_______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 22.03.2, r19803-9a599fee93
 -----------------------------------------------------

OpenWrt 22.03.2

The OpenWrt community is proud to announce the newest stable release of the OpenWrt 22.03 stable version series. It fixes security issues, improves device support, and brings a few bug fixes.

Get OpenWrt Firmware at:

• https://firmware-selector.openwrt.org
• https://downloads.openwrt.org/releases/22.03.2/
• https://sysupgrade.openwrt.org

Main changes between OpenWrt 22.03.0 and OpenWrt 22.03.2

Note Release 22.03.1 wasn't added to GitHub releases due to the mac80211/cfg80211 CVEs

Only the main changes are listed below. See changelog-22.03.1 and changelog-22.03.2 for the full changelog.

Security fixes

• wolfssl: Fix security problem (CVE-2022-38152, CVE-2022-38153 and CVE-2022-39173) See Security Advisory 2022-10-04-1
• mac80211/cfg80211: Security fixes for BSSID parsing (CVE-2022-41674, CVE-2022-42719, CVE-2022-42720, CVE-2022-42721 and CVE-2022-42722) See 2022-10-17-1

Device support

• Support for the following devices was added:
  • ZTE MF281
  • Ubiquiti UniFi FlexHD
  • ZyXEL NWA50AX / NWA55AXE (ramips)
• Asus RT-AX53U: fix switch setup
• GL-inet GL-AP1300: add LTE package, add WAN LED
• Ubiquiti XM moved to ath79/tiny
• Ubiquiti UniFi 6LR: fix network config
• Linksys RE6500: enable LZMA loader to fix boot
• LibreRouter v1: fix watchdog and PoE passthrough
• NanoPi R4S: ensure unique MAC address
• bcm4908:
  • Enable NVMEM U-Boot env data driver
  • Backport mtd parser for Broadcom's U-Boot partition
  • fix -EPROBE_DEFER support in bcm4908_enet
• realtek:
  • fix RTL838x receive tag decoding
  • fix RTL839x receive tag decoding
  • ath79/tiny: activate low_mem too
• ramips/mediatek: backport NAND flash driver from master
• mpc85xx: p1010: make TP-Link WDR4900 v1 build again

Various fixes and improvements

• kernel:
  • Backport mtd dynamic partition patch
  • Fix possible mtd NULL pointer dereference
• hostapd: rename hostapd multicast_to_unicast option to multicast_to_unicast_all
• mt7620 wifi: multiple improvements
• build system:
  • Switch from xxd tool to xxdi.pl script
  • Check TLS certificates by default when downloading over HTTPS
  • Fix issues with targets installed via feeds
  • Fix build warnings with grep-3.8
  • Fix build problems with external toolchains
  • Activate fortify source when using external toolchain
  • busybox: nslookup: Fix wrongly dropped DNS response on some platforms

Core components update

• Update Linux kernel from 5.10.138 to 5.10.146
• Update mt76 from 2022-08-26 to 2022-09-06
• Update wolfssl from 5.4.0 to 5.5.1
• Update wireless-regdb from 2022.06.06 to 2022.08.12
• Update intel-microcode from 20220510 to 20220809
• Update rpcd from 2022-08-24 to 2022-09-21
• Update ucode from 2022-08-29 to 2022-10-07
• Update firewall4 from 2022-09-01 to 2022-10-14

Upgrading to 22.03.2

Sysupgrade can be used to upgrade a device from OpenWrt 21.02 or 22.03 to 22.03.2 and configuration will be preserved in most cases.

Warning Sysupgrade from 19.07 to 22.03 is not supported.

Warning There is no migration path for targets that switched from swconfig to DSA. In that case, sysupgrade will refuse to proceed with an appropriate error message: Image version mismatch. image 1.1 device 1.0 Please wipe config during upgrade (force required) or reinstall. Config cannot be migrated from swconfig to DSA Image check failed

Known issues

• Boot hang with firewall4 and loadfile: When using a firewall configuration declaring config ipset sections in conjunction with an option loadfile entry, the fw4 process will hang and prevent the system startup to complete. To solve this issue, boot the system into failsafe mode and temporarily disable any loadfile option. Proceed with a normal system reboot, upgrade the firewall4 package to version “2022-10-18-7ae5e14b-1” or later using opkg update; opkg upgrade firewall4 and re-enable any previously disabled option loadfile entries.