OpenWrt is a firmware based Linux distribution embedded in devices such as personal routers.
The release of the new stable version of OpenWrt 22.03.3 has just been announced, a version that it comes running various errors of which the Busybox, dnsmasq and other fixes stand out, in addition to this, some support improvements in this new version also stand out.
For those who are unfamiliar with OpenWrt, you should know that this is a Linux distribution that is designed for use on various network devicessuch as routers and access points.
OpenWrt supports many different platforms and architectures and has a build system that allows you to easily and conveniently cross-compile, including multiple components in the assembly, making it easy to create a ready-to-use firmware or disk image tailored for specific tasks with a desired set of packages pre-installed.
Main news of OpenWrt 22.03.3
In this new version that is presented from OpenWrt 22.03.3 are presented various system component upgrades, of which we can find the updated versions of Linux kernel 5.10.161 (version adding mac80211 wireless stack ported from version 5.15.81), strace 5.19, mbedtls 2.28.2, openssl 1.1.1s, wolfssl 5.5.4, util-linux 2.37.4, firewall4 2022-10-18, odhcpd 2023-01-02, uhttpd 2022-10-31, iwinfo 2022-12-15, ucode 2022-12-02.
Along with the Linux Kernel it is also mentioned that they added the new kernel module packages: kmod-sched-prio, kmod-sched-red, kmod-sched-act-police, kmod-sched-act-ipt, kmod-sched- pie, kmod-sched-drr, kmod-sched-fq-pie, kmod-sched-act-sample, kmod-nvme, kmod-phy-marvell, kmod-hwmon-sht3x, kmod-netconsole, and kmod-btsdio.
On the part of the support improvements We can find in this new version that support for Ruckus ZoneFlex 7372/7321, ZTE MF289F, TrendNet TEW-673GRU, Linksys EA4500 v3 and Wavlink WS-WN572HP3 4G devices was added.
In addition to this, we can also find that for D-Link DIR-825 B1 the settings for the factory system image and extended rootfs were added. By default, the firmware for the Broadcom 4366b1 chip was added to the Asus RT-AC88U build.
Regarding the corrections, we can find that the problem with the reboot loop when using the LZMA bootloader on devices NETGEAR EX6150, HiWiFi HC5962, ASUS RT-N56U B1, Belkin F9K1109v1, D-Link DIR-645, has been resolved. D-Link DIR-860L B1, NETIS WF2881 and ZyXEL WAP6805.
It is also mentioned that the problem of assigning WAN MAC addresses in devices UniElec U7621-01, UniElec U7621-06, TP-Link AR7241, TP-Link TL-WR740N, TP-Link TL-WR741ND v4, Teltonika RUT230 and Luma Home WRTQ-329ACN.
Of the fixed vulnerabilities are mentioned
- CVE-2022-30065: busybox: Fix a use-after-free in Busybox 1.35-x's
awk applet - CVE-2022-0934: dnsmasq: Fix non-arbitrary single-byte write/use.
free post failure on dnsmasq DHCPv6 server - CVE-2022-1304: e2fsprogs: an out-of-bounds read/write vulnerability
was found in e2fsprogs 1.46.5 - CVE-2022-47939: kmod-ksmbd: ZDI-22-1690: Linux Kernel ksmbd Use -
After-Free Remote Code Execution Vulnerability - CVE-2022-46393: mbedtls: fix potential heap buffer overreading and
Overwrite - CVE-2022-46392: mbedtls: an adversary with access to sufficiently accurate data
information about memory accesses can retrieve an RSA private key - CVE 2022-42905: wolfssl: In the event that the WOLFSSL_CALLBACKS
macro is set when building wolfSSL, there is a lot of potential about
5-byte read when handling TLS 1.3 client connections.
Of the other changes that stand out:
- On Youku YK-L2 and YK-L1 devices, initramfs-kernel.bin can be installed via the manufacturer's web interface.
- D-Link DGS-1210-10P supports additional buttons and LED indicators.
- A USB driver has been added to the assembly for the AVM FRITZ!Box 7430.
- Audio controller added to the HAOYU Electronics MarsBoard A10 assembly.
Linksys EA6350v3, EA8300, MR8300, and WHW01 devices can update the firmware out of the box.
Fixed crash on boot with firewall4 and loadfile. - Added firmware files for mt7916 and mt7921 devices.
- The ustream-openssl package disables connection negotiation based on TLSv1.2 and earlier versions of the protocol.
- Added support for the Quectel EC200T-EU modem to the comgt-ncm package.
- The umbim utility allows roaming and connection through partner networks.
- Support for HE modes (Wifi 6), new devices (MT7921AU, MT7986 WiSoC) and additional ciphers (CCMP-256, GCMP-256) have been added to the iwinfo utility.
If you want to know more about it about the details that are integrated into this new release of the OpenWrt firmware 22.03.3 you can check the information in the original publication In the following link.
Download the new version of OpenWrt 22.03.3
The builds of this new version are prepared for 35 different platforms, from which update packages can be obtained from the link below.