Voxel Custom firmware build for Orbi LBR20 v. 9.2.5.2.41SF-HW

[Voxel]

Continuation of:

https://www.snbforums.com/threads/c...bi-lbr20-v-9-2-5-2-24sf-hw.73983/#post-708327
. . .
https://www.snbforums.com/threads/custom-firmware-build-for-orbi-lbr20-v-9-2-5-2-39sf-hw.85465/
https://www.snbforums.com/threads/custom-firmware-build-for-orbi-lbr20-v-9-2-5-2-40sf-hw.86457/

New version of my custom firmware build: 9.2.5.2.41SF-HW.

Changes (vs 9.2.5.2.40SF-HW):

1. Toolchain: binutils version is upgraded 2.40->2.41.
2. Toolchain: Go is upgraded 1.21.0->1.21.3.
3. curl package is upgraded 8.2.1->8.4.0 (fixing CVE-2023-38545, CVE-2023-38546).

https://phoenix.security/vulnerability-curl/​

CVE-2023-38545: high severity vulnerability​

CVE-2023-38546: low severity vulnerability​

4. nghttp2 package is upgraded 1.55.1->1.57.0 (fixing CVE-2023-44487).

https://nvd.nist.gov/vuln/detail/CVE-2023-44487​

(score 7.5. High)​

5. OpenSSL v. 1.1.1 package is upgraded 1.1.1v->1.1.1w (fixing CVE-2023-4807).

https://nvd.nist.gov/vuln/detail/CVE-2023-4807​

(score 7.8, High, but actually is not related to router firmware)​

6. samba36: add patches to fix CVE:

CVE-2015-5330, CVE-2017-11103, CVE-2017-2619, CVE-2018-14629, CVE-2018-16841,​

CVE-2018-16851, CVE-2018-16860, CVE-2019-10218, CVE-2019-3880, CVE-2020-10745,​

CVE-2020-14303​

7. lighttpd package is upgraded 1.4.71->1.4.72.
8. ethtool package is upgraded 6.4->6.5.
9. ipset package is upgraded 7.17->7.19.
10. proftpd package is upgraded 1.3.8->1.3.8a.
11. bind package is upgraded 9.18.18->9.18.19.
12. coreutils package is upgraded 9.3->9.4.
13. sysstat package is upgraded 12.7.2->12.7.4.
14. zlib package is upgraded 1.2.13->1.3.
15. gettext-full package is upgraded 0.21.1->0.22.3.
16. unbound package (used in stubby) is upgraded 1.17.1->1.18.0.
17. dbus package is upgraded 1.14.8->1.14.10.
18. iperf3 package is upgraded 3.14->3.15.
19. sms-tool package is upgraded 2022-03-21->2023-09-21.
20. Kernel: Linux kernel patch to fix build with binutils >= 2.41.
21. Init script 'net-lan': add call of '/usr/sbin/update_user'.
22. Remove dummy 'gettext' and 'libiconv' packages ('gettext-full' and 'libiconv-full' are used instead of).
23. Host tools: upgrade mpfr to 4.2.1.
24. Host tools: upgrade mtd-utils to 2.1.6.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[nordicboy]

@Voxel Thank You!!!!

 

[Cheezits]

@Voxel Thanks dude. We all appreciate it.