updated from polarssl 1.3.14 in Chaos Calmer)
- openssl updated to 1.0.2k
- Improved Security Features
- Use SHA256 instead of MD5 to validate source code for upstream packages
- mbedtls: disable SSLv3 support
- OpenSSL: disable support for compression, heartbeats, NPN, Whirlpool, and J-PAKE
- Memory Corruption Mitigation Methods
- gcc -Wformat -Wformat-security
- User space Stack-Smashing Protection (Regular)
- Kernel space Stack-Smashing Protection (Regular)
- buffer-overflows detection (FORTIFY_SOURCE) (Conservative)
- RELRO protection (Full)
- Improved Networking Support
- Smart Queue Management (SQM) minimizes bufferbloat by using the cake and fq_codel qdisc’s. More…
- Improvements to the WiFi stack eliminating bufferbloat on ath9k, mt76 and some ath10k chipsets
- Airtime fairness scheduler for ath9k to prevent slow stations from hogging too much airtime
- Various stability and regression fixes to the Linux wireless stack and ath9k in particular
- Provide alternative Candela-Tech ath10k-ct driver
- IPv6 hardening
- Updated toolchain
- musl 1.1.16
- gcc 5.4.0
- binutils 2.25.1
- Platform and Driver Support
- Lantiq
- Added redistributable DSL firmware
- Updated DSL phy drivers
- Added new targets:
- apm821xx (AppliedMicro APM821xx)
- arc770 (Synopsys DesignWare ARC 770D)
- archs38 (Synopsys DesignWare ARC HS38)
- armvirt (QEMU ARM Virtual Machine)
- ipq806x (Qualcomm Atheros IPQ806X)
- layerscape (NXP Layerscape)
- zynq (Xilinx Zynq 7000 SoCs)
- Reorganized x86 target:
- Drop dedicated Xen DomU target, merged with x86/generic
- Enable AES-NI support
- Removed targets:
- realview, replaced by armvirt
- ppc44x, disabled due to code brokeness
- netlogic, dropped due to no available hardware
- Lantiq
- Build system improvements
- Separation of base system and community feeds to simplify distribution of binary package updates
- Fixes and enhancements in package dependency handling, better support for virtual provides
- Per-device rootfs images to better tune package selection to each individual device profile
- New image build code improving compilation times and simplifying device profile declarations
- New package/…/check make target to run a series of standard diagnostics on Makefiles
- Support for fetching sources using Curl
- Generate reproducible source tarballs when packing SCM checkouts
- Image Builder / SDK
- Rework library bundling to allow for better portability between different Linux distributions
- Add support for building kernel modules using the SDK
- Added support for a many new routers and boards
As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.
Have fun!
The LEDE Community