Wive-NG-HQ - Wireless Comprehensive Advanced Technology project.
High-Quality enterprise decisions for your house and business.
More info:
wi-cat.ru - wireless comprehensive advanced technology.
Official telegram channel.
Technical Support.
Release tree changes:
0.1.x
1) start new project (use 8.0.4 wive-ng-mt build system).
2) build_system: pass project target to DoConfigure.sh.
3) build_system: toolchain: implement multi toolchain (mips/x86_64/start arm).
4) build_system: add accel-ppp and libprce.
5) build_system: remove 4Mb target.
6) build_system: replace samba/wsdd2 to accel-ppp in 8Mb targets.
7) move to 1.0.31 uclibc-ng with rework tree.
8) move to 2.32 binutils with rework tree and kernel soft/hard float jam patch.
9) move to 7.4 gcc version.
10) implement support online updater.
11) review kernel code and fix some errors and many warnings.
12) warnings code review in some subprojects.
13) strace: up to 5.0 version.
14) miniupnpd: up to 2.1.20190210 version.
15) miniupnpd: add -I option for force pinhole ifname for ipv6.
16) udpxy: fix infinitive loop in ts stream parse.
17) udpxy: fix get network id from PMT.
18) xupnpd: decrease memory overhead use.
19) dropbear: up to 2019.78 (commit fd8721be7).
20) netcwmp: fix parse root position of model.
21) netcwmp: fix error handle in some cases.
22) init.d: small dns reconf improve.
23) init.d: send dhcp vendor class by default.
24) init.d: fix upnp work in 6to4/6in4 mode.
25) init.d: fix apply user routes in some cases.
26) init.d: fix double pptp client restart.
27) init.d: optimize conntrack flush procedure (for decrease ready time).
28) init.d: accel-ppp: replace xl2tpd-server.
29) init.d: fs: exclude ads.conf from save to rwfs (very big).
30) init.d: fwupdate: force check update on all events.
31) init.d: fix for stable uplink switch link status detect.
32) init.d: do not apply static dns at PurePPPOE mode.
33) init.d: fix irqbalance restart.
34) kernel: introduce a small and native hashtable.
35) kernel: sysctl: add missing range check in do_proc_dointvec_minmax_conv.
36) kernel: tmpfs: fix link accounting when a tmpfile is linked in.
37) kernel: tmpfs: fix uninitialized return value in shmem_link.
38) kernel: fix mtk cache data trash at boot in some cases.
39) kernel: lib/string.c: remove duplicated function.
40) kernel: mips: reduce _NSIG from 128 to 127 to avoid BUG_ON.
41) kernel: mips: optimize 32-bit do_div() with constant divisor.
42) kernel: mips: add barriers between dcache & icache flushes.
43) kernel: mips: c-r4k: instruction_hazard should immediately follow cache op.
44) kernel: mips: avoid to cause watchpoint exception in kernel mode.
45) kernel: mips: define __current_thread_info inside of function.
46) kernel: net/packet: set __GFP_NOWARN upon allocation in alloc_pg_vec.
47) kernel: net: fs/drop_caches.c: avoid softlockups in drop_pagecache_sb().
48) kernel: net: netfilter: nf_nat: skip nat clash resolution for same-origin entries.
49) kernel: net: pptp: dst_release sk_dst_cache in pptp_sock_destruct.
50) kernel: net: packet: fix 4gb buffer limit due to overflow check.
51) kernel: net: bridge: multicast: use rcu to access port list from br_multicast_start_querier.
52) kernel: net: ip6_tunnel: match to ARPHRD_TUNNEL6 for dev type.
53) kernel: net: sit: fix memory leak in sit_init_net().
54) kernel: net: sit: fix UBSAN Undefined behavior in check_6rd.
55) kernel: net: sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach().
56) kernel: mtk_wifi: add new macbook/iphone oui a8:66:7f, 98:01:a7, 98:9e:63, c0:e8:62, a8:5c:2c, d8:8f:76, f4:0f:24, 80:e6:50 to bcm fix.
57) kernel: mtk_wifi: allow use 80MHz with old BCM devices in US/DE/FI/EU regions.
58) kernel: mtk_wifi: tune txring size.
59) kernel: mtk_wifi: dma optimize.
60) kernel: mtk_wifi: improve rate adapt for high interference case.
61) kernel: mtk_wifi: avoid unneeded traindown.
62) kernel: mtk_wifi: fix calculate rate alg intervals.
63) kernel: mtk_wifi: move set channel QA to true place (avoid loops at adapt).
64) kernel: mtk_wifi: improve fast adaptation ALG.
65) kernel: mtk_wifi: implement fast trainup.
66) kernel: mtk_wifi: implement fast fallback to usable rate.
67) kernel: mtk_wifi: implement adaptive traindown mode.
68) kernel: mtk_wifi: fix correct MDIE indicate in probe.
69) kernel: mtk_wifi: fix RRM beacon RFC compat.
70) kernel: mtk_wifi: fix ft cache invalidate.
71) kernel: mtk_wifi: fix ERP in announces.
72) kernel: mtk_wifi: fix mic calculate in some cases.
73) kernel: mtk_wifi: mt7620: improve noise immunity logic for p2mp mode.
74) kernel: mtk_wifi: mt7603: update microcode.
75) kernel: mtk_wifi: mt7603: rework smart carrier sense.
76) kernel: mtk_wifi: mt7603: improve autofallback logic.
77) kernel: mtk_wifi: mt7603: fix agregate limits.
78) kernel: mtk_wifi: mt7603: fix powersave issue with some clietns.
79) kernel: mtk_wifi: mt7603: fix calculate tmi rate issue.
80) kernel: mtk_wifi: mt7603: fix potential null pointers dereference in event handlers.
81) kernel: mtk_wifi: mt7603: correct update TxPer for high traffic case.
82) kernel: mtk_wifi: mt7603: improve multiclients mode.
83) kernel: mtk_wifi: mt7615: enable and fix WPA3 SAE/OWE implementation.
84) kernel: mtk_wifi: mt7615: improve WPA3 implementation and fix fallback to non pmf supported mode.
85) kernel: mtk_wifi: mt7615: add RSNIE3 support and rework validator.
86) kernel: mtk_wifi: mt7615: avoid unneeded memory allocs.
87) kernel: mtk_wifi: mt7615: more human-readable connection log.
88) kernel: mtk_wifi: mt7615: implement use BTM for adaptive roaming threshold.
89) kernel: mtk_wifi: mt7615: implement dynamic adapts interval for 7615 to.
90) kernel: mtk_wifi: mt7615: improve handoff and BTM coexist.
91) kernel: mtk_wifi: mt7615: optimize handoff/btm logic.
92) kernel: mtk_wifi: mt7615: handle BTM move in iapp.
93) kernel: mtk_wifi: mt7615: fix dropdown to CCK in 5GHz.
94) kernel: mtk_wifi: mt7615: fix tmac fixed rate set.
95) kernel: mtk_wifi: mt7615: fix error handle in wltlb update.
96) kernel: mtk_wifi: mt7615: fix signalling mode update.
97) kernel: mtk_wifi: mt7615: fix null pointer dereference in wtlb work.
98) kernel: mtk_wifi: mt7615: fix streams config set in channel switch.
99) kernel: mtk_wifi: mt7615: fix WPA3 mode parse.
100) kernel: mtk_wifi: mt7615: fix incorrect wdev select in apassoc in some cases.
101) kernel: mtk_wifi: mt7615: fix compose FT fields in assoc frame.
102) kernel: mtk_wifi: mt7615: prevent handoff vs BTM handover concurrent.
0.2.x-0.3.x
1) build_system: first stage x86_64 support compleate (rework buildsystem).
2) radvd: up to 2.18 commit 23757690.
3) radvd: do not stop work if dns servers more than 3.
4) libnvram: implement file mode support.
5) uclibc: set ipv4->ipv6 mode by default.
6) pppd, xl2tpd, arp-scan: up to last versions.
7) webui: fix static dns for ipv6 in some mode show.
8) webui: fix read current dns server used for relay.
9) webui: operation mode move to start page.
10) webui: add BTM send threshold.
11) webui: implement sstp/pptp/l2tp servers.
12) webui: add WPA3PSK+WPA2PSK mixed mode support.
13) init.d: avoid not set static dns in pure mode if vpnPeerDNS is disabled.
14) init.d: six: only local dns server use as relay for ipv6 dns.
15) init.d: six: call reread configs dnsmasq after receive new dns records in dhcp.
16) init.d: six: add ::1 record for local resolv.
17) init.d: six: avoid unneeded google dns stubs insert to local resolv.
18) init.d: six: rework compose local and global resolv logic (split and cleanup).
19) init.d: six: dynamic timeouts for tunneled/native modes.
20) init.d: x86: cleanup and prepare for x86 support.
21) init.d: dnsmasq: compose mixed resolv file for easy reload upstream dns from others places.
22) init.d: xupnpd: web: implement autofeed option.
23) kernel: sysctl: handle overflow for file-max.
24) kernel: lib/string.c: implement a basic bcmp.
25) kernel: 5x kernel add support Wive init.
26) kernel: net: remove sock_no_poll.
27) kernel: net: packet: validate address length if non-zero.
28) kernel: net: ipv4: ip_do_fragment: preserve skb_iif during fragmentation.
29) kernel: net: ppp: move PFC decompression to PPP generic layer.
30) kernel: net: pptp: remove unused variable in pptp_release().
31) kernel: net: pptp: reinstall chan after connection lost instead of wait gc.
32) kernel: mtk_wifi: avoid send not needed deauth in ft cahce timeout.
33) kernel: mtk_wifi: fix ba record fill in FT case.
34) kernel: mtk_wifi: mt7615: fix IGTK subelement construct.
35) kernel: mtk_wifi: mt7615: implement adaptive BTM triggers.
36) kernel: mtk_wifi: mt7615: implement BTM by PER trigger.
0.5.x
1) x86: bootable images auto create now.
2) pppd: sync with git (commit 64c9730d).
3) nginx: up to 1.16.0 version.
4) lldp: up to 1.0.3 version.
5) openssl: up to 1.0.2s version.
6) curl: up to 7.65.0 version.
7) ethtool: up to 5.1 version.
8) miniupnpd: up to 2.1.20190502 version.
9) libnettle: up to 3.4.1 version.
10) libtalloc: up to 2.2.0 version.
11) openvpn: add 2.4.7 version.
12) init.d: implement AP DHCP LAN config mode with auto fallback (use by default).
13) init.d: do not touch polling phy mode at reinit (remove rudimentary workaround).
14) init.d: split preinit and reinit switch procedure (boot speedup).
15) init.d: rework 4G modem logic.
16) init.d: allow configure pppoe session over SIP/TV vlan.
17) webui: full remove old legacy modes code (wep/wpa1).
18) webui: implement network overview.
19) kernel: genirq: prevent use-after-free and work list corruption.
20) kernel: fs: avoid flush cache berfore full kernel boot.
21) kernel: net: avoid weird emergency message.
22) kernel: net: llc: fix skb leak in llc_build_and_send_ui_pkt().
23) kernel: net: netfilter: compat: initialize all fields in xt_init.
24) kernel: net: ipv4: fix raw socket lookup for local traffic.
25) kernel: net: ipv6: consider sk_bound_dev_if when binding a raw socket to an address.
26) kernel: mtk_wifi: mt7615: split handle wpa/open assoc paths in iaap event.
0.5.x
1) init.d: rework buggy NAS workaround (corbia and others).
2) init.d: rework routes compose and set for multiuplink.
3) init.d: full rework VPN/MODEM/LAN auto switch uplink.
4) busybox: make unicode printable.
5) busybox: update to 1.31.0 version.
6) dropbear: up to 2019.78 (commit c77718c).
7) webui: add some administration tools.
8) webui: add autoconf ap mode.
9) webui: allow PPPOE over SIP/TV tagged ports.
10) kernel: net: ethtool: fix potential userspace buffer overflow.
11) kernel: net: ethtool: check the return value of get_regs_len.
12) kernel: net: ipv6: use READ_ONCE() for inet->hdrincl as in ipv4.
13) kernel: net: ipv6: fix EFAULT on sendto with icmpv6 and hdrincl.
0.6.x
1) init.d: rework preinit (drop rudiments).
2) init.d: review network config for cleanup workarounds and more unify code.
3) kernel: mm/mincore.c: make mincore() more conservative.
4) kernel: ntp: allow TAI-UTC offset to be set to zero.
5) kernel: sysctl: return -EINVAL if val violates minmax.
6) kernel: net: neigh: fix use-after-free read in pneigh_get_next.
7) kernel: net: tcp: limit payload size of sacked skbs (CVE-2019-11477).
8) kernel: net: tcp: tcp_fragment() should apply sane memory limits (CVE-2019-11478).
9) kernel: net: tcp: add tcp_min_snd_mss sysctl (CVE-2019-11479).
10) kernel: net: tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (CVE-2019-11479).
11) kernel: mtk_wifi: add new iphone6 oui 9C:F3:87 to bcm fix.
0.7.x
1) uclibc-ng: sync with git (commit d722add2).
2) chillispot: sync with git (commit 1fbb244e).
3) libxml2: sync with git (commit 4e09592d).
4) libaio: sync with git (commit 2f46ee0e).
5) xupnpd: sync with git (commit 848c86ca).
6) libcurl: up to 7.65.2 version.
7) webui: implement persistent storage (pss) options.
8) webui: refactor usb_modem page and friends.
9) webui: reimplement hints.
10) nginx: updatefw: fix compatable with 64bit.
11) nginx: updatefw: rearrange counter put (need before rwfs crash).
12) cwmp: fix segfault at try get stalist if radio is off.
13) mtd_write: increase buffsize for more fast and safe update.
14) kernel: bug.h: work around GCC PR82365 in BUG().
15) kernel: mips: workaround GCC __builtin_unreachable reordering bug.
16) kernel: mips: fix modpost error in modules attempting to use virt_addr_valid().
17) kernel: mips: move __virt_addr_valid() to a place for MIPS 64.
18) kernel: mips: bounds check virt_addr_valid.
19) kernel: mips: make virt_addr_valid() return bool.
20) kernel: mips: fix bounds check virt_addr_valid.
21) kernel: net: ipv4: use return value of inet_iif() for __raw_v4_lookup in the while loop.
22) kernel: net: tcp: refine memory limit test in tcp_fragment().
0.8.x
1) cwmp/webui: fwupdate rework.
2) kernel: lib/div64.c: off by one in shift.
3) kernel: mips: fix ioremap() RAM check.
4) kernel: net: ip6mr: do not call __IP6_INC_STATS() from preemptive context.
5) kernel: net: tcp: be more careful in tcp_fragment().
6) kernel: mtk_wifi: improve req key if not present in cache.
7) kernel: mtk_wifi: improve FT key change handle.
8) kernel: mtk_wifi: improve RRM results compose for DBDC.
9) kernel: mtk_wifi: mt7615: fix calculate stacount in apqload in DBDC mode.
10) kernel: mtk_wifi: mt7615: prevent install new PTK before sanity check.
11) kernel: mtk_wifi: mt7615: optimize BTM threshold calculate for force dissassoc.
12) kernel: mtk_wifi: mt7615: reimplement TPC/PWRConstraint for full support DBDC mode.
13) kernel: mtk_wifi: mt7615: fix BCN RRM and WNM BTM report compose.
14) kernel: mtk_wifi: mt7615: make BCN/Measure reports full work without userspace daemon.
0.9.x
1) init.d: fix release dhcp address and pppoe session terminate at soft router reboot.
2) busybox: skip running processes from inittab if the terminal name is specified but the device file does not exist.
3) busybox: don't choke on ip addr add [...] valid_lft [...] preferred_lft.
4) busybox: install readlink to bin.
5) busybox: turn ptr_to_globals and bb_errno to be non const.
6) kernel: futex: ensure that futex address is aligned in handle_futex_death().
7) kernel: net: packet: in recvmsg msg_name return at least sizeof sockaddr_ll.
8) kernel: net: neigh: fix multiple neigh timer scheduling.
9) kernel: net: ipv4: don't set IPv6 only flags to IPv4 addresses.
10) kernel: net: igmp: fix memory leak in igmpv3_del_delrec().
11) kernel: net: inet: don't go into port scan when looking for specific bind port.
12) kernel: net: sched: fix a possible null-pointer dereference in dequeue_func().
13) kernel: net: tcp: clear tp->packets_out when purging write queue.
14) kernel: net: tcp: reset sk_send_head in tcp_write_queue_purge.
15) kernel: net: tcp: bind() use stronger condition for bind_conflict.
16) kernel: net: tcp: bind() fix autoselection to share ports.
17) kernel: net: tcp: do not allow changing SO_REUSEADDR on bound sockets.
18) kernel: net: tcp: improve REUSEADDR/NOREUSEADDR cohabitation.
19) kernel: net: netfilter: conntrack: lower timeout to RETRANS seconds if window is 0.
20) kernel: net: netfilter: conntrack: always store window size un-scaled.
21) kernel: mtk_wifi: improve FT cache timeout case (avoid freeze some buggy clietns).
22) kernel: mtk_wifi: improve and fix announce FT timeouts in IECAP.
23) kernel: mtk_wifi: improve noise immunity logic.
24) kernel: mtk_wifi: mt7615: adaptive BTM intervals for easy roam.
25) kernel: mtk_wifi: mt7615: fix dbdc table mode.
26) kernel: mtk_wifi: mt7615: fix protection auto mode.
0.10.x
1) libaio: sync with git (commit 7850a762).
2) libnatpmp: sync with git (commit 69582dba).
3) libnfnetlink: sync with git (commit 0a15995c).
4) libxml2: sync with git (commit 1ca32420).
5) libcurl: up to 7.65.3 version.
6) libmicrohttpd: version update to 0.9.66.
7) libnettle: up to 3.5.1 version.
8) libssh: up to 0.9.0 version.
9) radvd: sync with git (commit fd683541).
10) accel-ppp: up to 1.12 version.
11) e2fsprogs: up to 1.45.3 version.
12) ethtool: up to 5.2 version.
13) lldp: up to 1.0.4 version.
14) miniupnpd: up to 2.1.20190630.
15) kernel: net: increase fq_codel count in the bulk dropper.
16) kernel: net: packet: fix race in tpacket_snd().
17) kernel: mtk_wifi: more safe steering and handoff procedure.
18) kernel: mtk_wifi: fix race SAQueryReq vs AssocProbe fail.
19) kernel: mtk_wifi: remove plays over wdev in assoc case.
20) kernel: mtk_wifi: do not touch already associated records in assoc fail path.
0.11.x
1) implement basic service manager.
2) libc: make I/O locking cancel-safe with futexes.
3) dnsmasq: update to 2.81 git version (commit de64388ff).
4) kernel: asm-generic: fix -Wtype-limits compiler warnings.
5) kernel: net: offloads: try fix ipsec vs software offloads war.
6) kernel: net: use unlikely for dql_avail case.
7) kernel: net: icmp: fix rt dst dev null pointer dereference.
8) kernel: net: tcp: make sure EPOLLOUT wont be missed.
0.12.x
1) toolchains: sync with upstream and headers up.
2) system: implement mass configuration feature.
3) accel-ppp: sync with git (commit 886196).
4) arp-scan: sync with git (commit 1fc05f64).
5) coova-chilli: sync with git (commit ea9a14f6).
6) dnsmasq: sync with git (commit dbe013ea).
7) dropbear: sync with git (commit 55d8597f).
8) radvd: sync with git (commit ae1b1fa2).
9) udpxy: sync with git (commit a13e94f9).
10) xl2tpd: sync with git (commit 72d535b9).
11) libaio: sync with git (commit dc02646e).
12) libxml: sync with git (commit b73ac0fe).
13) band steering: improve garbage collect and smooth steer in some cases.
14) kernel: genirq: Prevent NULL pointer dereference in resend_irqs().
15) kernel: tty: serial_core, add ->install.
16) kernel: net: fix null de-reference of device refcount.
17) kernel: net: tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR.
18) kernel: net: sched: let qdisc_put() accept NULL pointer.
19) kernel: mtk_wifi: full review code again (small fix and refactor).
0.13.x
1) webui: fix wpa enterprise vs PSK mode issue.
2) webui: implement fw rules insert.
3) kernel: mips: init: prevent adding memory before PHYS_OFFSET.
4) kernel: timers: create detach_if_pending() and use it.
5) kernel: timers: consolidate base->next_timer update.
6) kernel: timers: add accounting of non deferrable timers.
7) kernel: timers: improve get_next_timer_interrupt().
8) kernel: timers: generalize timer->base flags handling.
9) kernel: timers: clean up timer initializers.
10) kernel: timers: implement TIMER_IRQSAFE.
11) kernel: timers: check failure of timer_cpu_notify() before calling init_timer_stats().
12) kernel: timers: track total number of timers in list.
13) kernel: timers: reduce __run_timers() latency for empty list.
14) kernel: timers: reduce future __run_timers() latency for newly emptied list.
15) kernel: timers: reduce future __run_timers() latency for first add to empty.
16) kernel: timers: make internal_add_timer() update ->next_timer if ->active_timers == 0.
17) kernel: timers: use variable head instead of &work_list in __run_timers().
18) kernel: timers: make sure TIMER_FLAG_MASK bits are free in allocated base.
19) kernel: net: ppp: fix memory leak in ppp_write.
20) kernel: net: mld: fix memory leak in mld_del_delrec().
21) kernel: net: igmp: acquire pmc lock for ip_mc_clear_src().
22) kernel: net: igmp: add a missing spin_lock_init().
23) kernel: net: igmp: fix another memory leak in igmpv3_del_delrec().
24) kernel: mtk_wifi: fix two crashes with clients infinitive reassoc req.
25) kernel: mtk_wifi: fix race in irq handle at new stress tests.
26) kernel: mtk_wifi: fix SAE retransmit auth wdev jam.
27) kernel: mtk_wifi: rework assoc procedure to avoid incorrect client VAP change.
0.14.x
1) kernel: net: ipv6: drop incoming packets having a v4mapped source address.
2) kernel: net: ipv6: handle missing host route in __ipv6_ifa_notify.
3) kernel: net: ipv4: avoid mixed n_redirects and rate_tokens usage.
4) kernel: percpu: fix this_cpu_sub() subtrahend casting for unsigneds.
5) kernel: mtk_wifi: fix compat with RFC 802.11 modification at 2018.05.09.
6) kernel: mtk_wifi: handle semi FT clients (fix crash if client support only MDIE from FT stack).
7) kernel: mtk_wifi: update portsecure in true place at assoc procedure.
8) kernel: mtk_wifi: band steering more safe records update.
9) kernel: mtk_wifi: fix recharge WaitBCNRepTimer.
0.15.x
1) kernel: mtk_wifi: extend assoc/auth/ft sanity checks (prevent crash from very ugly clients or DOS).
2) kernel: mtk_wifi: mt7615/mt7613: fix unpredictable crashes after long time work.
3) kernel: mtk_wifi: mt7615/mt7613: handle send to not exist wdev by wdev_idx DBDC mode bug.
4) kernel: mtk_wifi: mt7615/mt7613: full mlme code review and some fixups.
1.0.x
1) switch status to public stable tree.
2) add and use libatomic.
3) init.d: rework and cleanup nvram to init process.
4) uclibc-ng: sync with git (commit 1a570c06).
5) busybox: update to 1.31.1 stable version.
6) freeradius: update to 3.0.19 version.
7) miniupnpd: update to 2.1.20191006 version.
8) arpscan: sync with git version 1.9.7 (commit e0a1d05d).
9) dnsmasq: sync with git version 2.81 (commit c69d8377).
10) dropbear: sync with git version 2019.78 (commit ceea91c7).
11) pppd: sync with git version 2.4.7 (commit 9f51bd57).
12) xl2tpd: sync with git version 1.3.15 (commit a786ccd7).
13) xupnpd: sync with git version 1.0.34 (commit 0fbc73fc).
14) openvpn: update to 2.4.8.
15) kernel: net: sched: fix memory exposure from short TCA_U32_SEL.
16) kernel: net: ipv4: return -ENETUNREACH if we can't create route but saddr is valid.
1.1.x
1) coova-chilli: sync with git (commit a016d0ba).
2) openssl: update to 1.0.2t.
3) libpcap: update to 1.9.1.
4) tcpdump: update to 4.9.3.
5) libtalloc: update to 2.3.0 version.
6) libmicrohttpd: version update to 0.9.68.
7) band_steering: prevent drop RSSI stat.
8) kernel: asm-generic: move cmpxchg*_local defs to cmpxchg.h.
9) kernel: lib/string_helpers.c: make arrays static.
10) kernel: lib/random: update implementation.
11) kernel: scatterlist: don't BUG when we can trivially return a proper error.
12) kernel: net: inet: stop leaking jiffies on the wire.
13) kernel: net: add READ_ONCE() annotation in __skb_wait_for_more_packets().
14) kernel: net: make sock_prot_memory_pressure() return "const char *".
15) kernel: net: fix data-race in neigh_event_send().
16) kernel: mtk_wifi: split iapp L2 and FT code.
17) kernel: mtk_wifi: sync soft encrypt logic in all drives.
18) kernel: mtk_wifi: mt7615: avoid dev->rate.MlmeTransmit change in rx handle.
19) kernel: mtk_wifi: mt7615: prevent PMF auth req jam.
20) kernel: mtk_wifi: speedup and fix crash ATE builds after long time use.
1.2.x
1) webui: allow WPA3/PMF for 5GHz for (7620+7613).
2) inti.d: rework modules operation for more fast and safe.
3) kernel: signal: always ignore SIGKILL and SIGSTOP sent to the global init.
4) kernel: sched/fair: don't assign runtime for throttled cfs_rq.
5) kernel: net: tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR.
6) kernel: net: netfilter: fix handling simultaneous open in TCP conntrack.
7) kernel: net: netfilter: conntrack: tcp: only close if RST matches exact sequence.
8) kernel: net: llc: avoid blocking in llc_sap_close().
9) kernel: mtk_wifi: mt7615: rework error recovery.
10) kernel: mtk_wifi: mt7615: fix 5.0.3.2 crash in ATE build regression.
11) kernel: mtk_wifi: mt7615: fix race in EAP process (serialize access to WTLB).
12) kernel: mtk_wifi: mt7615: fix 11CCK rate clients hang MAC.
13) kernel: mtk_wifi: mt7615: fix rings align.
14) kernel: mtk_wifi: mt7613: implement passive RRM scan mode.
15) kernel: mtk_wifi: mt7615: fix data to MCU align write.
16) kernel: mtk_wifi: mt7615/MT7613: more safe RRM scan.
17) kernel: mtk_wifi: mt7615/MT7613: rework passive RRM neigh update.
2.0.x
1) full switch to new init manager (rcd).
2) update calibration templates from fabric.
3) dnsmasq: sync with git version 2.81 (commit c69d8377).
4) init.d: set rp_filter = 1 (CVE-2019-14899).
5) kernel: printk: fix integer overflow in setup_log_buf().
6) kernel: /dev/mem: bail out upon SIGKILL.
7) kernel: linux/bitmap.h: handle constant zero-size bitmaps correctly.
8) kernel: mips: mark __xchg as __always_inline.
9) kernel: net: fix possible overflow in __sk_mem_raise_allocated().
10) kernel: net: dev: use unsigned integer as an argument to left-shift.
11) kernel: net: tcp: fix off-by-one bug on aborting window-probing socket.
12) kernel: net: tcp: make tcp_space() aware of socket backlog.
2.1.x
1) openssl: update to 1.0.2u.
2) arp-scan: sync with git version to 1.9.7 (commit 6f31d912).
3) coova-chilli: sync with git version 1.5 (commit ac45f72e).
4) dnsmasq: sync with git version 2.81 (commit 6ca0562a).
5) libxml2: sync with git version 2.9.10 (commit 0564836b).
6) pppd: sync with git version 2.4.8 (commit b4a4ad14).
7) udpxy: sync with git (commit 331bab2b).
8) accel-ppp: sync with git (commit a5f0be19).
9) libcurl: up to 7.67.0 version.
10) libmicrohttpd: version update to 0.9.69.
11) libssh: up to 0.9.3 version.
12) libtalloc: update to 2.3.1 version.
13) libusb: update to 1.0.23 version.
14) e2fsprogs: up to 1.45.4 version.
15) ethtool: up to 5.3 version.
16) haveged: up to 1.9.8 version (commit 2b793971).
17) kernel: mm/rmap: replace BUG_ON(anon_vma->degree) with WARN_ON.
18) kernel: panic: ensure preemption is disabled during panic().
19) kernel: hrtimer: store cpu-number in struct hrtimer_cpu_base.
20) kernel: usb: hso: fix NULL-deref on tty open.
21) kernel: net: tcp: exit if nothing to retransmit on RTO timeout.
22) kernel: net: sch_dsmark: fix potential NULL deref in dsmark_init().
23) kernel: net: llc: fix sk_buff leak in llc_sap_state_process().
24) kernel: net: inet: protect against too small mtu values.
25) kernel: net: tcp: md5: fix potential overestimation of TCP option space.
26) kernel: net: tcp: do not send empty skb from tcp_write_xmit().
27) kernel: net: af_packet: set default value for tmo.
28) kernel: net: inetpeer: fix data-race in inet_putpeer / inet_putpeer.
29) kernel: mtk_wifi: avoid remove record from not correct band at migration.
30) kernel: mtk_wifi: avoid wrong wdev in management recv in some cases.
2.2.x
1) webui: fix login session lost.
2) webui: fix get last version at updates check.
3) kernel: taskstats: fix data-race.
4) kernel: mips: early_printk: drop __init annotations.
5) kernel: net: tcp/dccp: drop SYN packets if accept queue is full.
6) kernel: net: netfilter: ctnetlink: netns exit must wait for callbacks.
7) kernel: net: llc2: fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c).
8) kernel: net: tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK.
9) kernel: net: vlan: vlan_changelink() should propagate errors.
10) kernel: net: vlan: fix memory leak in vlan_dev_set_egress_priority.
11) kernel: net: tcp: minimize false-positives on TCP/GRO check.
12) kernel: mtk_wifi: more safe mcu communicate.
13) kernel: mtk_wifi: fix null pointer dereference in connection protect code.
14) kernel: mtk_wifi: mt7615 update to 5.0.4.0 driver.
15) kernel: mtk_wifi: mt7615 fix select ring for MCU cmd send issue.
16) kernel: mtk_wifi: mt7615 improve eapol key management.
17) kernel: mtk_wifi: mt7615 fix set rate in amsdu mode.
2.3.x
1) toolchain: update binutils to 2.34.
2) accel-ppp: sync with git (commit 32d5c8).
3) dnsmasq: sync with git version 2.81 (commit 2e32c0).
4) pppd: sync with git version 2.4.8 (commit 5636af).
5) xupnpd: sync with git version 1.0.34 (commit 52df4d).
6) init.d: transparent background update mode for IPOE.
7) init.d: avoid conntrack reuse in pppd tunnel mode.
8) webui: add mcprobe, multicast diagnostic tool.
9) webui: add tcpdump.
10) kernel: mips: avoid explicit UB in assignment of mips_io_port_base.
11) kernel: net: tcp: fix marked lost packets not being retransmitted.
12) kernel: net: neigh: use long type to store jiffies delta.
13) kernel: net: fix skb->csum update in inet_proto_csum_replace16().
14) kernel: net: llc: fix another potential sk_buff leak in llc_ui_sendmsg().
15) kernel: net: llc: fix sk_buff refcounting in llc_conn_state_process().
16) kernel: net: netfilter: conntrack: small conntrack lookup optimization.
17) kernel: net: netfilter: nat: fix spurious connection timeouts.
18) kernel: net: netfilter: nat: fix ICMP header corruption on ICMP errors.
19) kernel: net: netfilter: conntrack: udp: only extend timeout to stream mode after 2s.
20) kernel: mtk_wifi: mt7613: update to 6.0.2.0 driver.
21) kernel: mtk_wifi: mt7613: improve multiclient TxOP tune.
22) kernel: mtk_wifi: mt7613/mt7615: code review, small fixup and cleanup.
2.4.x
1) uclibc-ng: update to 1.0.33 version (commit 033867).
2) openssl: update to 1.1.1d (temp api compat 1.0.0 mode).
3) freeradius: update to 3.0.20 version.
4) libxml2: sync with git version 2.9.10 (commit 8f52aa).
5) dnsmasq: sync with git version 2.81 (commit 74dc9bf4).
6) xupnpd: sync with git version 1.0.34 (commit 9a8a10).
7) libcurl: up to 7.68.0 version.
8) libpcre: up to 8.44 version.
9) libmicrohttpd: version update to 0.9.70.
10) ethtool: up to 5.4 version.
11) e2fsprogs: up to 1.45.5 version.
12) usb_modeswitch: up to 2.60 version.
13) init.d: allow rp_filter lose mode at wan for receive multicast from not studied subnets
14) webui improvements.
15) webui: add force igmp version.
16) kernel: mips: do_mcheck: fix kernel code dump with EVA.
17) kernel: futex: prevent robust futex exit race.
18) kernel: mtd: jedec_probe: fix crash in jedec_read_mfr().
19) kernel: serial: serial_core: perform NULL checks for break_ctl ops.
20) kernel: fs: ext4: fix the number of credits needed for ext4_ext_migrate().
21) kernel: hrtimer: ensure POSIX compliance (relative CLOCK_REALTIME hrtimers).
22) kernel: hrtimer: get rid of the resolution field in hrtimer_clock_base.
23) kernel: net: tcp: clear tp->total_retrans in tcp_disconnect().
24) kernel: net: ipv4/igmp: don't drop IGMP pkt with zeros src addr.
25) kernel: net: multicast: should not send source list records when have filter mode change.
26) kernel: net: fib_rules: correctly set table field when table number exceeds 8 bits.
27) kernel: mtk_wifi: mt7613: fix 802.1x support.
28) kernel: mtk_wifi: fix compat FT over DS mode for new and old devices.
29) kernel: mtk_wifi: switch Qload to CCaNav counters and fix work in DBDC mode.
2.5.x
1) webui: add airtime/per info for easy network physics analyze.
2) webui: stalist rename to radio info.
3) webui: implement easy config.
4) webui: implement dnsfiter source list edit.
5) webui: implement password generate.
6) webui: some bug fixes.
7) accel-ppp: sync with git (commit c8c596).
8) arp-scan: sync with git version to 1.9.7 (commit 6cbb67).
9) xupnpd: sync with git version 1.0.34 (commit 44cc39).
10) pppd: sync with git version 2.4.8 (commit 450f6c).
11) dropbear: sync with git version 2019.78 (commit a6297e).
12) dnsmasq: sync with git version 2.81 (commit c8dcbc).
13) openssl: update to 1.1.1g (temp api compat 1.0.0 mode).
14) openvpn: update to 2.4 rc2 (commit 14c044).
15) freeradius: update to 3.0.21 version.
16) nginx: update to 1.18.0 version.
17) lldp: up to 1.0.5 version.
18) miniupnpd: update to 2.1.20200329 version.
19) libatomic: update to 7.2g (commit c58956c).
20) libxml2: update to 2.9.9 (commit ef9db1).
21) uclibc-ng: update to 1.0.34 version (commit 28b34c6ed).
22) libcurl: up to 7.69.1 version.
23) libssh: up to 0.9.4 version.
24) toolchain: update headers and uclibc.
25) init.d: fix WNM disable.
26) kernel: signal: avoid double atomic counter increments for user accounting.
27) kernel: signal: extend exec_id to 64bits.
28) kernel: random: always use batched entropy for get_random_u{32,64}.
29) kernel: fix multiplication overflow in copy_fdtable().
30) kernel: net: fix Tx hash bound checking.
31) kernel: net: ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface.
32) kernel: net: neighbour: remove neigh_cleanup() method.
33) kernel: net: tcp: do not send empty skb from tcp_write_xmit().
34) kernel: net: tcp: cache line align MAX_TCP_HEADER.
35) kernel: net: netfilter: nat: never update the UDP checksum when it's 0.
36) kernel: net: ipv4: really enforce backoff for redirects.
37) kernel: net: pppoe: only process PADT targeted at local interfaces.
38) kernel: mtk_wifi: check wdev at bss stop.
2.6.x
1) uclibc-ng: update to 1.0.34 version (commit 38c88b).
2) libcurl: up to 7.70.0 version.
3) libnettle: up to 3.6.0 version.
4) dnsmasq: sync with git version 2.81 (commit 85e8aa).
5) dropbear: sync with git version 2019.78 (commit 60db74).
6) haveged: up to 1.9.8 version (commit c66fa6).
7) openvpn: update to 2.4.10 rc2 (commit 84286f).
8) pppd: sync with git version 2.4.8 (commit a37a1f).
9) xupnpd: sync with git version 1.0.34 (commit 158d6ea).
10) xupnpd: implement feeds load retry and connect wait before feeds update.
11) xupnpd: fix build xml entry if in playlist mime type exist and corrupt.
12) xupnpd: fix get dlna info in some cases.
13) iproute: fix gretap (eo_gre) support.
14) init.d: add start customizers scriptps from /pss/rc.d if exist.
15) init.d: rwfs /etc hooks implement for /pss.
16) init.d: req login at UART console to.
17) init.d: implement ssh auth logic by public key support.
18) build_system: add wireguard tools.
19) kernel: genirq/generic_pending: do not lose pending affinity update.
20) kernel: mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap().
21) kernel: fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info().
22) kernel: net: add ip_gre support.
23) kernel: net: add wireguard support.
24) kernel: net: netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code.
25) kernel: mtk_wifi: mt7615: fix per band radio on/off in DBDC mode.
2.7.x
1) webui: implement fast usage tabs.
2) webui: fix fdleak.
3) webui: implement night mode (force disable some leds).
4) webui: some refactoring and spell fixes.
5) webui: purepppoe: fix auto apply wan mode change.
6) webui: vpn: fix password symbols check.
7) webui: use WPA2/3 PSK mode as default.
8) nginx: fix potentional crash.
9) init.d: do not regenerate dhcp6 duid every reconfigure.
10) init.d: move config leds in true place.
11) init.d: reinit modem at full reconfigure call.
12) init.d: fix printer firmware upload.
13) dhcpv6: generate stable duid for long time.
14) dnsmasq: up to stable 2.82 version.
15) kernel: perf/hwbp: simplify the perf-hwbp code, fix documentation.
16) kernel: char: lp: fix possible integer overflow in lp_setup().
17) kernel: vhost: make sure log_num < in_num.
18) kernel: nfsd4: minor NFSv2/v3 write decoding cleanup.
19) kernel: nfsd: stricter decoding of write-like NFSv2/v3 ops.
20) kernel: nfsd: fix memory corruption caused by readdir.
21) kernel: timerfd: protect the might cancel mechanism proper.
22) kernel: unix_diag: fix incorrect sign extension in unix_lookup_by_ino.
23) kernel: verify the directory entry filename is valid.
24) kernel: remove WARN_ON_ONCE() for bad directory entries.
25) kernel: mm: mempolicy: require at least one nodeid for MPOL_PREFERRED.
26) kernel: mm/mempolicy.c: fix out of bounds write in mpol_parse_str().
27) kernel: crypto: user - fix crypto_alg_match race.
28) kernel: crypto: user - fix memory leak in crypto_report.
29) kernel: crypto: cts - fix crash on short inputs.
30) kernel: ext4: Introduce ext4_clamp_want_extra_isize().
31) kernel: ext4: add more paranoia checking in ext4_expand_extra_isize handling.
32) kernel: ext4: work around deleting a file with i_nlink == 0 safely.
33) kernel: ext4, jbd2: ensure panic when aborting with zero errno.
34) kernel: ext2: check err when partial != NULL.
35) kernel: jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal.
36) kernel: jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record.
37) kernel: sched/fair: handle case of task_h_load() returning 0.
38) kernel: net: do not clear the sock TX queue in sk_set_socket.
39) kernel: net: core: reduce recursion limit value.
40) kernel: net: tcp: syncookies: reduce cookie lifetime to 128 seconds.
41) kernel: net: tcp: syncookies: do not use getnstimeofday().
42) kernel: net: tcp: syncookies: extend validity range.
43) kernel: net: tcp: fix rejected syncookies due to stale timestamps.
44) kernel: net: tcp: protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE().
45) kernel: net: dccp: do not send reset to already closed sockets.
46) kernel: net: dccp: check sk for closed state in dccp_sendmsg().
47) kernel: net: xfrm4: fix uninitialized memory read in _decode_session4.
48) kernel: net: fix uninit-value in __hw_addr_del_ex().
49) kernel: net: fix deadlock while clearing neighbor proxy table.
50) kernel: net: bridge: deny dev_set_mac_address() when unregistering.
51) kernel: net: call notifiers for mtu change even if iface is not up.
52) kernel: net: make dev_set_mtu() honor notification return code.
53) kernel: net: bridge: enfore alignment for ethernet address.
54) kernel: net: igmp: avoid long time switchback from igmpv3.
55) kernel: net: fill fl4_icmp_{type,code} in ping_v4_sendmsg.
56) kernel: net: llc: make sure applications use ARPHRD_ETHER.
57) kernel: net: udp: fix wrong clean up for IS_UDPLITE macro.
58) kernel: net: macvlan: do not assume mac_header is set in macvlan_broadcast().
59) kernel: net: macvlan: use skb_reset_mac_header() in macvlan_queue_xmit().
60) kernel: net: net_sched: fix datalen for ematch.
61) kernel: net: net_sched: ematch: reject invalid TCF_EM_SIMPLE.
62) kernel: net: netfilter: ebtables: handle string from userspace with care.
63) kernel: net: netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON.
64) kernel: net: netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule.
65) kernel: net: netfilter: ebtables: compat: reject all padding in matches/watchers.
66) kernel: net: netfilter: ipset: fix an error code in ip_set_sockfn_get().
67) kernel: net: netfilter: bridge: make sure to pull arp header in br_nf_forward_arp().
68) kernel: net: netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present.
69) kernel: net: netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct.
70) kernel: net: netfilter: arp_tables: simplify translate_compat_table args.
71) kernel: net: netfilter: arp_tables: init netns pointer in xt_tgchk_param struct.
72) kernel: net: netfilter: x_tables: add and use xt_check_entry_offsets.
73) kernel: net: netfilter: x_tables: kill check_entry helper.
74) kernel: net: netfilter: x_tables: assert minimum target size.
75) kernel: net: netfilter: x_tables: add compat version of xt_check_entry_offsets.
76) kernel: net: netfilter: x_tables: check standard target size too.
77) kernel: net: netfilter: x_tables: check for bogus target offset.
78) kernel: net: netfilter: x_tables: validate all offsets and sizes in a rule.
79) kernel: net: netfilter: x_tables: don't reject valid target size on some architectures.
80) kernel: net: netfilter: x_tables: xt_compat_match_from_user doesn't need a retval.
81) kernel: net: netfilter: x_tables: do compat validation via translate_table.
82) kernel: net: netfilter: ip6_tables: simplify translate_compat_table args.
83) kernel: mtk_wifi: mt7615: fix per band auto channel select in DBDC mode.
84) kernel: mtk_wifi: mt7615: fix apcli work in DBDC mode.
2.8.x
1) init.d: improve use DHCP client in AP mode.
2) init.d: decrease noise debug at lease fail.
3) init.d: fix variable names conflict in some cases.
4) init.d: fix vlan configure in some cases.
5) init.d: implement mbssid by list configure.
6) init.d: more safe internal ESW reconfigure.
8) sysctl: tune conntrack timeouts.
9) webui: some improvements.
10) webui: review MBSSID config for more user friendly.
11) ppe: tune some parameters for more safe offloads.
12) uclibc-ng: update to 1.0.35 version (commit d1cd74).
13) libxml2: update to 2.9.10 (commit ef9db1).
14) libatomic: update to 7.4 (commit 613aa6).
15) libmicrohttpd: version update to 0.9.71.
16) libcurl: up to 7.70.1 version.
17) arp-scan: sync with git version to 1.9.7 (commit e24382).
18) dropbear: sync with git version 2020.80 (commit b6323b).
19) haveged: up to 1.9.13 version (commit 9b0eaa).
20) openvpn: update to 2.4.10 rc2 (commit 55c3b1).
21) pppd: sync with git version 2.4.8 (commit 9131ce).
2.9.x
1) toolchain: update binutils/headers/uclibc-ng.
2) busybox: update to 1.32.0 version.
3) busybox: fix two null pointers dereference, one UB and one double free errors.
4) uclibc-ng: update to 1.0.36 version (commit 551b8e).
5) uclibc-ng: fix resolv order.
6) openssl: update to 1.1.1h version.
7) haveged: up to 1.9.13 version (commit 25dc40).
8) accel-ppp: sync with git (commit 477d7d).
9) dropbear: sync with git version 2020.80 (commit 7f8135).
10) openvpn: update to 2.6 (commit f6a3d1).
11) radvd: update to 2.19 version.
12) pppd: sync with git version 2.4.8 (commit 2cdccb).
13) xl2tpd: sync with git version 1.3.16rc1 (commit 01907f).
14) netcwnmpd: fix null pointer dereference.
15) netcwnmpd: fix return fault code.
16) init.d: fix double start pss init.
17) init.d: do not create netfilter rules for telnet in not ATE builds.
18) init.d: nvram: fix shields issue.
19) init.d: fix cwmp work in AP bridge mode.
20) init.d: more safe for SMP (avoid races).
21) init.d: add sanity check for DNS mode.
22) init.d: more safe ipv6 dns select logic.
23) init.d: implement dns fallback for AP with DHCP mode.
24) init.d: improve DHCP AP logic.
25) init.d: initial modem wdg support.
26) init.d: initial modem as wan support.
27) system: implement call renew dhcpv6 prefix by wan blink.
28) webui: fix shielding in netdiag.
29) webui: add basic 802.11ax support.
30) webui: user names sanity checks add.
31) webui: disable ApDhcpMode by default for repeater case.
32) webui: implement PMF for apcli.
33) webui: add pure WPA3 modes.
34) webui: improve translations.
35) webui: improve styles and images.
36) webui: implement hide/show left menu by logo click.
37) webui: implement adaptive tables sizes.
38) libwive: add 3T3R MCS table support.
39) fwupdate: more safe update procedure.
40) band steering: tune for avoid noise tables overload.
41) netcwmpd: always use nvram in merge mode.
42) kernel: usb: qmi: sync devices IDs from 5.8 kernel.
43) kernel: net: netdev_alloc_skb() use build_skb().
44) kernel: net: introduce netdev_alloc_frag().
45) kernel: net: respect GFP_DMA in __netdev_alloc_skb().
46) kernel: net: update alloc frag to reduce get/put page usage and recycle pages.
47) kernel: net: use bigger pages in __netdev_alloc_frag.
48) kernel: net: fix races in page->_count manipulation.
49) kernel: net: introduce NAPI_POLL_WEIGHT.
50) kernel: net: neigh_stat_seq_next() should increase position index.
51) kernel: net: add skb_queue_empty_lockless().
52) kernel: net: skbuff: fix a data race in skb_queue_len().
53) kernel: net: packet: fix overflow in tpacket_rcv.
54) kernel: net: netfilter: nf_log: fix error on write NONE to logger choice sysctl.
55) kernel: net: netfilter: nf_log: fix uninit read in nf_log_proc_dostring.
56) kernel: net: netfilter: ebtables: fix a memory leak bug in compat.
57) kernel: net: xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input.
58) kernel: net: xfrm: fix a NULL-ptr deref in xfrm_local_error.
59) kernel: net: l2tp: do not use inet_hash()/inet_unhash().
60) kernel: net: l2tp: add sk_family checks to l2tp_validate_socket.
61) kernel: net: tcp: do not create inetpeer on SYNACK message.
62) kernel: net: tcp: fix to update snd_wl1 in bulk receiver fast path.
63) kernel: net: ipv4: fix incorrect error code when adding an unreachable route.
64) kernel: net: ipv4: consider TOS in fib_select_default.
65) kernel: net: ipv4: fib_trie: don't unnecessarily search for already found fib leaf.
66) kernel: net: ipv4: fib_trie: no need to delay vfree().
67) kernel: net: ipv4: fib_trie: avoid a redundant bit judgement in inflate.
68) kernel: net: ipv4: fib_trie: only calculate for the un-first node.
69) kernel: net: ipv4: fib_trie: fix trie balancing issue if new node pushes down existing node.
70) kernel: net: fib: decrease one unnecessary rt cache flush in fib_disable_ip.
71) kernel: net: fib_rules: resolve goto rules target on delete.
72) kernel: net: rps_dev_flow_table_release(): no need to delay vfree().
73) kernel: net: ppp: adjust indentation into ppp_async_input.
74) kernel: net: neighbour: avoid writing before skb->head in neigh_hh_output().
75) kernel: net: l2tp: lock socket before checking flags in connect().
76) kernel: net: l2tp: fix racy socket lookup in l2tp_ip and l2tp_ip6 bind().
77) kernel: net: l2tp: new kernel function to get IP overhead on a socket.
78) kernel: net: l2tp: adjust intf MTU, add underlay L3, L2 hdrs.
79) kernel: net: l2tp: don't register sessions in l2tp_session_create().
80) kernel: net: l2tp: initialise l2tp_eth sessions before registering them.
81) kernel: net: tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key().
82) kernel: net: tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers.
83) kernel: net: tcp: md5: allow changing MD5 keys in all socket states.
84) kernel: net: fix spurious HYSTART_DELAY exit upon drop in min RTT.
85) kernel: net: netfilter: ctnetlink: add a range check for l3/l4 protonum.
86) kernel: net: xfrm: clone XFRMA_REPLAY_ESN_VAL in xfrm_do_migrate.
87) kernel: net: xfrm: clone whole liftime_cur structure in xfrm_do_migrate.
88) kernel: net: xfrm: use correct address family in xfrm_state_find.
89) kernel: net: avoid unnecessary inet_addr_type() call when addr is INADDR_ANY.
90) kernel: net: bridge: clear bridge's private skb space on xmit.
91) kernel: mips: do not flush tlb page when updating PTE entry.
92) kernel: mips: mm: add page valid judgement in function pte_modify.
93) kernel: mtk_wifi: mt7615/mt7613: disable SAE-FT mode (wait wifi alliance standard release).
94) kernel: mtk_wifi: start merge with internal tree for MT7915 AX devices support.
95) kernel: mtk_wifi: use new netdev_alloc api by default.
96) kernel: mtk_wifi: drop unprotected dissassoc frames if PMF used.
97) kernel: mtk_wifi: fix small leak in rrm.
98) kernel: mtk_wifi: fix null pointer dereference in rx management frame process.
3.0.x
1) build_system: use noexec stack for all binary for now (more sec).
2) uclibc-ng: update to 1.0.36 version (commit 916c5a).
3) arp-scan: update OUI database.
4) dropbear: sync with git version 2020.81 (commit 12a876).
5) dnsmasq: sync with git version 2.82 (commit 35853d).
6) pppd: sync with git version 2.4.8 (commit 042084).
7) pppd: fix eat vlan ifnames.
8) xl2tpd: sync with git version 1.3.16 (commit f8c295).
9) openssl: update to 1.1.1i version.
10) transmission: update to 3.0.0 version.
11) ntfs-3g: switch to use git version (commit d0b838).
12) implement 802.11ax (wifi6) support.
13) init.d: add check boot safe.
14) init.d: fix config nginx log.
15) init.d: improve upneigh.
16) init.d: fix shields SSID variable.
17) init.d: improve LAN2BSSID isolation modes.
18) iappd: fix compat with MT7915.
19) iappd: fix some issues on multiband mode.
20) iappd: fix some issues with Apple and SGS S8 devices.
21) 802.1x: daemon update to 3.0.1.0 version.
22) 802.1x: full compat with mt7915 driver arch.
23) 802.1x: fix some issues with some clients with mt7615.
24) wireguard: module and wg tool sync with git.
25) netcwnmpd: fix reboot after config merge.
26) webui: add arpignore option.
27) webui: fix show GW/DNS in LAN page in bridget modes.
28) webui: fix l2tunnels status get.
29) webui: fix translations.
30) webui: modem as wan implement.
31) webui: add clear caches to netdiag.
32) webui: add more 802.11ax compat.
33) webui: wireless basic improve for decrease congestion.
34) webui: implement semi (mbssid only) LAN2WLAN isolation mode.
35) webui: fix page lock at counters show.
36) kernel: exfat: update driver.
37) kernel: net: move pskb_put() to core code.
38) kernel: net: add optional SKB arg to dst_ops->neigh_lookup().
39) kernel: net: added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb.
40) kernel: net: core: handle csum for CHECKSUM_COMPLETE.
41) kernel: net: core: dev: introduce skb_scrub_packet().
42) kernel: net: core: dev: move skb_scrub_packet() after eth_type_trans().
43) kernel: net: core: dev: do not ignore dmac in dev_forward_skb().
44) kernel: net: core: dev: add __dev_forward_skb.
45) kernel: net: core: skb: allow skb_scrub_packet() to be used by tunnels.
46) kernel: net: core: skb: do not scrub skb mark within the same name space.
47) kernel: net: vlan: use sizeof instead of literal number.
48) kernel: net: vlan: remove unnecessary comparison of unsigned against 0.
49) kernel: net: vlan: change return type of vlan_proc_rem_dev.
50) kernel: net: vlan: use ether_addr_equal.
51) kernel: net: ipv6: reply ICMP error if the first fragment don't include all headers (RFC8200 SECTION 4.5).
52) kernel: net: ipv6: netfilter: discard first fragment not including all headers (RFC8200 SECTION 4.5).
53) kernel: net: ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init.
54) kernel: net: clear tstamp only on the forwarding path.
55) kernel: net: clear tstamp in bridge forwarding path.
56) kernel: net: vlan: fix vlan_get_protocol for stacked vlan.
57) kernel: net: vlan: consolidate VLAN parsing code and limit max parsing depth.
58) kernel: ralink_hwnat: prevent unbind keepalived connections.
59) kernel: mtk_wifi: fix auto channel scan timer work.
60) kernel: mtk_wifi: improve RRM.
61) kernel: mtk_wifi: prevent replace channel triplets in some cases.
62) kernel: mtk_wifi: prevent overflow management packet size in FT.
63) kernel: mtk_wifi: sec: fix small memleak in error path.
64) kernel: mtk_wifi: sec: fix BTM vs APCLI war.
65) kernel: mtk_wifi: sec: improve SAE/OWE support (RFC compat).
66) kernel: mtk_wifi: fix PSM to compat with WMM v1.1 (RFC compat).
67) kernel: mtk_wifi: fix mbsid mac generate in some cases.
68) kernel: mtk_wifi: drop pkt from non-connected sta (RFC compat).
69) kernel: mtk_wifi: fix handle PMF frames in some situations (RFC compat).
70) kernel: mtk_wifi: prevent clear some deep sleep clients from WTLB.
71) kernel: mtk_wifi: mt7915: fix fq offload.
72) kernel: mtk_wifi: mt7915: fix led operation logic.
3.1.x
1) build_system: add new Wi-Cat products targets.
2) uclibc-ng: update to 1.0.37 version.
3) accel-ppp: sync with git (commit e9a169).
4) dnsmasq: sync with git version 2.83 (commit 35b85b).
5) haveged: up to 1.9.13 version (commit ba6e34).
6) webui: fix show scan result in some cases.
7) kernel: random: implement null latency push entropy from irq.
8) kernel: rtmutex: fix null pointer dereference in handle deadlock.
9) kernel: net: tcp: up initial rmem to 128KB and SYN rwin to around 64KB.
10) kernel: net: tcp: start receiver buffer autotuning sooner.
11) kernel: net: tcp: select sane initial rcvq_space.space for big MSS.
12) kernel: net: netfilter: remove obsolete need_conntrack stub.
13) kernel: net: sched: dev_deactivate_many(): use msleep(1) instead of yield() to wait for outstanding qdisc_run calls.
14) kernel: net: netfilter: conntrack: connection timeout after re-register.
15) kernel: ralink_hwnat: avoid corruption UDP packets in some cases.
16) kernel: mtk_wifi: fix message type parse in NO_ACK case.
17) kernel: mtk_wifi: need zeroed struct before set HT/VHT modes.
18) kernel: mtk_wifi: improve mactable lookup and mac entry lookup.
19) kernel: mtk_wifi: init rssi every mactable records reset.
20) kernel: mtk_wifi: check hw amsdu support before flag set.
21) kernel: mtk_wifi: fix potentional null pointer dereference in AndesAllocCmdMsg.
22) kernel: mtk_wifi: fix potentional null pointer dereference in announce_or_forward_802_3_pkt.
23) kernel: mtk_wifi: improve peer bandwidth allocation action frame parse.
24) kernel: mtk_wifi: improve cmm sanity checks.
25) kernel: mtk_wifi: need check queue not empty before process in MlmeDequeue.
26) kernel: mtk_wifi: need check wdev is active before enqueue packet to recv.
27) kernel: mtk_wifi: fix multiprofile cut last sybmols in some values.
28) kernel: mtk_wifi: RRM prevent send BCN from invalid WCID.
29) kernel: mtk_wifi: fix reenable SCS.
30) kernel: mtk_wifi: improve search wdev by band.
31) kernel: mtk_wifi: fix wdev update attr procedure in preinit case.
32) kernel: mtk_wifi: mt7615: fix unreq scans in from apcli in DBDC mode.
3.2.x
1) busybox: update to 1.33.0 version.
2) busybox: traceroute: fix option parsing (fix 1.33 regression).
3) busybox: nslookup: do not print "No answer" for NODATA replies, closes 13006.
4) busybox: ash: match bash behavior for ${empty_var/*/repl}.
5) busybox: ash: fix ${unset_var/pattern/repl}.
6) busybox: revert crontab: Fix -e with editors saving using renaming strategy (regression).
7) libatomic: sync with git (commit 37bdea).
8) uclibc-ng: sync with git (commit 85e1958).
9) libnettle: up to 3.7.0 version.
10) accel-ppp: sync with git (commit c6de71).
11) pppd: sync with git (commit 2e2baf).
12) pppd: implement auto fallback to legacy ipv6 peer route add then fail.
13) pppd: fix lcp echo adaptive logic regression introduced in upstream after last sync.
14) pppd: improve adaptive LCP mode.
15) haveged: up to 1.9.14 version (commit 35c559).
16) netcwmpd: semi implement TR-181 2.2 ipv6 support.
17) dnsmasq: up to 2.85 git version (commit bad6dd, critical secure fixup).
18) dropbear: sync with git version 2020.81 (commit 29e6fa).
19) miniupnpd: update to 2.2.1 version.
20) openssl: update to 1.1.1j version.
21) igmpproxy: add more sanity checks before igmp messages accept (avoid side effects RTK hack).
22) init.d: modemhelper: fix metric for dgw in ppp mode.
23) init.d: sysctl: fix arp_ignore change.
24) init.d: full disable ipv6 support in miniupnpd if ipv6 not configured.
25) init.d: fix radvd start in tunneled mode.
26) init.d: fix symlinks for crontabs.
27) system: add support policy routing support.
28) webui: implement special UI debug mode.
29) kernel: futex: replace pointless printk in fixup_owner() (CVE-2021-3347).
30) kernel: mips: lib: uncached: fix non-standard usage of variable sp.
31) kernel: mips: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section.
32) kernel: net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet.
33) kernel: net: ipv6: create multicast route with RTPROT_KERNEL.
34) kernel: net: neighbour: prevent a dead entry from updating gc_list.
35) kernel: net: netfilter: xt_recent: fix attempt to update deleted entry.
36) kernel: net: netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in __nf_conntrack_confirm.
37) kernel: mtk_wifi: mt7615: more smooth roam with band steering enabled.
3.3.x
1) toolchain: update binutils, headers, uclibc-ng.
2) libatomic: sync with git (commit 6cea9d).
3) coova-chilli: sync with git version 1.6 (commit 088e61).
4) dnsmasq: up to last 2.8x git version (commit b1a27b).
5) dropbear: sync with git version 2020.81 (commit d156c6).
6) ntfs-3g: sync with git version (commit 7393ed).
7) openvpn: sync with git version (commit 41b041).
8) pppd: sync with git (commit a6d122).
9) busybox: backport udhcpc: clarify bcast/unicast sends in logs, include server ID.
10) busybox: backport udhcpc: ignore zero-length DHCP options.
11) busybox: backport udhcpc: udhcpc: ignore zero-length DHCP options, take 2.
12) webui: fix BTM show at 7613/7915.
13) webui: fix get max clients for 7915.
14) kernel: net: skbuff: fix up truesize of cloned skb in skb_prepare_for_shift().
15) kernel: mtk_wifi: update cryptolib.
16) kernel: mtk_wifi: update regional lists.
17) kernel: mtk_wifi: fix msg handle in RRM.
18) kernel: mtk_wifi: fix ft work at some clients with WPA3 enabled.
19) kernel: mtk_wifi: fix potentianal null pointer dereference in mac delete.
20) kernel: mtk_wifi: fix potentional null pointer dereference in task kill.
21) kernel: mtk_wifi: fix potentional null pointer dereference in FT keep ip logic.
22) kernel: mtk_wifi: fix potentional null pointer dereference in tx/rx stat.
23) kernel: mtk_wifi: fix potentional null pointer dereference in phy config.
24) kernel: mtk_wifi: fix potentional null pointer dereference in get band index.
25) kernel: mtk_wifi: fix potentional null pointer dereference in push cmd to Andes logic.
26) kernel: mtk_wifi: fix potentional null pointer dereference in wlan operate.
27) kernel: mtk_wifi: fix init one_sec_tx_succ_pkts in some cases.
28) kernel: mtk_wifi: fix data padding in hw rx path.
29) kernel: mtk_wifi: fix pmf head parse.
30) kernel: mtk_wifi: fix ft igtk id parse.
31) kernel: mtk_wifi: fix ft mic calculate.
32) kernel: mtk_wifi: fix handle protected dual of action frames in PMF.
33) kernel: mtk_wifi: do not set from DS flag in FT.
34) kernel: mtk_wifi: according to specific, if it already in SST_ASSOC, it can not go back in FT/AUTH cases.
35) kernel: mtk_wifi: avoid unneeded decrease VHT power in some cases.
36) kernel: mtk_wifi: avoid process mlme.queue/CmdQ/HwCtrlQ too long which cause RCU_sched stall.
37) kernel: mtk_wifi: avoid MCU CmdQ stall.
38) kernel: mtk_wifi: mt7613: fix WMM traffic detect.
39) kernel: mtk_wifi: mt7915: update to 7.3.0.1 version.
40) kernel: mtk_wifi: mt7915: always set extif tag before packet send to PPE.
3.4.x
1) busybox: update to 1.33.1 sable version.
2) uclibc-ng: sync with git (commit bfdfd6).
3) openssl: update to 1.1.1k version.
4) dropbear: sync with git version 2020.81 (commit 80be14).
5) accel-ppp: sync with git (commit fb4a7e4).
6) dnsmasq: up to last 2.86 git version (commit acfc39).
7) haveged: up to 1.9.15 version (commit 899c47).
8) radvd: sync with git (commit f4ce1e).
9) iappd: need always init mac addresses variables.
10) xupnpd: fix bad argument #1 to 'find' (string expected, got nil).
11) fix smart button short press handle regression.
12) defaults: remove www.malwaredomainlist.com from adlists (dead).
13) adblock: remove dead list.
14) dhcpc: classfull route need add with true metric for avoid conflict with VPN.
15) init.d: need restart some service in AP with DHCP mode if IP changed.
16) kernel: init: limit size of /var tmpfs part.
17) kernel: net: correct sk_acceptq_is_full().
18) kernel: net: ipv6: weaken the v4mapped source check.
19) kernel: net: ipv6: refactor in rt6_age_examine_exception.
20) kernel: net: vlan: fix a data race when get vlan device.
21) kernel: net: netfilter: x_tables: use correct memory barriers.
22) kernel: mtk_wifi: avoid remove really active client records from PMK cache.
23) kernel: mtk_wifi: try avoid handoff vs FT war.
24) kernel: mtk_wifi: fix potentional null pointer dereference in wdev/ate/wcid/mac/wmm table manipulation logic.
25) kernel: mtk_wifi: old chips fix regional settings init.
26) kernel: mtk_wifi: cache result GET_NUM_OF_TX_RING (decrease CPU usage).
27) kernel: mtk_wifi: fix potentional null pointer dereferences in MIC calculate.
28) kernel: mtk_wifi: mt7915: fix MAP/MBO/OCE support build (prepare integration new features).
3.5.x
1) webui: implement black theme.
2) webui: fix torrent page regression.
3) init.d: move arpping on upneigh to background.
4) init.d: remove not working global adlist.
5) init.d: add /etc/scripts/usersrvc.sh hook.
6) dnsmasq: up to last 2.8x git version (commit a5d113).
7) radvd: sync with git (commit 7858fc).
8) accel-ppp: sync with git (commit de495c).
9) miniupnpd: update to 2.2.2 version.
10) miniupnpd: fix upstream (lan address check) regression .
11) pppd: sync with git (commit 0e6b64).
12) pppd: improve adaptive lcp echo mode.
13) pppd: fix regression in lcp echo process.
14) libusb: update to 1.0.24 version.
15) libnatpmp: sync with git (commit 34773a).
16) libcurl: up to 7.77.0 version.
17) libssh: up to 0.9.5 version.
18) liblzo: add liblzo2 implementation.
19) freeradius: update to 3.0.23 version.
20) openvpn: sync with git version (commit c27c43).
21) openvpn: enable LZO support.
22) ralinkiappd: disable nagle for TCP sockets.
23) kernel: net: core/fib return the correct errno code.
24) kernel: net: icmp: don't send out ICMP messages with a source address of 0.0.0.0.
25) kernel: net: netlink: disable IRQs for netlink_lock_table().
26) kernel: net: af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock.
27) kernel: net: ethtool: clear heap allocations for ethtool function.
28) kernel: net: skbuff: implement put_zeo/u8 helpers.
29) kernel: net: fib_rules: add .suppress operation.
30) kernel: net: fib_rules: add route suppression based on ifgroup.
31) kernel: net: fib_rules: fix suppressor names and default values.
32) kernel: net: ipv4: fix memory leak in ip_mc_add1_src.
33) kernel: net: ipv4: remove unneed BUG() function.
34) kernel: mtk_wifi: fix calculate RRB FT action frame len.
35) kernel: mtk_wifi: always init sec config ft section variables.
36) kernel: mtk_wifi: prevent corrupt pmkcache records.
37) kernel: mtk_wifi: need first reset StaRec in assoc update case.
38) kernel: mtk_wifi: allow WPA2 SHA-256 mode per default in WPA2/3 mixed mode.
39) kernel: mtk_wifi: 7915: fix generate RSN fields in beacons.
40) kernel: mtk_wifi: 7915: fix fast transition WPA2 mode if WPA3/WPA2-PSK mixed mode used.
3.6.x
1) uclibc-ng: sync with git (commit 25e2a3).
2) openssl: update to 1.1.1l version.
3) dnsmasq: up to last 2.8x git version (commit feaa01).
4) dropbear: sync with git version 2020.81 (commit 9380e9).
5) busybox: wget: allow HTTP 307/308 redirects.
6) bndstrg: sync with new SDK (v3.1.13).
7) bndstrg: workaround for reconnect issue (IOS).
8) bndstrg: implement roaming coexistence mode.
9) webui: implement xt_time in forward filters (basic parental control).
10) webui: improve start info page for more useful.
11) kernel: pid: kill pidhash_size in pidhash_init().
12) kernel: mm: zero hash tables in allocator.
13) kernel: mm: update callers to use HASH_ZERO flag.
14) kernel: net: send SYNACK packet with accepted fwmark.
15) kernel: net: inet: use bigger hash table for IP ID generation.
16) kernel: net: llc: fix skb_over_panic.
17) kernel: net: af_unix: split out functions related to registering inflight socket files.
18) kernel: net: netdevice: add the case if dev is NULL.
19) kernel: net: netdevice: remove redundant if statements.
20) kernel: net: linkwatch: add check for netdevice being present to linkwatch_do_dev.
21) kernel: net: linkwatch: fix failure to restore device state across suspend/resume.
22) kernel: net: igmp: fix data-race in igmp_ifc_timer_expire().
23) kernel: net: igmp: increase size of mr_ifc_count.
24) kernel: net: ipv6: fix return value of ip6_skb_dst_mtu.
25) kernel: net: ipv6: use prandom_u32() for ID generation.
26) kernel: net: ipv6: allocate enough headroom in ip6_finish_output2().
27) kernel: net: ipv6: ip6_finish_output2: set sk into newly allocated nskb.
28) kernel: net: ipv6: fix NULL dereference in ip6_route_dev_notify().
29) kernel: mtk_wifi: implement driver side bndstr garbage collector (avoid mac random issue).
30) kernel: mtk_wifi: fix null pointer dereference in link test logic.
31) kernel: mtk_wifi: fix potentional null pointer dereference in ap_probe checks.
32) kernel: mtk_wifi: fix potentional null pointer dereference in mlme handler.
33) kernel: mtk_wifi: fix free all R0KH information procedure.
34) kernel: mtk_wifi: fix small memleak in ft_ioctl.
35) kernel: mtk_wifi: fix null pointer dereference (find by new fuzz test system).
36) kernel: mtk_wifi: fix statis return in RtmpOSTaskKill.
37) kernel: mtk_wifi: fix snr/rssi calculate in some situations.
38) kernel: mtk_wifi: mt7915: update MCU firmware to 20201105 version.
39) kernel: mtk_wifi: mt7603: update MCU firmware to 20160107 version.
40) kernel: mtk_wifi: mt7620: tune ready timeouts to avoid freeze auto calibrations.
41) kernel: mtk_wifi: mt7615: update MCU firmware to 20200814 version.
42) kernel: mtk_wifi: mt7615: backport small and critical fixes from 5.0.5.2 driver.
43) kernel: mtk_wifi: mt7615: prepare for update driver version to 5.0.5.2 (now only internal tree and merge ater tests).
3.7.x
1) busybox: update to 1.34.0 version.
2) defaults: fix WAN port position at DUO-G (3.7.3 regression).
3) updater: cache wmac for avoid calls to mtd directly and other improvements.
4) arp-scan: sync with git version to 1.9.7 (commit 78b821).
5) dnsmasq: up to last 2.8x git version (commit 80bcb7c9).
6) haveged: up to 1.9.15 version (commit 2a32b4f2).
7) xl2tpd: sync with git version 1.3.16-1 (commit 27dbab).
8) openvpn: sync with git version (commit e6b2dae6b2da).
9) xupnpd: sync with git version 1.0.34 (commit 3618b4f).
10) libaio: sync with git (commit 992d5a).
11) libatomic: sync with git (commit c4c5b6).
12) libxml2: sync with git (commit 23a353).
13) libcurl: up to 7.78.0 version.
14) libmicrohttpd: version update to 0.9.73.
15) libpcre: up to 8.45 version.
16) libssh: up to 0.9.6 version.
17) libtalloc: update to 2.3.3 version.
18) accel-ppp: sync with git (commit 831dc4).
19) arpwatch: fix network calculate.
20) lldpd: update to 1.0.12 version.
21) miniupnpd: update to 2.2.3 version.
22) init.d: implement modem watchdog for hard reinit modem if internet not work.
23) add l2 network monitor.
24) webui: add sanity checks for upload files.
25) webui: implementsmart neighbor monitoring for netdiag tool.
26) webui: add SIP/TV ports indicator.
27) kernel: usb: core: avoid WARNings for 0-length descriptor requests.
28) kernel: net: ipv6: decrease hop limit counter in ip6_forward().
29) kernel: net: igmp: add ip_mc_list lock in ip_check_mc_rcu.
30) kernel: net: af_unix: set TCP_ESTABLISHED for datagram sockets too.
31) kernel: net: af_unix: fix potential NULL deref in unix_dgram_connect().
32) kernel: net: af_unix: fix a data-race in unix_dgram_poll.
33) kernel: net: tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos.
34) kernel: mtk_wifi: fix potentional NPD in build excap procedure.
35) kernel: mtk_wifi: mt7615: full update driver to 5.0.5.2 version (patchset 108).
36) kernel: mtk_wifi: mt7615/mt7915: implement show Noise Floor and SNR in stat.
37) kernel: mtk_wifi: fix show last RSSI in stat.
38) kernel: mtk_wifi: fix autochannel select per band regression in 5.0.5.2 driver.
3.8.x
1) busybox: update to 1.34.1 stable version.
2) nginx: update to 1.20.1 version.
3) webui: add indicators SNR/NF.
4) webui: fix wireless plot compat.
5) webui: calculate SNR per clients.
6) webui: transmission page fixup.
7) bndstrg: improve band only flags manipulation.
8) bndstrg: improve band steering coexistence with seamless roaming.
9) updated: improve check updates logic.
10) buildsystem: disable nodogsplash (long time not really used, save flash size).
11) buildsystem: disable openvpn (use from entware if need, save flash size).
12) 802.1x/bndstrg/iappd/arpmon/igmpproxy: find and fix some potentional issue (thanks new cppcheck).
13) 802.1x: sync fixes with current SDK.
14) init.d: initial wireguard server support.
15) init.d: improve upneigh.
16) kernel: tty: fix ->pgrp locking in tiocspgrp() (CVE-2020-29661).
17) kernel: tty: tty: fix ->session locking (CVE-2020-29660).
18) kernel: userns: add kuid_t and kgid_t and associated infrastructure in uidgid.h.
19) kernel: net: udp: annotate data race around udp_sk(sk)->corkflag.
20) kernel: net: netfilter: ip6_tables: zero-initialize fragment offset.
21) kernel: mtk_wifi: bndstrg: improve update record in assoc time procedure.
22) kernel: mtk_wifi: bndstrg: fix white/black lists work.
23) kernel: mtk_wifi: sec: fix all FragAttacks issue (see fragattacks.com).
24) kernel: mtk_wifi: ba: fix potentional null pointer dereference reorder logic.
25) kernel: mtk_wifi: ft: fix potentional null pointer dereference in encrypt key set procedure.
26) kernel: mtk_wifi: ft: fix incorrect calculate MIC in authentication-ACK frame in some cases.
27) kernel: mtk_wifi: rrm: add beacon report length check.
28) kernel: mtk_wifi: mt7615/mt7915: fix potentional null pointer dereference in update beacon.
29) kernel: mtk_wifi: mt7615/mt7613: fix potentional null pointer dereference in MAT engine.
30) kernel: mtk_wifi: mt7615/mt7613: fix potentional null pointer dereference in ge_tx_pkt_deq.
31) kernel: mtk_wifi: mt7615/mt7613: fix potentional null pointer dereference in radius support.
32) kernel: mtk_wifi: mt7615/mt7613: fix potentional null pointer dereference in wlan_operate_get_rts_len_thld.
33) kernel: mtk_wifi: mt7615/mt7613: fix potentional null pointer dereference in wlan_operate_set_vht_bw.
34) kernel: mtk_wifi: mt7615/mt7613: fix potentional null pointer dereference in build_ht_cap_ie.
35) kernel: mtk_wifi: mt7615/mt7613: add lost vht_ext_nss_bw_cap bit in VHTIE.
36) kernel: mtk_wifi: mt7615/mt7613: in security some arrays must be zeroed.
37) kernel: mtk_wifi: mt7615/mt7613: check BN_rshift result.
38) kernel: mtk_wifi: mt7615/mt7613: update cryptolibs.
39) kernel: mtk_wifi: mt7613: need zero memory before vht operate info set.
40) kernel: mtk_wifi: mt7915: update to 7.5.0.0 driver.
41) kernel: mtk_wifi: mt7610/mt7620: improve FragAttacks issue fix.
3.9.x
1) accel-ppp: sync with git (commit 8e0205).
2) arp-scan: sync with git (commit 32b6c4).
3) dropbear: sync with git version 2020.81 (commit fedeb2).
4) haveged: up to 1.9.16 version (commit b39023).
5) freeradius: update to 3.0.25 version.
6) pppd: sync with git (commit 7a6cb3).
7) pppd: send PADT early.
8) usb_modeswitch: up to 2.6.1 version.
9) libatomic: sync with git (commit c4c5b6).
10) libcurl: up to 7.79.1 version.
11) libnettle: up to 3.7.1 version.
12) init.d: small optimize services reload.
13) init.d: dnsserver must always full restart after ppp up.
14) init.d: dnsserver more human-readable init logic.
15) init.d: improve pure pppoe connect restart establish.
16) init.d: avoid session freeze in RT BRAS after apply settings.
17) bandsteering: improve roaming coex logic.
18) bandsteering: fix netlink no buffer space issue in some cases.
19) webui: add 802.11w (PMF) require mode.
20) webui: add WPA3 only modes for 7615/7915.
21) webui: rearrange wireless security modes.
22) kernel: net: netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6.
23) kernel: mtk_wifi: avoid races in channel scan in DBDC mode.
24) kernel: mtk_wifi: fix potentional null pointer dereference in channel scan in DBDC mode.
25) kernel: mtk_wifi: tune rate adapt logic for legacy frames as DHCP.
26) kernel: mtk_wifi: more strong check wpa rsn capability.
27) kernel: mtk_wifi: clear rcvd_mic before sanity.
28) kernel: mtk_wifi: ft: always zero mem for ft info buffer before use.
29) kernel: mtk_wifi: fix potentional null pointer dereference in packet utils.
30) kernel: mtk_wifi: fix potentional null pointer dereference in dllists.
31) kernel: mtk_wifi: fix potentional null pointer dereference in check ethers type and check is udp.
32) kernel: mtk_wifi: make rtmp timer add safe.
33) kernel: mtk_wifi: mt7613: fix copy edca param in create new WMM.
34) kernel: mtk_wifi: mt7915: do not send basic rates in BCN for 5GHz.
35) kernel: mtk_wifi: mt7915: fix incorrect check scan band.
36) kernel: mtk_wifi: mt7915: fix class3 errors handle.
37) kernel: mtk_wifi: mt7615: improve WPA3 support.
38) kernel: mtk_wifi: mt7603/mt7620: improve rate_alg/adapt tables for more safe rate select in current noisily air.
39) kernel: mtk_wifi: mt7613/mt7615: fix handle WPA3 connection in FT case.
40) kernel: mtk_wifi: mt7613/mt7615: update driver embedded cryptolibs.
41) kernel: mtk_wifi: mt7613/mt7615: more strong sanity checks in WPA implementation.
42) kernel: mtk_wifi: mt7613/mt7615: review and small fixup ap build association logic.
43) kernel: mtk_wifi: mt7613/mt7615: pmf: add sanity check for sa query req.
44) kernel: mtk_wifi: mt7613/mt7615: more compat with wireless/iw tools.
45) kernel: mtk_wifi: mt7613/mt7615: fix potentional NPD in wlan_config subsystem.
46) kernel: mtk_wifi: mt7613/mt7615: fix potentional NPD at band accure.
47) kernel: mtk_wifi: mt7613/mt7615: fix potentional NPD in acquire wcid.
48) kernel: mtk_wifi: mt7613/mt7615: fix potentional NPD country code get.
49) kernel: mtk_wifi: mt7613/mt7615: fix potentional NPD in 802.1x implementation.
50) kernel: mtk_wifi: mt7613/mt7615: fix potentional NPD in ap_scan logic.
51) kernel: mtk_wifi: mt7613/mt7615: do not try apply incorrect vht mode.
52) kernel: mtk_wifi: mt7613/mt7615: fix update DWRR in mac entry manipulation process.
53) kernel: mtk_wifi: mt7613/mt7615: handle dma mappings error in allocate rx buffer.
54) kernel: mtk_wifi: mt7613/mt7615: sure VoW mode changes in MCU.
55) kernel: mtk_wifi: mt7613/mt7615: increase max beacon length to 1400 bytes.
56) kernel: mtk_wifi: mt7613/mt7615: add handle memory allocation error in ractl init.
57) kernel: mtk_wifi: mt7613/mt7615: tr struct deinit must be after qm/tr exit.
58) kernel: mtk_wifi: mt7613/mt7615: drop duplicated management frames.
59) kernel: mtk_wifi: mt7915: fix and allow SAE-FT support now.
60) kernel: mtk_wifi: mt7613/mt7615/mt7915: improve workaround for incorrect PMF supported clients.
61) kernel: mtk_wifi: mt7915: add workaround for fix WPA3-FT vs some ugly device WAR (reworked).
3.10.x
1) toolchain: update binutils, headers, uclibc-ng.
2) libatomic: sync with git (commit 50d0ba).
3) dnsmasq: up to last 2.8x git version (commit 7912b7).
4) arp-scan: sync with git (commit 7e27a10).
5) haveged: up to 1.9.16 version (commit b9234f).
6) nginx: update to 1.20.2 version.
7) nginx: fix potentional crash.
8) webui: add qr code for wifi settings generate.
9) webui: split misc/monitoring pages.
10) webui: add wifi qr code to easy config to.
11) webui: implement select handoff band (HandOffBand variable 2.4GHz/5GHz/all, by default 2.4GHz).
12) webui: add force usb2 mode option for decrease interference with 2.4GHz and more compat with some HDD boxes.
13) webui: rewrite left menu for more comfortable work in phones.
14) webui: add qr codes to easy config.
15) webui: fix error in webserver log if lldp disabled.
16) init.d: improve preconfigure radio logic in apcli mode.
17) init.d: dnsmasq: filter ipv6 address in replies if ipv6 disabled.
18) libnvram: improve apcli config in DBDC mode.
19) uclibc: libc/inet/resolv: fix per thread res_state access (commit 2ef10c).
20) kernel: sched/core: mitigate race cpus_share_cache()/update_top_cache_domain().
21) kernel: tty: tty_buffer: fix the softlockup issue in flush_to_ldisc.
22) kernel: xhci: fix USB 3.x enumeration issues by increasing roothub power-on-good delay.
23) kernel: net: kill hold_net release_net.
24) kernel: net: netif_is_bond_slave always false if bonding support not build.
25) kernel: net: netif_supports_nofcs always false with non intel ethernet cards.
26) kernel: net: make ndev->irq signed for error handling.
27) kernel: net: rps: selective flow shedding during softnet overflow.
28) kernel: net: rfs: add a jump label.
29) kernel: net: selective tune gcc optimization profile for some critical network code.
30) kernel: net: multicast: calculate csum of looped-back and forwarded packets.
31) kernel: net: stream: don't purge sk_error_queue in sk_stream_kill_queues().
32) kernel: net: vlan: fix a UAF in vlan_dev_real_dev().
33) kernel: net: llc: fix out-of-bound array index in llc_sk_dev_hash().
34) kernel: net: xps: add max rate tx queue attribute.
35) kernel: net: add might_sleep() call to napi_disable.
36) kernel: net: ipv6: protect skb->sk accesses from recursive dereference inside the stack.
37) kernel: net: netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state.
38) kernel: net: netfilter: nfnetlink_queue: fix OOB when mac header was cleared.
39) kernel: net: netdevice: shrink size of struct netdev_queue.
40) kernel: mtk_wifi: mt7915: improve station not idle detect.
41) kernel: mtk_wifi: mt7613/mt7915: add filter and sort scantab records in some cases (more stong select for RRM use).
42) kernel: mtk_wifi: mt7613/mt7615/mt7915: improve RMM neihg report in DBDC mode and fix compat with SGS-21.
4.1.x
1) uclibc-ng: sync with git (commit 650777).
2) busybox: update to 1.35.0 version.
3) openssl: update to 1.1.1m version.
4) libcurl: up to 7.80.0 version.
5) dnsmasq: up to last 2.8x git version (commit 30f62b).
6) radvd: sync with git (commit 87c18c).
7) pppd: sync with git (commit 1c5ae0).
8) libwive: xt_time targets need insert before related/established rule.
9) libfuse: add external libfuse v2.9.9 (prepare for new function new devices integrate).
10) ntfs3-g: use external libfuse instead of internal libfse-lite.
11) arp-scan: sync with git (commit 1b62b1).
12) webui/cli: fix AX mode show in scanresult.
13) webui: refactor apcli mode.
14) webui: extend status for mt7915 and later chips in apcli mode.
15) webui: add beacon protection (encryption) option.
16) webui: scan result improvements.
17) webui: add vendor name in stalist.
18) webui: implement mobile version for sidebar.
19) webui: auto enable dhcp6s/radvd then ipv6 config.
20) webui: localize fixup.
21) webui: allow build wireguard server UI for fibertool devices.
22) init.d: dhcp6c: workaround for ISP with small ipv6 dhcp lease time.
23) init.d: dhcp6c: apply new config only if prefix really changed.
24) init.d: transmission: disable verify peers cert`s.
25) init.d: dnsmasq: filter AAAA hack now activated by variable dnsFilterAAAA set to 1.
26) init.d: resolv: typo fix in sanity check v6.
27) dhcp6c: do not exec script in release case.
28) bndstrg: improve check Hi/Low 5GHz for avoid incorrect false positive allow connect to 2.4GHz.
29) bndstrg: more strong checks in low power and RSSI high different dual band clients case.
30) bndstrg: improve BTM use for more smooth roaming per bands.
31) btm: improve remove really dead client after BTM move procedure.
32) kernel: net: tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows.
33) kernel: net: vlan: fix underflow for the real_dev refcnt.
34) kernel: net: neigh: clear whole pneigh_entry at alloc time.
35) kernel: net: netlink: af_netlink: prevent empty skb by adding a check on len.
36) kernel: net: netfilter: ip6t_REJECT: added missing icmpv6 codes.
37) kernel: net: netfilter: force fake conntrack entry to be at least 8 bytes aligned.
38) kernel: net: netfilter: ip6t_REJECT: check for IP6T_F_PROTO.
39) kernel: net: netfilter: fix regression in looped (broad|multi)cast's MAC handling.
40) kernel: nvram: cache and annotate access to nvram cache (more thread safe).
41) kernel: mips: signal: protect against sigaltstack wraparound.
42) kernel: mtk_wifi: mt7620/mt76x2/mt7610/mt7603: fix apcli connect to uplink in WPA2/3 mixed mode.
43) kernel: mtk_wifi: mt7915: improve RMM neihg update.
44) kernel: mtk_wifi: mt7915: use encrypted beacons by default.
45) kernel: mtk_wifi: mt7915: fix very long scan in 5GHz if apcli enabled.
46) kernel: mtk_wifi: mt7613/mt7615: wait command queue empty in radio OFF case.
47) kernel: mtk_wifi: mt7613/mt7615/mt7915: rrm: use passive mode for periodic scan.
4.2.x
1) uclibc-ng: sync with git (commit 811b0d).
2) entware_install.sh: implement RAM option (use tmpfs for temp entware install).
3) entware_install.sh: second option in ram mode use for override /opt/etc for configs (maybe use rwfs/pssfs).
4) pppd: sync with git (commit 1fd775).
5) dnsmasq: up to last 2.8x git version (commit facf7e, DNSSEC improvements).
6) udpxy: update to 1.0-25.1 version.
7) dropbear: sync with git version 2020.81 (commit de5547).
8) haveged: up to 1.9.18 version (commit 3aa6d2).
9) miniupnpd: update to 2.3.0 version.
10) wsdd2: update to 1.8.6 version (commit 52aa3).
11) init.d: wan: remove deprecated -r REQ_IP dhcpc option support.
12) init.d: iappd: always start daemon if radio interface is on.
13) init.d: automount: tune dirty page cacahe limits.
14) init.d: qos_complex: refactor and add downstream prio/limit by IP (need add in UI).
15) libwive: xt_TIME drop kerneltx flag, use UTC by default.
16) iaapd: improve backward compat roaming with old HQ and MT fw versions.
17) arpmon: fix NPD in ifname get case.
18) arpmon: fix wait read form socket.
19) webui: homepage: fix rx/tx counters swap.
20) webui: fix pmf require apply bug.
21) webui: remove deprecated dhcpRequestIP option.
22) webui: fix network diagnostic page ui freez (prevent net-overview.sh double start).
23) webui: implement UI for etherwake.
24) webui: spell fix, Handoff is forced balancing, not semaless migration option.
25) webui: fix stalist show.
26) kernel: serial: core: Keep mctrl register state and cached copy in sync.
27) kernel: exfat: use kvzalloc() instead of kzalloc() for exfat_sb_info.
28) kernel: mips: dma-noncoherent: Remove bogus condition in dma_sync_phys().
29) kernel: mips: sync-r4k: do slave counter synchronization with disabled HW interrupts.
30) kernel: mips: tlbex: clear ISA bit when writing to handle_tlb{l,m,s}.
31) kernel: mips: clear ISA bit correctly in get_frame_info().
32) kernel: fs: bump inode and dentry counters to long.
33) kernel: fs: avoid softlockups in s_inodes iterators.
34) kernel: net: ppp: ensure minimum packet size in ppp_write().
35) kernel: net: af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress.
36) kernel: net: annotate data-race in neigh_output().
37) kernel: net: fix use-after-free in tw_timer_handler.
38) kernel: net: core: correct the sock::sk_lock.owned lockdep annotations.
39) kernel: net: ipv6: raw: check passed optlen before reading.
40) kernel: mtk_wifi: fix calls intervals for ba timeout monitor.
41) kernel: mtk_wifi: mt7915: update MCU firmware to 20211222 version.
42) kernel: mtk_wifi: mt7915: fix and use dynamic WMM mode.
43) kernel: mtk_wifi: mt7615: optimize MTPciPollTxRxEmpty.
44) kernel: mtk_wifi: mt7615: fix NPD in HcReleaseRadioForWdev.
45) kernel: mtk_wifi: mt7615: rcUpdateBandForBFMU handle 2.4GHz HW_ExtBF case.
46) kernel: mtk_wifi: mt7915: fix PSM state get.
47) kernel: mtk_wifi: mt7915: fix clients aging.
48) kernel: mtk_wifi: mt7615/mt7613: RegPair.Value must be init first.
49) kernel: mtk_wifi: mt7615/mt7613: always polling TX/RX path until packets empty in radio off procedure.
50) kernel: mtk_wifi: mt7615/mt7915: if all bands RF disabled do not touch mcu by noise floor update function.
51) kernel: mtk_wifi: mt7615/mt7915: SNR calculate only if one or more clients connected.
52) kernel: mtk_wifi: mt7615/mt7915: fix SNR JAM in DBDC mode.
53) kernel: mtk_wifi: mt7615/mt7915: force rssi update before SNR calculate.
54) kernel: mtk_wifi: mt7615/mt7915: do not touch watchdog if radio is off.
55) kernel: mtk_wifi: mt7615/mt7915: allow active upsteer.
56) kernel: mtk_wifi: mt7615/mt7915: bandsteering: do not kickout clients in PSM.
57) kernel: mtk_wifi: mt7615/mt7915: fix acl reject station.
58) kernel: mtk_wifi: mt7615/mt7613/mt7915: allow send rrm report.
4.3.x
1) toolchain: update binutils/uclibc/headers.
2) libatomic: sync with git (commit 98d435).
3) dnsmasq: up to last 2.8x git version (commit 6f70789).
4) dropbear: sync with git version 2020.81 (commit fc9845).
5) radvd: sync with git (commit 0f0457).
6) netcwmp: big code refactoring.
7) netcwmp: implement TR181-2.x model.
8) netcwmp: implement soap namespaces.
9) nvram: rename variables wireguard_*dress to wireguard_*ddress=(spell fix).
10) init.d: add dhcpACSurl variable (off/relay/url), for transit ACS url announcement.
11) init.d: improve firewall auto rules for wg.
12) init.d: add hooks /etc/wg-up(down).d and /pss/wg-up(down).d for wireguard.
13) init.d: add sceleton for wg client mode.
14) init.d: start refactoring pptp/l2tp preconfig.
15) init.d: modemhelper: fix stop procedure.
16) init.d: modemhelper: split power control functions.
17) web: add dhcpACSurl - ACS url announcement configure.
18) web: add FT over DS option.
19) web: qos, complex: implement force ip to prio lists.
20) web: fix autochannel interval select.
21) bndstrg: use CLOCK_BOOTTIME.
22) iaapd: review local table manipulation and R1 install code.
23) kernel: lib: memscan() fixlet.
24) kernel: net: bridge: add missing counters to ndo_get_stats64 callback.
25) kernel: net: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path.
26) kernel: net: ipv4: avoid using shared IP generator for connected sockets.
27) kernel: net: ipv4: raw: lock the socket in raw_bind().
28) kernel: net: ipv4: tcp: send zero IPID in SYNACK messages.
29) kernel: net: netfilter: nat: limit port clash resolution attempts.
30) kernel: net: netfilter: nat: remove l4 protocol port rovers.
31) kernel: net: netfilter: x_tables: fix compat match/target pad out-of-bound write.
32) kernel: mtk_wifi: mt7615/mt7613/mt7915: meditation on war 802.11r vs No-Name Android Phones.
33) kernel: mtk_wifi: mt7615/mt7613/mt7915: some improvemens in BTM.
34) kernel: mtk_wifi: mt7615/mt7613/mt7915: fixed several errors detected in hi-load tests.
4.4.x
1) uclibc-ng: sync with git (commit 44140d).
2) openssl: update to 1.1.1n version.
3) dropbear: sync with git version 2020.81 (commit e2b34a).
4) libz: update to 1.2.12 version.
5) web: wifi plot: add SNR indicator.
6) web: usbmodem: add reboot by power blink button.
7) web: implement switch ports utilization indicators (home page).
8) web: implement wifi interfaces current load indicator (home page).
9) web: rework mem/cpu usage indicators.
10) web: add profile for WiFly.net hotspot provider.
11) web: allow dnsmasq configure in apcli router mode.
12) web: small fixes wireguard/dns pages.
13) init.d: do not start iappd if WLAN full disable.
14) init.d: refactoring chillispot script.
15) init.d: global: rework some functions.
16) init.d: fix add route to VPN server in some cases.
17) init.d: add check server string is ip for avoid not needed ipget call.
18) netcwmp: increase namespaces compat.
19) bndstrg: more safe post connection steer.
20) coova-chilli: bstrlib: fix null pointer dereference.
21) iappd: improved distribution of security block messages.
22) iappd: implement auto fallback to UDP at errors.
23) iappd: implement periodically auto update neighbor information.
24) busybox: ash: don't read past end of var in subvareval for bash substitutions.
25) busybox: ash: fix unsafe use of mempcpy.
26) busybox: ash: do not truncate failed tilde expansion on unknown user names.
27) dnsmasq: up to last 2.87 git version (commit ee15b9ff).
28) kernel: loop: fix crash when using unassigned loop device.
29) kernel: block: fix use-after-free in blkdev_get().
30) kernel: mips: smp: fill in sibling and core maps earlier.
31) kernel: mm: make vfree() safe to call from interrupt contexts.
32) kernel: mm: vunmap: add cond_resched() in vunmap_pmd_range.
33) kernel: rcu: remove unneeded __rcu_process_callbacks() argument.
34) kernel: rcu: remove redundant rcu_is_cpu_rrupt_from_idle() from tiny RCU.
35) kernel: rcu: remove fastpath from __rcu_process_callbacks().
36) kernel: net: sit: fix a double free on error path.
37) kernel: net: tcp: make tcp_read_sock() more robust.
38) kernel: net: llc: fix netdevice reference leaks in llc_ui_bind().
39) kernel: net: llc: only change llc->dev when bind() succeeds.
40) kernel: net: netfilter: xt_recent: recent_seq_next should increase position index.
41) kernel: net: netfilter: ipt_netflow: update to 2.6 and build module by default.
42) kernel: net: ipv6: prevent neighbor add if protocol is disabled on device.
43) kernel: net: ipv6: exit early in addrconf_notify() if IPv6 is disabled.
44) kernel: net: ipv6: ensure we call ipv6_mc_down() at most once.
45) kernel: net: ipv6: the entire IPv6 header chain must fit the first fragment (RFC 7112 section 5).
46) kernel: net: ipv6: fix a possible double free.
47) kernel: net: ipv6: prevent a possible race condition with lifetimes.
48) kernel: net: ipv6: fix skb_over_panic in __ip6_append_data.
49) kernel: mtk_wifi: do not send info bcast by iapp daemon if RF full disabled.
50) kernel: mtk_wifi: mt7615: update to 5.1.0.0 drivers.
51) kernel: mtk_wifi: mt7613/mt7615/mt7915: band steering, improve handle probe req.
52) kernel: mtk_wifi: mt7613/mt7915: apply upstream patches introdused in 5.1 tree.
53) kernel: mtk_wifi: fix WMM index init in ack req.
54) kernel: mtk_wifi: mt7615/mt7613/mt7915: fix delayed BTM move send.
4.5.x
1) rcd: refactoring to get out of service script need.
2) uclibc-ng: sync with git (commit b0d985a).
3) snmpd: get and use PEN - 58734 (Wi-Cat LLC).
4) webui: merge LAN/WAN/IPv6 basic setup pages to one (for decrease configure steps).
5) webui: file upload timers fix.
6) kernel: kstrto*: accept "-0" for signed conversion.
7) kernel: rbtree: break out of rb_insert_color loop after tree rotation.
8) kernel: rbtree: adjust root color in rb_insert_color() only when necessary.
9) kernel: net: dev: makes sure netif_rx() can be invoked in any context (need full test).
10) kernel: net: netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options.
11) kernel: net: af_netlink: fix shift out of bounds in group mask calculation.
12) kernel: net: ipv4: invalidate neighbour for broadcast address upon address addition.
13) kernel: net: ipv6: make mc_forwarding atomic.
14) kernel: net: ipv6: annotate some data-races around sk->sk_prot.
4.6.x
1) nvram: unify gen_wifi_config.
2) nvram: make second zone work without split NVRAM (get/gen_wifi now ready).
3) rcd/init.d: export nvram to system env for avoid getnvramall use (getnvramall must full remove in feature).
4) dropbear: sync with git version 2022.82 (commit c3d3bb).
5) dnsmasq: up to last 2.87 git version (commit fa61fd).
6) net-snmp: integrate to build system (need for support version 3 protocol).
7) lldpd: update to 1.0.13 version.
8) zabbix-agent: update to 5.0.22 version.
9) freeradius: update to 3.2.0 version.
10) uclibc-ng: fix predictable DNS Transaction IDs.
11) uclibc-ng: update 1.0.4.1.
12) openssl: update to 1.1.1o version.
13) webui: improve LAN configuration page for easy use.
14) webui: add warning for software offload vs nat loopback case.
15) webui: snmp: add configure SNMPv3 mode.
16) init.d: wireguard: remove listen port from client config.
17) kernel: net: avoid a full fib lookup when rp_filter is disabled.
18) kernel: net: bridge: implement fastpath ~15% save cpu/speedup (WLAN<=>LAN).
19) kernel: net: tcp: fix F-RTO may not work correctly when receiving DSACK.
20) kernel: net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter().
21) kernel: net: netlink: do not reset transport header in netlink_recvmsg().
22) kernel: net: packet: fix slab-out-of-bounds access in packet_recvmsg().
23) kernel: net: packet: fix packet_sock xmit return value checking.
24) kernel: net: ipv4: Elide fib_validate_source() completely when possible.
25) kernel: net: ipv6: fix NULL deref in ip6_rcv_core().
26) kernel: net: ipv6: add missing tx timestamping on IPPROTO_RAW.
27) kernel: net: ipv6: make ip6_rt_gc_expire an atomic_t.
28) kernel: mtk_wifi: mt7915: fix and enable bi default some IW ioctls for use in SNMP/Zabbix/etc.
29) kernel: mtk_wifi: mt7915: fix AMSDU indicators in announses (regression after implement HW_AMDSU).
30) kernel: mtk_wifi: mt7x15: fix first boot RRM scan if only one band enabled.
5.0.x
1) apps: prevent descriptor leaks in some cases.
2) radvd: sync with git (commit 8b553f).
3) ntfs-3g: sync with git (commit edfd98).
4) dropbear: sync with git (commit ec3a94).
5) dnsmasq: sync with git (commit b17522).
6) uclibc-ng: sync with git (commit dfb04c).
7) iperf: update ro 3.11 version (commit 4c5ea7).
8) openssl: update to 1.1.1p version.
9) libnvram: add some sanity checks (improve security and safety).
10) init.d: start web server from rcd directly.
11) init.d: fix smart button cwmp force case.
12) webui: ent: add ACK timeouts/distance tune.
13) webui: ent: split some radio options per bands.
14) webui: ent: add OFDMA modes control for client radio interface.
15) webui: ent: add roaming/ps/wireless mode for client.
16) webui: ent: start implementation info for client mode interface.
17) webui: ent: add rates control.
18) webui: dhcp: fix dhcp netmask correct after lan ip change.
19) kernel: tty: fix deadlock caused by calling printk() under tty_port->lock.
20) kernel: net: remove two BUG() from skb_checksum_help().
21) kernel: net: fix data-race in dev_isalive().
22) kernel: net: neigh: really delete an arp/neigh entry on "ip neigh delete" or "arp -d".
23) kernel: net: tcp: fix NULL deref in tcp_v4_send_ack().
24) kernel: net: tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd.
25) kernel: net: af_unix: ensure POLLOUT on remote close() for connected dgram socket.
26) kernel: net: af_unix: fix a data-race in unix_dgram_peer_wake_me().
27) kernel: net: ipv6: don't send rs packets to the interface of ARPHRD_TUNNEL.
28) kernel: net: ipv6: ip6_fragment() should check CHECKSUM_PARTIAL.
29) kernel: net: ipv6: remove unnecessary dst_hold() in ip6_fragment().
30) kernel: net: ipv6: don't increase IPSTATS_MIB_FRAGFAILS twice in ip6_fragment().
31) kernel: net: ipv6: fix signed integer overflow in __ip6_append_data.
32) mtk_wifi: fix some out of bounds issues.
33) mtk_wifi: fix auth flood issue.
34) mtk_wifi: unify scan result format.
35) mtk_wifi: fix wrong pmkid check.
36) mtk_wifi: mt7620/mt7610: fix race condition with Mi6 phones.
37) mtk_wifi: mt79x5/mt7615/mt7613: really last tx frame mode show in iwpriv stat if ATE disabled.
38) mtk_wifi: mt7915: implement cli interface connection stastistic.
39) mtk_wifi: mt7915: split stat data per interface types.
40) mtk_wifi: mt7915: implement SNR calculate for cli interface.
41) mtk_wifi: mt7915: implement per aid detailed stat.
42) mtk_wifi: mt7915: make stat ioctl per client in non ATE mode.
43) mtk_wifi: mt7915: disable MuMimoUL by default (Tx hang).
44) mtk_wifi: mt7915: add beacon loss indicator in client mode statistic.
45) mtk_wifi: mt7613: try fix floating bug with stop auth with some clients.
46) mtk_wifi: mt7613: update firmware.
5.1.x
1) buildsystem: ent: use lldpd instead of standalone cdp daemon (more protocols support) and enable by default.
2) buildsystem: ent: add bird (v2.0.10) dynamic routing daemon to build tree.
3) buildsystem: ent: add cdpr tool for lldp/cdp reporter.
4) libnvram: sanity checks now allow symbol = for some (not exported) fields.
5) libusb: update to 1.0.26 version.
6) libtalloc: update to 2.3.4 version.
7) libcurl: up to 7.84.0 version.
8) openssl: update to 1.1.1q version.
9) zabbix-agent: update to 5.0.25 version.
10) radvd: sync with git (commit 6fbce0).
11) dropbear: sync with git (commit 78dadb).
12) init.d: rework lldpd configure.
13) init.d: add hook for apply user customized iwpriv command list for fine tune radio (for command see ap_cfg.c).
14) init.d: add Low Rate balancing.
15) init.d: add support ipt_NETFLOW config by nvram.
16) system: snmp: lldpd: allow export neighbours from lldpd to net-snmp (OID 1.0.8802.1.1.2).
17) web: move link layer discovery protocols support to true place.
18) web: firewall: allow add forward/filters rules for custom interfaces.
19) web: ent: implement attenuation power for management frames.
20) web: ent: implement klog iwpriv * show response from klog.
21) web: ent: implement Low Rate Control.
22) web: ent: implement tx tower drop adjustment with 0.5dB step.
23) kernel: net: bridge: allow forwarding LLDP frames.
24) kernel: net: bridge: missing null bridge device check may be causing null pointer dereference.
25) kernel: net: tcp: switch orphan_count to bare per-cpu counters.
26) kernel: net: fix some data races.
27) mtk_wifi: mt79x5: fix DecreasePwrCtrl vs MgmtTxPwr conflict.
28) mtk_wifi: mt79x5: implement tx power drop adjustment with 0.5dB step.
29) mtk_wifi: mt79x5: fix TPC calculate in some cases.
30) mtk_wifi: mt79x5: add LinkMargin in TPC report (probe case).
31) mtk_wifi: mt79x5: ent: add scan skip channel list configured by profile.
32) mtk_wifi: mt79x5/mt7613: fix incorrect mcs for second stream in VHT oper IE.
5.2.x
1) build_system: switch DEMO to mt79x5 radio config for Enterprise Mode demo.
2) init.d: fix samba/xupnpd/udpxy/entware services reconfigure and restart in AP with DHCP client mode.
3) radvd: sync with git (commit 5a65f3).
4) uclibc-ng: sync with git (commit d41fcf).
5) busybox: ash: fix ifs cleanup on error paths.
6) busybox: sort: fix -k2M (wasn't skipping leading whitespace).
7) busybox: sort: fix sort -s -u, closes 14871.
8) busybox: sort: fix awk: fix use after free (CVE-2022-30065).
9) dnsmasq: sync with git (commit 3b599d).
10) wsdd: sync with git (commit 44ad4b).
11) libatomic: sync with git (commit 166d4e).
12) lldpd: update to 1.0.15 version.
13) net-snmp: up to 5.9.3 version.
14) web: ent: add netflow.
15) web: ent: add vht supported rates control.
16) web: ent: add scan skip channel list.
17) web: ent: add autoselect skip channel list.
18) web: ent: add bird dynamic routing daemon support.
19) web: ent: add beacon Device name feature.
20) web: not need show dhcp server config in full bridge modes.
21) web: fix utf-8 ssid break apcli scan result.
22) web: show firewall local connections rules in AP (not route) mode.
23) sec: full remove WEP/TKIP support (not secure).
24) init.d/rcd: do not blink esw ports in non parted switch mode.
25) kernel: mips: smp: optimization for flush_tlb_mm when exiting.
26) kernel: mips: fix CP0 counter erratum detection for R4k CPUs.
27) kernel: mips: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK.
28) kernel: net: fix sk_wmem_schedule() and sk_rmem_schedule() errors.
29) kernel: net: netfilter: nf_queue: do not allow packet truncation below transport header offset.
30) kernel: net: netfilter: nf_ct_h323: cap packet size at 64k.
31) kernel: net: netfilter: nf_ct_ftp: prefer skb_linearize.
32) kernel: net: neigh: fix possible DoS due to net iface start/stop loop.
33) kernel: net: neigh: don't call kfree_skb() under spin_lock_irqsave().
34) kernel: net: af_packet: check len when min_header_len equals to 0.
35) kernel: ratelimit: Fix data-races in ___ratelimit().
36) mtk_wifi: mt79x5: fix TPC calculate in powerdrop case.
37) mtk_wifi: mt79x5: fix power envelope set from real power for HE.
38) mtk_wifi: mt79x5: add hostname beaconing for Ekahau compatable.
39) mtk_wifi: mt79x5: optimize QM<=>WMM processing, decrease CPU utilization.
40) mtk_wifi: mt79x5: refactor and improve background RRM neighbours update.
41) mtk_wifi: mt79x5: fix lldp frames pass by MCU.
42) mtk_wifi: mt79x5: review BW sync for client mode.
43) mtk_wifi: mt79x5: review and fix Channel Quality calc for client mode.
44) mtk_wifi: mt79x5: fix bss coloring work with apcli.
45) mtk_wifi: mt79x5: fix some potentional NPD in sta code.
46) mtk_wifi: mt79x5: export noise floor to iw struct (use for SNMP statistic get).
47) mtk_wifi: mt79x5: fix type conversion in sta code (select by rssi path).
48) mtk_wifi: mt79x5: do not touch scan tab at reconnect in client mode.
49) mtk_wifi: mt79x5: start reimplement client (apcli) roaming support.
50) mtk_wifi: mt79x5: fix apcli reconnect issue.
51) mtk_wifi: mt79x5: full remove channel switch IE element from bcn if DFS disabled.
52) mtk_wifi: mt79x5: fix 802.11k vs HE in UNI-II war.
53) mtk_wifi: mt79x5: fix first boot scan for cahnnels > 48.
54) mtk_wifi: mt79x5: switch to RCPI from RSSI method for Link Margin.
55) mtk_wifi: mt79x5: more safe low rate control for avoid conflicts with seamless roaming.
56) mtk_wifi: mt79x5/mt7615/mt7613: 802.11r: fix distribution station information by 802.11f in some cases.
57) mtk_wifi: mt7613/mt7615: fix VHT central channel announce for 20/40 case.
58) mtk_wifi: mt7613/mt7615/mt79x5: fix custom PWR triplet configure.
59) mtk_wifi: mt7613/mt7615/mt79x5: fix RRM vs MBSSID war.
60) mtk_wifi: mt7613/mt7615/mt79x5: fix small apcli regression.
5.3.x
1) iperf: update ro 3.12 version (commit ebbf28).
2) accel-ppp: sync with git (commit 1dcd66).
3) arp-scan: sync with git (commit ff81d5).
4) freeradius: update to 3.2.1 version.
5) libssh: up to 0.10.4 version.
6) libnettle: up to 3.8.1 version.
7) cli/net-snmpd: implement detailed swicth status with error counters.
8) cli/net-snmpd: implement radio info and station list mibs.
9) web: implement extended switch statistics.
10) web: rework massconfig logic for some cases.
11) web: fix management page for iOS based devices.
12) kernel: vsprintf: prevent crash when dereferencing invalid pointers.
13) mtk_wifi: mt7615/mt7613: fix wpa wpaeapoll key action result in some cases.
14) mtk_wifi: mt7615/mt7613: avoid incorrect mbss use in RTMPAPSetInformation.
15) mtk_wifi: mt79x5: back to old microcode (fixup slowdown issue).
16) mtk_wifi: mt79x5: review make iecaps code.
17) mtk_wifi: mt79x5: sta: reimplement auto rescan in connection failed case.
18) mtk_wifi: mt79x5: sta: reimplement bssid selest by disconnection by peer.
19) mtk_wifi: mt79x5: sta: low control logic avoid unneded kickout 802.11r/v clients.
20) mtk_wifi: mt79x5: sta: start implement enchanged roaming support.
5.4.x
1) uclibc-ng: sync with git (commit 4a28a8).
2) libcurl: up to 7.85.0 version.
3) arp-scan: sync with git (v1.9.8, commit a127ba).
4) dnsmasq: sync with git (v2.88, commit a218ae).
5) zabbix-agent: update to 5.0.28 version.
6) miniupnpd: update to 2.3.1 version.
7) web: implement adaptive wait timer mode.
8) web: fix dns auto in AP wih dhcp client mode.
9) web: fix 165 channel issue.
10) web: temp hide ACK timeouts block.
11) snmpd: enchange wireless mibs.
12) kernel: net: ipv6: ping: fix wrong checksum for large frames.
13) kernel: net: tcp/udp: fix memory leak in ipv6_renew_options().
14) mtk_wifi: mt7615: send temp reject response in SAE/PMF cases only if current state == SAQ_IDLE.
15) mtk_wifi: mt7613/mt7615: more strong check security modes in auth req.
16) mtk_wifi: mt7613/mt7615: avoid drop Mlme.PeriodicRound value in BCN processing.
17) mtk_wifi: mt79x5: split ErpIeContent by MBSSID, fix protection modes overwrite in DBDC.
18) mtk_wifi: mt79x5: sync the channel of the wdev with active wdev after channel select or ifdown.
19) mtk_wifi: mt79x5: fix GNMix mode with EAP rate ctl enabled.
20) mtk_wifi: mt79x5: remove old rate select workaround for very old iOS version.
21) mtk_wifi: mt79x5: more strong check rate by mode dependency.
22) mtk_wifi: mt79x5: expand network interface ready check in some cases.
23) mtk_wifi: mt79x5: fix CQ/SNR export to iwstat (with DBDC mode support).
5.5.x
1) ntfs-3g: up to version 2022.10.3.
2) openssl: update to 1.1.1s version.
3) web: implement save log to file.
4) web: implement management vlan support.
5) cli: implement noise floor and SNR indicators.
6) massconfig: fix export parametrs in some cases.
7) init.d: mgmvlan: iptables: split servicelimits chain.
8) init.d: mgmvlan: add create and preconfigure mvlan interface logic.
9) init.d: mgmvlan: implement static/zeroconf/dhcp management ip configure modes.
10) init.d: mgmvlan: iappd must use mvlan for key distribution and move notify procedures.
11) init.d: mgmvlan: implement dhcpsrv mode (management vlan support).
12) init.d: mgmvlan: fallback to zeroconf net for mvlan if lease fail.
13) init.d: udhcpc/udhcpd: more safe stop procedure in some cases.
14) snmpd: export some current wireless settings.
15) snmpd: implement noise floor info.
16) snmpd: implement SNR per client info.
17) snmpd: implement export apcli config and parametrs.
18) cwmpd: fix and axpand switch ports statistic (errors and other counters).
19) cwmpd: implement some wireless statistic indicators.
20) kernel: locking/semaphore: add might_sleep() to down_*() family.
21) kernel: jiffies.h: declare jiffies and jiffies_64 with ____cacheline_aligned_in_smp.
22) kernel: lists: update implementation.
23) kernel: mips: fix fortify panic when copying asm exception handlers.
24) kernel: mips: avoid overoptimization by GCC.
25) kernel: net: neigh: fix null-ptr-deref in neigh_table_clear().
26) mtk_wifi: mt7613/mt7615/mt7915: fix iw get statistic flags set.
27) mtk_wifi: mt7915: fp_qm: get need schedule flag by idx.
6.x.x
1) dropbear: sync with git (v2022.83, commit b1c3e6).
2) iperf: sync with git (commit c2b9bc).
3) dnsmasq: sync with git (commit 9f3097).
4) zabbix-agent: update to 5.0.29 version.
5) lldpd: update to 1.0.16 version.
6) uclibc-ng: fix overflow warning when compiling string/strchr in ILP32 modeon MIPS.
7) iappd: small fix fallback to TCP logic."
8) web: add some debug options (iapp/band steering) to admin page.
9) web: implement one click get diag info for support.
10) kernel: net: don't clear sock->sk early to avoid trouble in strparser.
11) kernel: net: fix potentional NPD in tcp_v*_rcv.
12) kernel: net: ipv4: show that ip_send_reply() is purely unicast routine.
13) kernel: net: ipv4: ip_do_fragment: fix headroom tests.
14) kernel: net: ipv4: refactor ip fragmentation code for more accurate.
15) kernel: net: ipv4: drop fragmentation code from ip_options_build().
16) kernel: net: ipv4: route: ignore output interface in FIB lookup for PMTU route.
17) kernel: net: ipv6: ip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failed.
18) kernel: net: ipv6: fix dangling pointer when ipv6 fragment.
19) kenrel: net: ipv6: make icmp6_send() robust against null skb->dev.
20) kernel: net: ipv4/ipv6: add defensive check for CHECKSUM_PARTIAL skbs in ip_fragment.
21) kernel: mips: make irqflags.h functions preempt-safe for non-mipsr2 cpus.
22) kernel: mips: fix crash that occurs when function tracing is enabled.
23) kernel: mips: fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER.
24) mtk_wifi: ft: always init MacPeer need.
25) mtk_wifi: ft: prevent the on air protected BCN packet corruption.
26) mtk_wifi: mt7915: ids: decrease noise and improve reports.
27) mtk_wifi: mt7915: rrm: add HE codense type support.
28) mtk_wifi: mt7915: rrm: fix bcn report repeat timeout.
29) mtk_wifi: mt7915: rrm: check beacon report optional sub-ie len.
30) mtk_wifi: mt7915: rrm: fix refill bcn sub element SSID.
31) mtk_wifi: mt7915: fix some potentional NPD.
32) mtk_wifi: mt7915: fix band steering heartbeat check.
33) mtk_wifi: mt7915: fix bandwidth allocation offload.
34) mtk_wifi: mt7915: fix potentional fragmentation and wcid jam issues.
35) mtk_wifi: mt7915: fix bss color init.
36) mtk_wifi: mt7915: fix he operatiom mode ie parse.
37) mtk_wifi: mt7915: fix some iw ioctl work.
38) mtk_wifi: mt7915: fix set per entry edca params from wmm.
39) mtk_wifi: mt7915: fix sta rate calc for HE mode.
40) mtk_wifi: mt7915: fix insert vendor IEs.
41) mtk_wifi: mt7915: update MCU firmware to 20220929 version.
42) mtk_wifi: mt7915: prevent kickout clients in TWT mode in TxError case.
43) mtk_wifi: mt7915: avoid crash in band steering info show call.
44) mtk_wifi: mt7915: avoid integer overflow in management ap bssid.
45) mtk_wifi: mt7915: muru use unified command API.
46) mtk_wifi: mt7915: sanity checks in MDIE, FTIE info and measure report cases.
47) mtk_wifi: mt7915: improve mcu commands retransmit.
48) mtk_wifi: mt7915: ensure correct txd rate when set mgmt_frame_power.
49) mtk_wifi: mt7915: add sanity checks in WNM implementation.
50) mtk_wifi: mt7915: add sanity checks for measurement/tpc IEs
6.1.x
1) web: allow replace css from PSS.
2) bird: update 2.0.1 version.
3) arp-scan: update 1.10.0 version (commit f8fcd5).
4) dnsmasq: sync with git (commit f0959d).
5) dropbear: sync with git (commit 853790).
6) bndstrg: improve garbage collector.
7) 802.1x: update daemon to version from 7.6 sdk.
8) led: fix WLAN led for Wi-Cat-GL.
9) net-snmp: fix mempry leak in 802.11 module.
10) kernel: net: fix IP_UNICAST_IF option behavior for connected sockets.
11) kernel: net: af_key: fix send_acquire race with pfkey_register.
12) kernel: net: tcp: fix over estimation in sk_forced_mem_schedule().
13) kernel: net: ipv6: avoid use-after-free in ip6_fragment().
14) mtk_wifi: mt7603: small fix bridge fastpath support.
15) mtk_wifi: mt7620/mt7603: small improve noise immunity.
16) mtk_wifi: mt7613/mt7615/mt7915: band steering, fix delete record by addr if index unknown.
17) mtk_wifi: mt7613/mt7615/mt7915: up internal crypt lib.
18) mtk_wifi: mt7915: improve sanity checks in IE parse code.
19) mtk_wifi: mt7915: reimlement support ACK timeout tune.
20) mtk_wifi: mt7915: offchannel scan improvments.
21) mtk_wifi: mt7915: client: fix PMF mode by peer select.
22) mtk_wifi: mt7915: client: add lost HT/VHT IEs in join peer response updated.
23) mtk_wifi: mt7915: client: small memleak fix.
6.2.x
1) uclibc-ng: sync with git (commit e0e2c2).
2) busybox: update to 1.36.0 version.
3) arp-scan: sync with git (commit 7f4e041).
4) dropbear: sync with git (commit bd19be).
5) haveged: sync with git (commit df9ba5).
6) libnatpmp: sync with git (commit 4d330d).
7) iperf: sync with git (commit 891aea).
8) libpcap: update to 1.10.2.
9) tcpdump: update to 4.99.2.
10) xl2tpd: update to 1.3.18.
11) libcurl: update to 7.87.0 version.
12) libaio: update to 0.3.113 version.
13) libxml2: update to 2.10.0 version.
14) arpwatch: update to 3.3 version.
15) radvd: sync with git (commit 0ceba0).
16) zabbix-agent: update to 6.0.13 LTS version.
17) dnsmasq: up to 2.89 version (commit 1501bd).
18) nvram: implement merge and update default commands.
19) cwmp: implement auto download pss (web and other customizations).
20) ralinkiappd: fix potentional crash (fuzz test).
21) net-snmp: add station counts, current FW version.
22) net-snmp: fix potentional crashes.
23) 8021x: fix upstream regression.
24) webui: increase maximum MBSSID support to 8.
25) init.d/webui: add suppot l2 tunnel gre protocol (tap mode) support.
26) init.d/webui: allow multi ssid insert in one vlan.
27) init.d/webui: add mbssid band list mode, for more flexible SSID configuration.
28) init.d: use nvram_update default for auto add nvram fields and values after update.
29) init.d: fix apply user routes ap-dgw with management vlan mode.
30) kernel: net: stream: purge sk_error_queue in sk_stream_kill_queues().
31) kernel: net: unix: fix race in SOCK_SEQPACKET's unix_dgram_sendmsg().
32) kernel: net: ppp: associate skb with a device at tx.
33) kernel: net: route: prevent dst cache overflow.
34) kernel: net: ipv6: raw: deduct extension header length in rawv6_push_pending_frames.
35) kernel: net: ipv6: raw: remove max_size check inline with ipv4.
36) kernel: net: netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state.
37) mtk_wifi: mt7915: fix MBSSID scan issue in some cases.
6.3.x
1) libpcap: update to 1.10.3.
2) tcpdump: update to 4.99.3.
3) openssl: update to 1.1.1t version.
4) miniupnpd: update to 2.3.2 version.
5) bird: update 2.0.12 version.
6) freeradius: update to 3.2.2 version.
7) libtalloc: update to 2.4.0 version.
8) nginx: update to 1.22.1 version.
9) dnsmasq: sync with git (commit da5bc1).
10) dropbear: sync with git (commit 4037b2).
11) radvd: fix route not reachable regression.
12) web: implement metrics support in user routes.
13) init.d: add masquerade from mvlan interfaces for fwupdate over mvlan (router + mvlan in dhcp server mode).
14) init.d/web: auto dgw/dns to management vlan network (dhcp client mode only).
15) kernel: net: no longer support SOCK_REFCNT_DEBUG feature.
16) kernel: net: remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
17) kernel: net: inet: fix potentional NULL pointer Oops in fib(6)_rule_suppress.
18) kernel: net: ipv4: fix incorrect route flushing when table ID 0 is used.
19) kernel: net: netfilter: ipt_netflow: sync with git (commit 317791).
20) kernel: net: netfilter: nf_conntrack_sip: fix ct_sip_walk_headers.
6.4.x
1) libcurl: update to 7.88.1 version.
2) init.d: small review and cleanup.
3) accel-ppp: sync with git (commit da8ca9).
4) dnsmasq: update to 2.90 version (commit 22d20f).
5) radvd: sync with git (commit f3a629).
6) dropbear: sync with git (commit 2d69d0).
7) web: implement wpa enterprise support per MBSSID.
8) web: fix bcn protection configure per MBSSID.
9) web: allow Fast Transition options configure per MBSSID.
10) web: fix small regression if IDS enabled.
11) web: ax: fix calculate currect ports load.
12) kernel: mips: mm: remove redundant drop_mmu_context() cpu argument.
13) kernel: mips: mm: consolidate drop_mmu_context() has-ASID checks.
14) kernel: mips: mm: remove redundant preempt_disable in local_flush_tlb_mm().
15) kernel: mips: mm: remove local_flush_tlb_mm().
16) kernel: mips: simplify __bswapdi2() and __bswapsi2().
17) kernel: mips: cevt-r4k: offset the value used to clear compare interrupt.
18) kernel: net: neigh: make sure used and confirmed times are valid.
19) kernel: net: do not use skb_mac_header() in qdisc_pkt_len_init().
20) kernel: net: ipv4: don't reset ->flowi4_scope in ip_rt_fix_tos().
21) kernel: net: ipv4: fix incorrect table ID in IOCTL path.
22) kernel: net: ipv4: constify ip_mc_sf_allow() socket argument.
23) kernel: net: ipv4: new arp_accept option to accept garp only if in-network.
24) kernel: net: netfilter: xt_length: use skb len to match in length_mt6.
6.5.x
1) uclibc-ng: update to 1.0.43 version.
2) miniupnpd: update to 2.3.3 version.
3) libpcap: update to 1.10.4.
4) tcpdump: update to 4.99.3.
5) zabbix-agent: update to 6.0.16 LTS version.
6) libatomic: sync with git version 7.9.0 (commit 6f717d).
7) arp-scan: sync with git (commit dad825).
8) coova-chilli: sync with git (commit 27f07c).
9) dnsmasq: sync with git (commit 38a27c).
10) iperf: sync with git (commit 255cc9).
11) wide-dhcp: fix error level for some critical errors messages.
12) collect-diag-info: expanded diganostic data set.
13) web: implement wireguard client mode (ent/smb remote offices connect case).
14) web: refactor VPN page.
15) web: restyle checkboxes.
16) kernel: net: gro: add a per device gro flush timer.
17) kernel: net: optimize ____napi_schedule() to avoid extra NET_RX_SOFTIRQ.
18) kernel: net: optimize napi_schedule_rps().
19) kernel: net: don't keep lonely packets forever in the gro hash.
20) kernel: net: raeth: use napi_complete_done.
21) kernel: net: icmp: guard against too small mtu.
22) kernel: net: ipv6: fix an uninit variable access bug in __ip6_make_skb().
23) kernel: net: udp6: fix potential access to stale information.
24) kernel: net: tcp: restrict net.ipv4.tcp_app_win.
25) kernel: threads: fix regression with crash at high load by io (example rtorrent with some concurent downloads).
7.0.x
1) add gigabit router with internal POE injectors target.
2) zabbix-agent: update to 6.0.17 LTS version.
3) zabbix-agent: remove loadavg hack, now getloadavg implemented in uclibc-ng.
4) libnatpmp: sync with git (commit 3b02b7).
5) dnsmasq: sync with git (commit 2fc892).
6) dropbear: sync with git (commit 3de1f1).
7) iperf: sync with git (commit 814f67).
8) init.d: tune smp affinity for 79xx dual pci-e connection mode.
9) init.d: review and fix for devices without radio module.
10) web: hide all wireless options for POE-GW device without wireless.
11) web: some style improvments.
12) kernel: tty: prevent writing chars during tcsetattr TCSADRAIN/FLUSH.
13) kernel: net: use correct this_cpu primitive in dev_recursion_level.
14) kernel: net: annotate sk->sk_err write from do_recvmmsg().
15) kernel: net: bridge: fastpath full core review and optimize.
16) kernel: net: af_packet: don't send zero-byte data in packet_sendmsg_spkt().
17) kernel: net: ipv4: fix potential uninit variable access bug in __ip_make_skb().
18) kernel: mtk_wifi: increase pmk cache size.
19) kernel: mtk_wifi: mt79x5: implement fp auto mode set for improve air load adaptation.
20) kernel: mtk_wifi: mt79x5: improve wmm traffic detect for more flexible auto TXOP tune.
21) kernel: mtk_wifi: mt79x5: tune far clients detect.
22) kernel: mtk_wifi: mt79x5: allow use maximum TxOP mode for STA/APCLI.
23) kernel: mtk_wifi: mt79x5: full rework limits dynamic modes ajust be per.
7.1.x
1) uboot: stage 1 boot code update to 16122019 version.
2) buildsystem: add support industrial devices with 4G/5G/RS232/RS485/TFCard/ExGPIO onboard (Wi-Cat-IM).
3) openssl: update to 1.1.1u version.
4) busybox: update to 1.36.1 stable version.
5) freeradius: update to 3.2.3 version.
6) web: optimize scan view.
7) dnsmasq: sync with git (commit 64d1be).
8) init.d: usbctrl: fix detect SGS android modem mode.
9) kernel: net: af_unix: fix data races around sk->sk_shutdown.
10) kernel: net: af_unix: fix a data race of sk->sk_receive_queue->qlen.
11) kernel: net: datagram: fix data-races in datagram_poll().
12) kernel: net: tcp: add annotations around sk->sk_shutdown accesses.
13) kernel: net: deal with most data-races in sk_wait_event().
14) kernel: net: ipv6: fix out-of-bounds access in ipv6_find_tlv().
15) kernel: net: udp6: fix race condition in udp6_sendmsg & connect.
16) kernel: net: tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set.
17) kernel: net: tcp: deny tcp_disconnect() when threads are waiting.
18) kernel: mtk_wifi: mt7613/mt7615/mt79x5: filter self beacons.
19) kernel: mtk_wifi: mt7613/mt7615/mt79x5: fix ie supported channles check.
20) kernel: mtk_wifi: mt7613/mt7615/mt79x5: small fix peer auth sanity for open network case.
21) kernel: mtk_wifi: mt7613/mt7615/mt79x5: fix detect EAPOL frame in some cases.
22) kernel: mtk_wifi: mt7613/mt79x5: rework group key updating.
23) kernel: mtk_wifi: mt79x5: improve MCU watchdog logic.
24) kernel: mtk_wifi: mt79x5: fix potentional race in mlme message recive.
25) kernel: mtk_wifi: mt79x5: for STA failed to complete association sae instances should be removed.
26) kernel: mtk_wifi: mt79x5: improve BCN protection support.
7.2.x
1) init.d: rework kernel modules management.
2) init.d: usbctl: unify logic for modem detect in some cases.
3) web: ent: implement MWDS mode support (apcli-4addr, now test only tree).
4) web: ent: implement air qos page for air time management settings (ENT, now test only tree).
5) web: implement reuse mode select (conservative by default).
6) web: implement Allow/DenyKey for zabbix configure.
7) busybox: shell: avoid segfault on ${0::0/0~09J}.
8) busybox: udhcpd: optional BOOTP support.
9) nginx: update to 1.24.0 stable version.
10) iperf: sync with git (commit 55159e).
11) ntfs-3g: sync with git (commit 54951d).
12) libnatpmp: sync with git (commit df55ec).
13) lldpd: update to 1.0.17 version.
14) zabbix-agent: update to 6.0.19 LTS version.
15) netcwmp: fix support https in sendfiles.
16) kernel: usb: add support integrated LTE modem (IM sample) to option driver and ZLP to wwan.
17) kernel: mips: add pte_unmap() to balance pte_offset_map().
18) kernel: usb: usbnet/ncm: ignore endpoints with invalid wMaxPacketSize.
19) kernel: usb: qmi_wwan/rndis/cdc(acm/wdm): backport new modems support.
20) kernel: net: add check for current MAC address in dev_set_mac_address.
21) kernel: net: neighbour: fix unaligned access to pneigh_entry.
22) kernel: net: tcp: add a scheduling point in established_get_first().
7.3.x
1) build-system: more components use cmake instead of autotools.
2) toolchain: binutils update to 2.41 version.
3) uclibc-ng: update to 1.0.44 version (commit 57f9c3).
4) defaults: disable beacon protection by default (temp for compat with old i7260 based adapters).
5) bird: update to 2.0.13.1 version.
6) libevent: update to 2.2.x tree (commit 0c7488).
7) openssl: update to 3.0.10 LTS version (1.1.1 EOL in september 2023).
8) zabbix-agent: update to 6.0.21 LTS version.
9) net-snmp: up to 5.9.4 version.
10) libtalloc: update to 2.4.1 version.
11) libnettle: up to 3.9.1 version.
12) libssh: up to 0.10.5 version (commit 45ab82).
13) cwmp: implement auth support for get/send file operations.
14) web: ent: switch to use MWDS (apcli-4addr). Really more easy and flexible.
15) web: ent: add lost avarage SNR in radioinfo page.
16) web: allow set APN in cdc/ncm modes.
17) dropbear: sync with git (commit 80d4fd).
18) openvpn: sync with git (commit 87ada1).
19) busybox: ash: remove "volatile" specifier from suppress_int.
20) busybox: ash: disable sleep as builtin, closes 15619.
21) init.d: full review and cleanup cdc/rndis modems logic (ppp mode now deprecated).
22) init.d: implement simple auto config unknown cdc/rndis modems.
23) init.d: fix use modem as WAN in onw RGMII mode.
24) kernel: net: tcp: reduce chance of collisions in inet6_hashfn().
25) kernel: net: tcp: fix the RTO timer retransmitting skb every 1ms if linear option is enabled.
26) kernel: net: pptp: fix fib lookup calls.
27) kernel: net: bridge: small dead code cleanup.
28) kernel: net: ipv6: adjust ndisc_is_useropt() to also return true for PIO.
29) kernel: net: core: wrap ndo_do_ioctl() to prepare for DSA stacked ops.
30) kernel: net: core: split out SIOCDEVPRIVATE handling from dev_ioctl.
31) kernel: net: sched: make psched_mtu() RTNL-less safe.
32) kernel: net: sched: act_ipt: zero skb->cb before calling target.
33) kernel: net: netfilter: conntrack: avoid nf_ct_helper_hash uses after free.
34) kernel: net: netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value.
35) kernel: net: wext: fix stringop overflow warning in ioctl_standard_iw_point().
36) kernel: net: wext: convert wext_pernet_ops.
37) kernel: net: wext: fix NPD with cfg80211's lack of commit().
38) kernel: net: wext: terminate ifr name coming from userspace.
39) kernel: mtk_wifi: mt79x5: add lost zeroing LastBIGTK field.
40) kernel: mtk_wifi: mt79x5: fix debug build data race in call to MCU.
41) kernel: mtk_wifi: mt79x5: ate: more info to console for debug.
42) kernel: mtk_wifi: mt79x5: ate: fix e2p dump print limits (speedup production).
43) kernel: mtk_wifi: mt79x5/mt761*: add lost zero fields before HW_TR entry insert/set.
44) kernel: mtk_wifi: mt79x5: do not touch port secured field in update mac table entry procedure.
45) kernel: mtk_wifi: mt79x5: fix init rekey deauth delay timer.
46) kernel: mtk_wifi: mt79x5: del old sta rec before new insert.
7.4.x
1) web: small wordings fixup.
2) bndstrg: garbage collector optimize.
3) init.d: full remove old ppp based mode for USB modems (not really use now).
4) kernel: mtk_wifi: reset pmk miss cache counters before insert new entry.
5) kernel: mtk_wifi: mt7613/mt7615/mt79x5: fix potentional incorrect client entry remove from different band.
6) kernel: mtk_wifi: mt7613/mt7615/mt79x5: set pmkid cache entry invalid if len mismatch.
7) kernel: mtk_wifi: mt7613/mt7615/mt79x5: add sanity checks for avoid insert incorrect steering table entry set.
8) kernel: mtk_wifi: mt7613/mt7615/mt79x5: fix potentional NPD in sae set timer procedure.
9) kernel: mtk_wifi: mt79x5: add max idle period element for info client device of max time without any data send before age out procedure start.
10) kernel: mtk_wifi: mt79x5: add support peer bw select by opclass.
11) kernel: mtk_wifi: mt79x5: install vht ie in assoc response only if need.
12) kernel: mtk_wifi: mt79x5: check and remove TWT agrt to FW for unexpectedly leaved STA before.
13) kernel: mtk_wifi: mt79x5: low rate control now use unsupported data rate reason.
14) kernel: mtk_wifi: mt79x5: multiple improvements in SAE(WPA3) support.
15) kernel: mtk_wifi: mt79x5: twt: fix spinlock release in error cases.
16) kernel: mtk_wifi: mt79x5: fix txd eap stat get from MCU.
17) kernel: mtk_wifi: mt79x5: tune MU-EDCA param for priority voice/video by default for HE clients to.
7.5.x
1) openssl: update to 3.0.11 LTS version.
2) zabbix-agent: update to 6.0.22 LTS version.
3) dnsmasq: sync with git (commit a9b4b7).
4) dropbear: sync with git (commit 9d4c77).
5) libssh: sync with git (commit 4c5682).
6) libevent: sync with git (commit 3c47d1).
7) net-snmp: fix get wireless client count in some cases.
8) fwupdate: improve wait ready before connect.
9) fwupdate: fix potentional process leak.
10) bndstrg: improve entry band update.
11) busybox: ash: initialize basepf.buf.
12) busybox: udhcp: avoid leaking uninitialized/stale data.
13) uclibc-ng: sync with git (commit bb1dc7).
14) libcurl: update to 8.4.0 version.
15) libssh: sync with git (commit eeb85d).
16) libevent: sync with git (commit 2502e4).
17) libatomic: sync with git (commit d8d788).
18) ieee-oui.txt: updated from IEEE registry. Total of 49762 MAC/Vendor.
19) dnsmasq: sync with git (commit 45cf27).
20) iperf: update ro 3.15 version (commit d3cf29).
21) openvpn: update to 2.7 (commit 770f11).
22) bird: update to 2.0.14 version.
23) buildsystem: add mbim app for new LTE/5G modem support in feature.
24) buildsystem: add json-c lib, need for qmi/mbim tools.
25) buildsystem: fix uqmi/mbim tools work and remove ugly workaround.
26) init.d: add config DNS/GW for static managment vlan.
27) init.d: modemhelper: qmi: add detect devices with only raw-ip mode support.
28) init.d: modemhelper: implement MBIM mode modems support (test Sierra 7455).
29) init.d: modemhelper: implement config monitor and watchdog for QMI/MBIM mode.
30) iappd: added FT SSB/ACK recived packet length check.
31) iappd: improve find wireless interface index for handle RawRRB.
32) iappd: add sanity check before process recived RRB.
33) iappd: before insert new client record need cleanul ft_info feilds.
34) iappd: improve move notify send.
35) bndstrg: improve compat for old clients and fix some cases.
36) web: implement wg custom mtu for server.
37) web: implement MTU for MBIM/QMI/ETH mode.
38) web: rework usb modem config page.
39) web: implement openvpn server config support.
40) nvram: block size increase (need for add more nvram variables).
41) kernel: net: vlan: fix VLAN 0 memory leak.
42) kernel: net: igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU.
43) kernel: net: read sk->sk_family once in sk_mc_loop().
44) kernel: net: fix potentional NPD in ip_dev_find.
45) kernel: net: fix some potentional data-races.
46) kernel: net: read sk->sk_family once in sk_mc_loop().
47) kernel: net: ipv4: annotate data-races around fi->fib_dead.
48) kernel: net: neighbour: fix data-races around n->output.
49) kernel: net: neighbour: fix possible store tearing in neigh_periodic_work().
50) kernel: net: tcp: fix delayed ACKs for MSS boundary condition.
51) kernel: net: tcp: fix quick-ack counting to count actual ACKs of new data.
52) kernel: usbnet/cdc*: backport needed fixes from upstream for correct work with mbim devices.
53) kernel: mtk_wifi: mt7915/mt7613/mt7615: rrm: add lost sta mac in measure report.
54) kernel: mtk_wifi: mt7915/mt7613/mt7615: fix small memleak in probe beacon process.
55) kernel: mtk_wifi: mt7915/mt7613/mt7615: flush QM queue every disconnect acct.
56) kernel: mtk_wifi: mt7915/mt7613/mt7615: fix the ap_find_cipher_algorithm() bcast case.
57) kernel: mtk_wifi: mt7915/mt7613/mt7615: fix incorrect init pAd in ba record.
58) kernel: mtk_wifi: mt7915/mt7613: start wpa group rekey procedure by key info req if need.
59) kernel: mtk_wifi: mt7915/mt7613: improve FT-PSM clients deauth after PMK cache timeouts.
60) kernel: mtk_wifi: mt7915/mt7613: add some messages for more easy diagnostic.
61) kernel: mtk_wifi: mt7915/mt7613: fix the WPA3 connection issue with BRCM AP.
62) kernel: mtk_wifi: mt7915: update MCU firmware to 20230627 version.
63) kernel: mtk_wifi: mt7915: make ABI compat with new microcode.
64) kernel: mtk_wifi: mt7915: improve MCU error recovery.
65) kernel: mtk_wifi: mt7915: force WTLB key update in SET case.
66) kernel: mtk_wifi: mt7915: for 5G band HT-BE mode no need to check ext_cha info.
67) kernel: mtk_wifi: mt7915: implement pbc_qos (packet budget QoS) control support.
68) kernel: mtk_wifi: mt7915: implement Limit Probe Response feature.
69) kernel: mtk_wifi: mt7915: fix build 11v mbssid bitmap.
70) kernel: mtk_wifi: mt7915: fix fill new twt node parameters.
71) kernel: mtk_wifi: mt7915: fix apcli band/wdev jam.
72) kernel: mtk_wifi: mt7915: fix per-band BSS Color collision detection logic.
73) kernel: mtk_wifi: mt7915: fix get max vht_bw for HE modes.
7.6.x
1) openssl: update to 3.0.12 version.
2) zabbix-agent: update to 6.0.23 version.
3) uclibc-ng: sync with git (commit a95689).
4) libatomic: sync with git (commit 4d3496).
5) openvpn: sync with git (commit 89626b).
6) iperf: sync with git (commit f69395).
7) dnsmasq: sync with git (commit 2a5f40).
8) busybox: udhcpd: improve find free lease algoritm for small subnets use.
9) init.d: fix potentional process leak.
10) iappd: improve update neighbours arp caches logic.
11) iappd: improve BC/REQ/RSP req handle.
12) iappd: improve local redir case.
13) iappd: some buffers need zeroing in more places.
14) iappd: log make more human readable.
15) iappd: strong use encrypted frames.
16) iappd: avoid pkt ident overload.
17) iappd: implement basic move response handler.
18) web: refactor vlan page.
19) web: add DGW/DNS for managment vlan in static ip mode.
20) kernel: mtk_wifi: ft: fix send STA MAC to iappd daemon in PMK cache timeout case.
21) kernel: mtk_wifi: ft: fix potentional NPD in KDP event inform.
7.7.x
1) tools: mksquash: update to 4.6.1 version.
2) tools: ELFkickers: update to 3.2 version.
3) tools: xz: update to 5.4.5 version.
4) uclibc-ng: sync with git (commit 14b8ae).
5) dnsmasq: sync with git (commit 1e888c).
6) openvpn: sync with git (commit a61888).
7) radvd: sync with git (commit 82b7c1).
8) uqmi: sync with git (commit 6059f4).
9) libatomic: sync with git (commit 31069b).
10) libssh: sync with git (commit 9c27ef).
11) libevent: sync with git (commit 335306).
12) zabbix-agent: update to 6.0.24 version.
13) webui: implement backup config to PSS for fast fallback to work config if need.
14) cwmp: use factory mac as serial number.
15) cwmp: add ordinary user as regular fo all data models.
16) udhcpc-wwan-script: full process only if config really changed.
17) kernel: usbnet: fix mbim/qmi work without hw_nat unload.
18) kernel: ppp: limit MRU to 64K.
19) kernel: ppp: tty: fix uninit-value access in ppp_sync_receive().
20) kernel: net: llc: verify mac len before reading mac header.
21) kernel: net: netfilter: xt_recent: fix (increase) ipv6 literal buffer length.
22) kernel: net: netfilter: hw_nat: fix exclude incorrect data flows.
23) kernel: net: ipv6: fix incorrect route 'expires' value passed to userspace.
24) kernel: net: ipv6: ip6_dst_check needs to check for expired dst_entries.
25) kernel: net: ipv6: reset dst.expires value when clearing expire flag.
26) kernel: mtk_wifi: mt7915: change MU EDCA timer to 3 (24 TUs) to allow station to use contention-based UL.
7.8.x
1) libssh: sync with git (commit 21410d).
2) uclibc-ng: update to 1.0.45 version (commit bc6581).
3) net-snmp: add PER/Qload indicators.
4) net-snmp: move Noise Floor to true place.
5) webui: make left menu customizable by css.
6) webui: iperf3: implement test timeout time (-t).
7) webui: fix incorrect show L3 VPN server block without accell-ppp enabled.
8) dnsmasq: sync with git (commit 9b2d97).
9) dropbear: sync with git (commit 82d5dd).
10) adblock: limit max records to 400000 for trim very huge lists (avoid errors with tmpfs limits).
11) kernel: init: increase tmpfs default size to 16Mb.
12) kernel: net: igmp: fix refcnt uaf issue when receiving igmp query packet.
13) kernel: net: neighbour: fix __randomize_layout crash in struct neighbour.
14) kernel: net: remove acked SYN flag from packet in the transmit queue correctly.
15) kernel: net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX.
16) kernel: mtk_wifi: mt7915: fix get cr4 mode statistic.
17) kernel: mtk_wifi: mt7915: implement lost vow multiclient schedule logic.
18) kernel: mtk_wifi: mt7915: fix vow variables reset.
19) kernel: mtk_wifi: mt7915: rework air qos defaults (more sanity and usable in real world).
7.9.x
1) init.d: adblock: move adlist storage to separate tmpfs part (avoid /etc full errors).
2) init.d: adblock: optimize logic for save ram.
3) init.d: config-cwmp-dhcpopt.sh: improve generate netfilter rules for callback.
4) busybox: sed: check errors writing file with sed -i.
5) libwive: filter dst cache records in ipv6 routes get.
6) libwive: fix parse prefix len for ipv6 routes.
7) libwive: make more safe in some cases.
8) radvd: sync with git (commit 0f964d).
9) dropbear: sync with git (commit 6f2ec9).
10) openvpn: sync with git (commit 8f33f4).
11) zabbix-agent: update to 6.0.25 version.
12) snmpd: agentx: some warnings allow only DEBUG mode (decrease noise).
13) cwmpd: improve some data types support.
14) kernel: net: constify sk_dst_get() and __sk_dst_get() argument.
15) kernel: net: neighbour: don't let neigh_forced_gc() disable preemption for long.
16) kernel: net: dst: use a smaller percpu_counter batch for dst entries accounting.
17) kernel: net: udp: annotate data-races around up->pending.
18) kernel: net: vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING.
19) kernel: net: bridge: use KMEM_CACHE instead of kmem_cache_create.
20) kernel: net: ipv4: fix a memleak in ip_setup_cork.
21) kernel: net: ipv6: prevent user from adding cached routes.
22) kernel: net: ipmr: support IP_PKTINFO on cache report IGMP msg.
23) kernel: net: ipmr: fix kernel panic when forwarding mcast packets.
24) kernel: net: af_unix: annotate data-race of gc_in_progress in wait_for_unix_gc().
25) kernel: net: af_unix: fix lockdep positive in sk_diag_dump_icons().
26) kernel: net: llc: drop support for ETH_P_TR_802_2.
27) kernel: net: llc: call sock_orphan() at release time.
28) kernel: net: inetpeer: use div64_ul() and clamp_val() calculate inet_peer_threshold.
29) kernel: net: inetpeer: simplify the allocation of slab caches in inet_initpeers.
30) kernel: net: netfilter: remove NF_NAT_RANGE_PROTO_RANDOM support.
31) kernel: net: netfilter: conntrack: correct window scaling with retransmitted SYN.
32) kernel: net: netfilter: nf_nat: fix locking in nf_nat_seq_adjust().
33) kernel: net: netfilter: nf_nat: use per-conntrack locking for sequence number adjustments.
34) kernel: net: netfilter: nf_nat: add full port randomization support.
8.0.x
1) web: basic implement openvpn client ui.
2) uclibc-ng: sync with git (commit 6a36e2).
3) openvpn: sync with git (commit a61da1).
4) dnsmasq: sync with git (commit 63edcd).
5) arp-scan: sync with git (commit 5b63c8).
6) dropbear: sync with git (commit a04d2f).
7) miniupnpd: update to 2.3.4 version.
8) arpwatch: update to 3.6 version.
9) kernel: ppp_async: limit MRU to 64K.
10) kernel: tun: fix crash with new openvpn client code.
8.1.x
1) uclibc-ng: update to 1.0.46 version (commit 487de6).
2) libatomic: update to 7.9.0 version (commit 1788bc).
3) libevent: sync with git (commit 8a116c).
4) libssh: sync with git (commit 2804f9).
5) openssl: update to 3.0.13 version.
6) openvpn: add /etc/openvpn/client(server).up scripts for auto forward enable after interface up.
7) zabbix-agent: update to 6.0.27 version.
8) bird: update to 2.0.15 version.
9) dnsmasq: sync with git (commit 2433b6).
10) openvpn: sync with git (commit 0a7e73).
11) uqmi: sync with git (commit 59deb3).
12) udpxy: fix uninitialized source address.
13) miniupnpd: update to 2.3.6 version.
14) init.d: reapply user (from UI) routes after OVPN/ACCELVPN at server interface(`s) up.
15) init.d: openvpn: rename dev tun to ovpn.
16) init.d: openvpn: add openvpn_nat_enabled and openvpn_get_dns.
17) init.d: openvpn: add support import user defined parametrs from /etc/openvpn/server(client).conf.
18) init.d: zabbix: increase exec timeout.
19) init.d: move dropbear from inetd to independed (sshserver) service.
20) init.d: wg: fix post_up logic exec in client mode.
21) init.d: move call generate user routes/netfiler rules to file from nvram in apply_user_routes function.
22) web: implement ipv6 firewall support.
23) web: refactoring firewall page.
24) web: traceroute tune parametrs for avoid long time UI freeze.
25) web: openvpn client page fixup.
26) web: fix small regression in fw page.
27) web: fix wg disable.
28) kernel: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak.
29) kernel: mips: add memory clobber to csum_ipv6_magic() inline assembler.
30) kernel: net: arp: prevent overflow in arp_req_get().
31) kernel: net: fix incorrect parameter validation (tcp/udp/ipmr).
32) kernel: net: use synchronize_net() in dev_change_name().
33) kernel: net: netfilter: backport latest nf_conntrack_h323 helper.
8.2.x
1) uclibc-ng: update to 1.0.47 version (commit e499c8).
2) dnsmasq: sync with git (commit 2046c2).
3) zabbix-agent: update to 6.0.28 version.
4) init.d: add netfilter rules dump to diagnostic.
5) init.d: cwmpd: increase max allowed callback connections.
6) cwmpd: always use rcd for network restart (avoid races).
7) kernel: net: enqueue_to_backlog() change vs not running device.
8) kernel: net: make softnet_data.dropped an atomic_t.
9) kernel: net: enqueue_to_backlog() cleanup.
10) kernel: net: mark racy access on sk->sk_rcvbuf.
11) kernel: net: introduce and use net_hotdata for better cache locality.
11) kernel: net: af_unix: do not use atomic ops for unix_sk(sk)->inflight.
12) kernel: net: af_unix: fix garbage collector racing against connect().
13) kernel: net: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr.