Happy New Year 2025!

Statements Regarding Recent ASU Vulnerabilities
关于最近 ASU 漏洞的声明

- These vulnerabilities only affect custom images generated by the ASU server, which is used by attended sysupgrade utility and firmware selector (customize pre-installed packages)
这些漏洞仅影响由 ASU 服务器生成的自定义镜像，此服务器用于值守式系统升级和固件选择器（自定义预安装软件包）。

- Pre-built images from download site and self-built images from ImageBuilder or source code are not affected.
从下载站获取的预构建镜像以及从 ImageBuilder 或源码构建的镜像不受影响。

- No issues have been found after reviewing the logs from the past 30 days.
通过检查过去 30 天内的日志，暂未发现问题。

- For the best security, it is recommended to regenerate a new image if your image was generated by the ASU server.
为确保最佳安全性，如果您的镜像是由 ASU 服务器生成的，建议重新生成新的镜像。

Please check https://flatt.tech/research/posts/compromising-openwrt-supply-chain-sha256-collision/ for further information.

由于 PCDN 用户的滥用，（对于部分服务）我们不得不阻断所有来自中国大陆的请求。

受影响的服务：
- 全局镜像站
- asu（值守式系统升级）服务器
- 测试 asu 服务器

带来不便敬请谅解。

Our storage server is under maintenance, and it will take approximately 12.5 hours to complete. During the maintenance window, the storage server, asu server, and rsync server will be unavailable. Update: done.

Our storage server is under maintenance, and it will take approximately 12.5 hours to complete.
During the maintenance window, the storage server, asu server, and rsync server will be unavailable.

Update: done.

Our new asu server https://asu-2.kyarucloud.moe is available for test.

ImmortalWrt 23.05.4 released

- Core components update

- hostapd: fix SAE H2E security vulnerability
- kernel: backport bpf_loop support, update to 5.15.167
- mac80211: fix wifi throughput, update to 6.1.110
- mbedtls: update to 2.28.9
- openssl: update to 3.0.15

- Targets update

- ath79
- fix I2C pins on GL-AR750
- fix PHY mii settings

- ipq40xx
- fix PHY mii settings
- improve compatibility with newer Aruba apboot revs

- mediatek
- add support for several new devices
- CMCC A10 (OpenWrt U-Boot layout)
- Imou LC-HX3001 (OpenWrt U-Boot layout)
- Konka KOMI A31
- add PHY LED configuration for Zyxel EX5700
- fix PHY reset for JDCloud RE-CP-03

- ramips
- add support for OpenFi 5Pro
- enable lzma-loader for Sercomm NA502s
- fix PHY MII settings

- realtek
- backport VLAN fix

- rockchip
- add support for several new devices
- ArmSoM Sige3
- LYT T68M
- backport upstream fixes for FastRhino R66S/R68S
- enable wifi and bt for Firefly Station P2

- x86
- include Intel DMC firmware by default
- include Realtek 5GbE PCIe Network Adapter driver by default

... with other bug fixes and performance improvements :D

Get firmware at:
https://firmware-selector.immortalwrt.org/?version=23.05.4
https://downloads.immortalwrt.org/releases/23.05.4/targets/
https://mirrors.ustc.edu.cn/immortalwrt/releases/23.05.4/targets/

Setup opkg mirror (live in mainland China):
https://help.mirrorz.org/immortalwrt/

Revert to main opkg feed (not in mainland China):
sed \-i.bak "s,mirrors.vsean.net/openwrt,downloads.immortalwrt.org,g" "/etc/opkg/distfeeds.conf"We have introduced a new option in system configuration to persist mirror setting, e.g.:
uci set system.@imm_init[0].opkg_mirror='https://mirrors.vsean.net/openwrt' uci commit system

⚠️ For x86 users, run opkg upgrade luci\-app\-attendedsysupgrade and clean browser cache first if you want to use Attended Sysupgrade feature.

ImmortalWrt 项目组祝大家 2024 年新年快乐，平平安安，吉祥如意！
Happy Chinese New Year 2024!

祝贺大家 2023 年新年快乐！
Happy Chinese New Year 2023!???

祝大家 2023 元旦快乐！
Happy New Year 2023!

???