Hi,

The LEDE Community is proud to announce the first stable version of the

LEDE 17.01 version series.

LEDE 17.01.0 "Reboot" incorporates thousands of commits over the last

nine months of effort. With this release, the LEDE development team

closes out an intense effort to modernize many parts of OpenWrt and

incorporate many new modules, packages, and technologies.

Some selected highlights of this release are:

Linux kernel updated to version 4.4.50 (from 3.18 in Chaos Calmer)

Update of essential software: dnsmasq updated to 2.76 (from 2.73 in Chaos Calmer) busybox updated to 1.25.1 (from 1.23.2 in Chaos Calmer) mbedtls version 2.4.0 (from polarssl 1.3.14 in Chaos Calmer) openssl updated to 1.0.2k

Improved Security Features Use SHA256 instead of MD5 to validate source code for packages mbedtls: disable SSLv3 support OpenSSL: disable support for compression, heartbeats, NPN,

Whirlpool, and J-PAKE Memory Corruption Mitigation Methods gcc -Wformat -Wformat-security User space Stack-Smashing Protection (Regular) Kernel space Stack-Smashing Protection (Regular) buffer-overflows detection (FORTIFY_SOURCE) (Conservative) RELRO protection (Full)

Improved Networking Support Smart Queue Management (SQM) minimizes bufferbloat by using the

cake and fq_codel qdisc's. Improvements to the WiFi stack eliminating bufferbloat on ath9k,

mt76 and some ath10k chipsets Airtime fairness scheduler for ath9k to prevent slow stations

from hogging too much airtime Various stability and regression fixes to the Linux wireless

stack and ath9k in particular Provide alternative Candela-Tech ath10k-ct driver IPv6 hardening

Updated toolchain musl 1.1.16 gcc 5.4.0 binutils 2.25.1

Platform and Driver Support Lantiq Added redistributable DSL firmware Updated DSL phy drivers Added new targets: apm821xx (AppliedMicro APM821xx) arc770 (Synopsys DesignWare ARC 770D) archs38 (Synopsys DesignWare ARC HS38) armvirt (QEMU ARM Virtual Machine) ipq806x (Qualcomm Atheros IPQ806X) layerscape (NXP Layerscape) zynq (Xilinx Zynq 7000 SoCs) Reorganized x86 target: Drop dedicated Xen DomU target, merged with x86/generic Enable AES-NI support Removed targets: realview, replaced by armvirt ppc44x, disabled due to code brokeness netlogic, dropped due to no available hardware

Build system improvements Separation of base system and community feeds to simplify

distribution of binary package updates Fixes and enhancements in package dependency handling, better

support for virtual provides Per-device rootfs images to better tune package selection to each

individual device profile New image build code improving compilation times and simplifying

device profile declarations New package/.../check make target to run a series of standard

diagnostics on Makefiles Support for fetching sources using Curl Generate reproducible source tarballs when packing SCM checkouts

Image Builder / SDK Rework library bundling to allow for better portability between

different Linux distributions Add support for building kernel modules using the SDK

Added support for a many new routers and boards

For a detailed list of changes since 17.01.0-rc2 refer to

https://lede-project.org/releases/17.01/changelog-17.01.0-final

For a complete list of changes since the start of the LEDE project, see

https://lede-project.org/releases/17.01/changelog-17.01.0

Known issues:

Available space on devices with only 4MB flash is very low,

users requiring extra packages might want to consider using the

image builder to repack custom images

The available memory on devices with 32MB RAM might be too low to

reliably run opkg or sysupgrade operations, especially in

conjunction with LuCI

Any outstanding issues reported at https://bugs.lede-project.org/

For latest information about the 17.01 series, refer to the wiki at:

https://lede-project.org/releases/17.01/

To download the v17.01.0 images, navigate to:

https://downloads.lede-project.org/releases/17.01.0/

A big thank you goes to all our active package maintainers, testers,

documenters and supporters.

Have fun!

The LEDE Community