Staging tree of Linus Walleij https://git.openwrt.org/openwrt/staging/linusw/atom?h=master 2026-01-31T17:00:50Z 2026-01-31T17:00:50Z Felix Fietkau 2026-01-31T16:56:53Z urn:sha1:1bbb60184d1f25b369b26802d199ac4c85af3111 The ucode wifi-scripts unconditionally set ieee80211w=1 for psk-sae and eap-eap2 auth types, ignoring any user-configured value. This caused ieee80211w=2 (MFP required) to be silently downgraded to 1 (MFP optional) when using sae-mixed encryption. Change the logic to only set the default of 1 when ieee80211w is not already configured by the user. Fixes: https://github.com/openwrt/openwrt/issues/21751 Signed-off-by: Felix Fietkau <nbd@nbd.name> 2026-01-31T14:03:33Z Felix Fietkau 2026-01-31T14:03:05Z urn:sha1:9d496dfb984dc645560bb86e5012de29e5efcc6f b3ee1209a3d0 uclient-http: reset fd to -1 after close in disconnect 9c2ad269c42b uclient-http: fix seq field check to use correct field 80c9bd29c233 uclient-http: fix hang on HTTP to HTTPS redirect 931bbfeb2c92 ucode: fix memory leak when using ssl context Fixes: https://github.com/openwrt/uclient/issues/11 Fixes: https://github.com/openwrt/uclient/issues/13 Signed-off-by: Felix Fietkau <nbd@nbd.name> 2026-01-30T18:07:41Z Stefan Kalscheuer 2026-01-23T18:13:25Z urn:sha1:bca6c2481c9b83dff511d13f20f20597646669cb Update package to the latest stable version. Patches unchanged. Signed-off-by: Stefan Kalscheuer <stefan@stklcode.de> Link: https://github.com/openwrt/openwrt/pull/21673 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 2026-01-30T15:51:32Z John Audia 2026-01-11T12:41:21Z urn:sha1:cd51f0c424a7e44700f6dc69ee5947de56e49eec % log --no-merges --pretty=oneline --abbrev-commit 20260110...20251125 ff2b45687e73 linux-firmware: update firmware for MT7925 WiFi device 1e133c2d1d75 mediatek MT7925: update bluetooth firmware to 20260106153314 2f9b243612ae mediatek MT7920: update bluetooth firmware to 20260105151350 1e92dbe4b49c mediatek MT7922: update bluetooth firmware to 20260106153735 b9a690370724 linux-firmware: update firmware for MT7922 WiFi device 0405e4a1ba66 Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 10d9e8e00e04 amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 21d69f404447 qcom: Update DSP firmware for sa8775 platform fa860a865341 QCA: Add Bluetooth firmware for QCC2072 uart interface 3692c4d6e677 i915: Xe3p_LPD DMC v2.33 b69f261cdedf qcom: Update DSP firmware for qcs8300 platform 5e60a4ec91ed linux-firmware: update firmware for MT7920 WiFi device 3ff97fca3ccc qcom: Update aic100 firmware files b85e1561bdfc qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 acf533d4b3d7 firmware: Revert kernel_boot.elf due to license compliance issue f8a6723505e9 linux-firmware: add firmware for an8811hb 2.5G ethernet phy 2a6b361888e8 i915: Xe3LPD_3002 DMC v2.28 81368cb84b87 i915: Xe3LPD DMC v2.33 c360f595d977 intel_vpu: Add firmware for 50xx NPUs and update older ones 13786e87c7e9 linux-firmware: Update AMD SEV firmware 993573ac3dc6 amdgpu: DMCUB updates for various ASICs 19b55776b5b5 qcom: venus-5.4: fix ELF segment alignment to 4 bytes e56e0a4c8985 mediatek MT7925: update bluetooth firmware to 20251210093205 9ba3cd479466 linux-firmware: update firmware for MT7925 WiFi device 56bb432a65bc rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller 154d3ad0864a qcom: Update CDSP firmware for qcm6490 platform 39fdaba4a719 rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 f383a26428bf linux-firmware: Add firmware file for Intel Scorpius core fed51005f935 rtw89: 8852b: update fw to v0.29.29.15 fe9e5c89d5e8 cirrus: cs35l41: Update firmware and tuning for various HP laptops 1466bd681b4c cirrus: cs35l41: Add support for new HP Clipper laptop 950e89fddc4c qcom: drop compatibility a640_zap.mdt symlink 8715f3da4832 qcom: add version for a530v3_gpmu.fw2 3b34b3b938be xe: Update GUC to v70.55.3 for BMG, PTL 0a041632c156 iwlwifi: add Bz/Sc FW for core101-82 release 41b492fc7464 iwlwifi: Add Sc/Gf firmware for core101-82 release 8e39678cd6fb iwlwifi: update ty/So/Ma firmwares for core101-82 release 06bee1b5023d iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release 9c9bdaab22a7 amdgpu: DMCUB updates for various ASICs d718d6300100 qcom: Add firmwares for sm8150 GPU 42e9d5a5994c qcom: Add firmwares for sm8450 GPU 30979b116b5c qcom: Add firmwares for sm8550 GPU 1304566db9cc qcom: Add firmwares for sm8650 GPU 3d89ec352d12 qcom: Add firmwares for sm8750 GPU 1d02df5c1ada Makefile: add licence header 9eca984de60d ath10k: WCN3990 hw1.0: update board-2.bin 89ef5c5da944 ath10k: QCA9888 hw2.0: update board-2.bin e6e77dccf149 ath10k: QCA4019 hw1.0: update board-2.bin 1774b2a25c75 cirrus: cs35l41: Add support for new HP laptops 3d5c8135206c Revert "amdgpu: update GC 11.5.0 firmware" e399bb332bda linux-firmware: Update amd-ucode copyright information 2b318c8e4159 linux-firmware: Update AMD cpu microcode c56e10ea830f linux-firmware: Update firmware file for Intel Scorpius core ee03c5fb3d99 linux-firmware: Update firmware file for Intel BlazarIGfP core 70a4bb64e5b3 linux-firmware: Update firmware file for Intel BlazarI core de8211b56b76 linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core 4d8ef73cb73e linux-firmware: Update firmware file for Intel BlazarU core 15f854368441 ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 b38214c8f31c ath11k: QCA2066 hw2.1: update board-2.bin c277a009eb05 qcom: update ADSP firmware for x1e80100 platform, change the license 6e06e5eac797 qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE 9db3ba0dbc95 Reapply "amdgpu: update SMU 14.0.3 firmware" 5698af42f16e Revert "amdgpu: update SMU 14.0.3 firmware" baf6c2f67a24 Revert "amdgpu: update GC 10.3.6 firmware" c092c7487eb7 Revert "amdgpu: update GC 11.5.1 firmware" 5b890c92e78b linux-firmware: update firmware for MT7925 WiFi device 474cca8b3fd3 mediatek MT7925: update bluetooth firmware to 20251124093155 214b4374c0e9 intel_vpu: Update NPU firmware c91948d8a672 WHENCE: fix version string for video firmware 095130d8e395 qcom: vpu: update video firmware binary for SM8250 323507dc0c43 xe: Update GUC to v70.54.0 for BMG, PTL Build system: x86/64 Build-tested: x86/64-glibc Run-tested: x86/64-glibc (Intel N150) Signed-off-by: John Audia <therealgraysky@proton.me> Link: https://github.com/openwrt/openwrt/pull/21497 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 2026-01-29T11:04:10Z Tim Harvey 2026-01-27T01:17:26Z urn:sha1:92a94dc9b0df12111e4c81ff1a280e32deb5eba3 Add a module for tpm-tis-spi for TCG TIS 1.3 TPM security chips connected to a regular non-tcg SPI master. Add imx target compatibility for kmod-tpm. Signed-off-by: Tim Harvey <tharvey@gateworks.com> Link: https://github.com/openwrt/openwrt/pull/21726 Signed-off-by: Robert Marko <robimarko@gmail.com> 2026-01-28T23:09:42Z Aleksander Jan Bajkowski 2026-01-26T22:25:00Z urn:sha1:42f9b095d68e807100c45edff019eb37dccdd2f0 Replace patch with upstream version. Signed-off-by: Aleksander Jan Bajkowski <olek2@wp.pl> Link: https://github.com/openwrt/openwrt/pull/21723 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 2026-01-28T22:56:15Z Roc Lai 2026-01-28T00:43:05Z urn:sha1:6f07cf4fbcf09cd014f43d709205e1f318842610 Fixed build failure caused by missing libzstd dependency. Added CONFIG_KEXEC_ZSTD configuration option and libzstd library dependency declaration, following the same pattern as existing zlib and lzma support. Fixes: e75218ef4a27 ("kexec-tools: bump to 2.0.32") Link: https://github.com/openwrt/openwrt/pull/21623#issuecomment-3805115332 Signed-off-by: Roc Lai <laipeng668@qq.com> Link: https://github.com/openwrt/openwrt/pull/21743 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 2026-01-28T22:52:54Z Ivan Pavlov 2026-01-28T14:01:36Z urn:sha1:df6db01f4f5914036b34ff46844fe86d97d5fc56 This release incorporates the following bug fixes and mitigations: fixed Improper validation of PBMAC1 parameters in PKCS#12 MAC verification. (CVE-2025-11187) fixed Stack buffer overflow in CMS AuthEnvelopedData parsing. (CVE-2025-15467) fixed NULL dereference in SSL_CIPHER_find () function on unknown cipher ID. (CVE-2025-15468) fixed openssl dgst one-shot codepath silently truncates inputs >16 MiB. (CVE-2025-15469) fixed TLS 1.3 CompressedCertificate excessive memory allocation. (CVE-2025-66199) fixed Heap out-of-bounds write in BIO_f_linebuffer on short writes. (CVE-2025-68160) fixed Unauthenticated/unencrypted trailing bytes with low-level OCB function calls. (CVE-2025-69418) fixed Out of bounds write in PKCS12_get_friendlyname () UTF-8 conversion. (CVE-2025-69419) fixed Missing ASN1_TYPE validation in TS_RESP_verify_response () function. (CVE-2025-69420) fixed NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex () function. (CVE-2025-69421) fixed Missing ASN1_TYPE validation in PKCS#12 parsing. (CVE-2026-22795) fixed ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes () function. (CVE-2026-22796) Adjust patches due to formatting changes. Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com> Link: https://github.com/openwrt/openwrt/pull/21752 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 2026-01-28T22:44:38Z Ziyang Huang 2026-01-08T14:38:46Z urn:sha1:f8a6798bf38c3d3e6fe6af9367ea5628df46429a The an7581.dtsi contains the mediatek,mtk-xhci device. Signed-off-by: Ziyang Huang <hzyitc@outlook.com> Link: https://github.com/openwrt/openwrt/pull/21460 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 2026-01-28T22:41:32Z Ivan Pavlov 2026-01-27T14:41:05Z urn:sha1:141d04a4d6b9eb599a1adb73defa54b07817cdbc Various improvements and bug fixes. Changelog: https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.99.6/CHANGES Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com> Link: https://github.com/openwrt/openwrt/pull/21744 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>