Freifunk Berlin Firmware Versions Save

This is the last maintenance-release for the Hedy-series of firmware. The changes primarily include the removal of the local kernel-update, from 4.4.205 to 4.4.195. (see https://github.com/freifunk-berlin/firmware/commit/f6aba1a928a3fae3111e4b936e5bfe77b8d35deb) and a small fix of the build-system.

Even this is a new release, the underlying OpenWrt-core is EndOfLife and was last updated 8 months ago, so it might contain security-issues.

vollständiges Changelog: https://github.com/freifunk-berlin/firmware/blob/v1.0.6/CHANGELOG.md vollständiges Readme: https://github.com/freifunk-berlin/firmware/blob/v1.0.6/README.md

This is another maintenance-release for the Hedy-series firmware. Recently there have been some (security) updates and fixes to the underlying software. This Release is based on the last updates that have been added to OpenWrt release "lede-17.01.7", which marks the end-of-life for this release-series [1]. The changes include:

• kernel 4.4.205 (might cause reboot-loops triggered by WiFi-driver #749)
• batman-adv: Merge bugfixes from 2020.0
• changes to the build-system to allow custom images for any board without having to compile drivers manually (#738)

vollständiges Changelog: https://github.com/freifunk-berlin/firmware/blob/v1.0.5/CHANGELOG.md vollständiges Readme: https://github.com/freifunk-berlin/firmware/blob/v1.0.5/README.md

1 - http://lists.infradead.org/pipermail/openwrt-devel/2019-June/017704.html

This is another maintenance-release for the Hedy-series firmware. recently there have been some security updates and fixes to the software we rely on. This Release is based on the recently published OpenWrt release "lede-17.01.7", which marks the end-of-life for this release-series [1]. The changes include:

• kernel: Update to version 4.4.182 (fixes at least 15 CVEs)
• mbedtls: update to version 2.7.10
• openssl: update to 1.0.2s
• batman-adv: Fix duplicated OGMs on NETDEV_UP

vollständiges Changelog: https://github.com/freifunk-berlin/firmware/blob/v1.0.4/CHANGELOG.md vollständiges Readme: https://github.com/freifunk-berlin/firmware/blob/v1.0.4/README.md

1 - http://lists.infradead.org/pipermail/openwrt-devel/2019-June/017704.html

this is the first release candidate of firmware 1.1.0

This is the 3rd maintenance release for Hedy-1.0 series. It primarily includes some updates that have been made upstream. The relevant changes to the previous release are:

• add support for TP-Link MR3020-v1, TP-Link WR703N v1, TP-Link Archer C50v1
• update OpenSSL to 1.0.2.r
• base-files: fix postinstall uci-defaults removal
• ca-certificates: update to version 20190110
• libssh2: version bump/CVE fixes
• batman-adv: Merge bugfixes from 2019.2

vollständiges Changelog: https://github.com/freifunk-berlin/firmware/blob/v1.0.3/CHANGELOG.md vollständiges Readme: https://github.com/freifunk-berlin/firmware/blob/v1.0.3/README.md

This is the 2nd maintenance release for Hedy-1.0 series. The main changes to the previous release are:

• support of changing the uplink-preset (e.g. VPN03 --> tunnelberlin (via OpenVPN), VPN03 --> notunnel)
• a new uplink-preset "tunnelberlin (via tunneldigger)" in Firmware-imagetyp: "tunnel-berlin-tunneldigger"; This can also be used for 4MB-devices
• security fixes of the Linux-kernel and some software-packages (based on Lede-17.01.6+)
• updated DNS-Server to replace the retired one from CCC-Berlin (see https://github.com/freifunk-berlin/firmware/issues/551, https://github.com/freifunk-berlin/firmware/issues/552)
• using a static MAC-address for the ffuplink-interface (fixes https://github.com/freifunk-berlin/firmware/issues/547)
• switch back to openSSL for OpenVPN to avoid problems on mpc85xx / WDR4900 (https://github.com/freifunk-berlin/firmware/issues/538)
• enable support of 1024 bit RSA-keys for mbedTLS (support of VPN03 and BBB-VPN)
• set the ffuplink interface to set all routes in the ffuplink table (fixes https://github.com/freifunk-berlin/firmware/issues/561)

notes on changing the Uplink-Preset

This feature is very fresh and might not work in all cases without manual intervention. The following issues are known:

• when changing between "VPN03" and "TunnelBerlin-OpenVPN" the correct certificates must be installed via the Freifunk-wizard or console (https://github.com/freifunk-berlin/firmware/issues/646)
• when changing from a tunneled uplink-type to the non-tunneled type and installing the BBB-VPN can cause a non-working setup of the ffuplink-Interface (https://github.com/freifunk-berlin/firmware/issues/640)

vollständiges Changelog: https://github.com/freifunk-berlin/firmware/blob/v1.0.2/CHANGELOG.md vollständiges Readme: https://github.com/freifunk-berlin/firmware/blob/v1.0.2/README.md

• OpenWrt and feeds now @ 17.01.6+
  • Kernel 4.4.167
  • Releasenotes: https://openwrt.org/releases/17.01/notes-17.01.6, https://openwrt.org/releases/17.01/notes-17.01.5
  • Changelog: https://openwrt.org/releases/17.01/changelog-17.01.6, https://openwrt.org/releases/17.01/changelog-17.01.5
  • OpenWrt changes since 17.01.6: https://github.com/freifunk-berlin/firmware/commit/7497023317b56b2cf6c84b3acb518a5e56b59b96
  • OpenWrt feeds changes since 17.01.6: https://github.com/freifunk-berlin/firmware/commit/7497023317b56b2cf6c84b3acb518a5e56b59b96
  • add nameserver 80.67.169.40 to Freifunk profiles
  • create profile for Fürstenwalde
  • change subnet of mesh_network option for Berlin
  • update batman-adv to 2018.4
• change back to OpenVPN-openSSL to prevent some crashes seen with mbedTLS on some platforms
• patched mbedtls to accept RSA1024 keys for compatibility with VPN03 and bbb-vpn
• add devices: rb750gr3
• updates of packages-berlin: https://github.com/freifunk-berlin/firmware-packages/releases/tag/v1.0.2-rc1
  • allow changing the uplink-type
  • new uplink type using tunneldigger
  • new addon freifunk-berlin-bbbdigger to connect to the bbbvpn with tunneldigger

This is the 1st maintenance release for Hedy-1.0.0. The only feature is a working migration from previous releases, aka. Kathleen-0.x.x.

No security-updates or fixed were done on this release in comparison to Hedy1.0.0, to have the upgraded nodes very similar to existing, but fresh installed Hedy-1.0.0 nodes. Updates and fixes will come (soon) in the next release Hedy-1.0.2.

vollständiges Changelog: https://github.com/freifunk-berlin/firmware/blob/v1.0.1/CHANGELOG.md vollständiges Readme: https://github.com/freifunk-berlin/firmware/blob/v1.0.1/README.md

This release is only intended for fresh installs. An upgrade-install is scheduled for the next maintenance-release

changes firmware:

• LEDE 17.01
  • OpenVPN (umstieg auf mbedTLS)
  • olsrd gehalten auf Version 0.9.0.3 wegen Kompatibilität vor allem mit BBB-VPN
• flavors: default (no-tunnel); VPN03; tunnel-berlin
• 802.11-legacyrates off
• 802.11s in LuCI-Gui Mesh (11s)
• ffuplink interface one4all; ffuplink firrewall-zone
• div. neue Hardware
• 4MB-Geräte nur im default-flavor (kein Platz für OpenVPN)
• openwrt failsafe jetzt 192.168.42.1

packages:

• ffwizard: drop private AP-feature
• freifunk-berlin-olsrd-defaults: explicitly set IpVersion to 6 for olsrd6
• fix setting of community-profile
• do default-route to clients during initial-setup

vollständiges Changelog: https://github.com/freifunk-berlin/firmware/blob/v1.0.0/CHANGELOG.md vollständiges Readme: https://github.com/freifunk-berlin/firmware/blob/v1.0.0/README.md

Release Note 0.3.0 "Kathleen" - 2017-04-10

It's more a software-refresh and minor fixes

• enhancements:
  • images for GL.inet AR300, MT300a, MT300n, Buffalo WZRHPG300NH2, WZRHPAG300H, WZR600DHP, WZRHPG450H
  • prevent dnsmasq from spamming the syslog (quietdhcp=1)
  • new package: "collectd-dnsmasq-addon" to monitor DHCP-lease usage

Readme: https://github.com/freifunk-berlin/firmware/blob/v0.3.0/README.md ChangeLog: https://github.com/freifunk-berlin/firmware/blob/v0.3.0/CHANGELOG.md