Voxel Custom firmware build for Orbi LBR20 v. 9.2.5.2.43SF-HW

[Voxel]

Continuation of:

https://www.snbforums.com/threads/c...bi-lbr20-v-9-2-5-2-24sf-hw.73983/#post-708327
. . .
https://www.snbforums.com/threads/custom-firmware-build-for-orbi-lbr20-v-9-2-5-2-41sf-hw.87289/
https://www.snbforums.com/threads/custom-firmware-build-for-orbi-lbr20-v-9-2-5-2-42sf-hw.88721/

New version of my custom firmware build: 9.2.5.2.43SF-HW.

Changes (vs 9.2.5.2.42SF-HW):

1. Toolchain: Go is upgraded 1.21.6->1.22.2.
2. expat package is upgraded 2.5.0->2.6.2 (fixing CVE-2023-52425, CVE-2023-52426, CVE-2024-28757).

https://nvd.nist.gov/vuln/detail/CVE-2023-52425​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-52426​

(score 5.5, Medium)​

https://www.suse.com/security/cve/CVE-2024-28757.html​

(score 7.5, High)​

3. unbound package (used in stubby) is upgraded 1.19.0->1.19.3 (fixing CVE-2023-50387, CVE-2023-50868, CVE-2024-1931).

https://nvd.nist.gov/vuln/detail/CVE-2023-50387​

(score 7.5, High)​

https://access.redhat.com/security/cve/CVE-2023-50868​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2024-1931​

(score 7.5, High)​

4. dropbear package is upgraded 2022.83->2024.84 (fixing CVE-2023-48795).

https://nvd.nist.gov/vuln/detail/CVE-2023-48795​

(score 5.9. Medium)​

5. bind package is upgraded 9.18.21->9.18.25 (fixing CVE-2023-4408, CVE-2023-5517, CVE-2023-5679, CVE-2023-50387, CVE-2023-50868, CVE-2023-50387).​

https://nvd.nist.gov/vuln/detail/CVE-2023-4408​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-5517​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-5679​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-50387​

(score 7.5, High)​

https://access.redhat.com/security/cve/CVE-2023-50868​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-50387​

(score 7.5, High)​

6. libuv: add patch to fix CVE-2024-24806.

https://nvd.nist.gov/vuln/detail/CVE-2024-24806​

(score 7.3, High)​

7. nghttp2 package is upgraded 1.59.0->1.61.0.

https://nvd.nist.gov/vuln/detail/CVE-2024-28182​

(score 5.3, Medium)​

8. lua: add patch to fix CVE-2014-5461.

https://www.suse.com/security/cve/CVE-2014-5461.html​

(score 5.0. Medium)​

9. OpenVPN is upgraded 2.6.8->2.6.10.
10. lighttpd package is upgraded 1.4.73->1.4.75.
11. curl package is upgraded 8.6.0->8.7.1.
12. ipset package is upgraded 7.19->7.21.
13. wget package is upgraded 1.21.4->1.24.5.
14. util-linux package is upgraded 2.39.3->2.39.4.
15. coreutils package is upgraded 9.4->9.5.
16. gettext-full package is upgraded 0.22.4->0.22.5.
17. libcap-ng package is upgraded 0.8.4->0.8.5.
18. ca-certificates package is upgraded 20230311->20240203.
19. Host tools: upgrade UPX to 4.2.3.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[Lbrfan]

Thank you for providing what netgear took from us (telnet) and made even better. LBR20 is such a powerful 4G router with your firmware.