Voxel Custom firmware build for Orbi RBK50/RBK53 (RBR50, RBS50) v. 9.2.5.2.33SF-HW

[Voxel]

Continuation of

https://www.snbforums.com/threads/custom-firmware-build-for-orbi-rbk50-v-2-5-0-42sf-hw.60308/
. . .
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-31sf-hw.87272/
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-32sf-hw.88717/

New version of my custom firmware build: 9.2.5.2.33SF-HW.

Changes (vs 9.2.5.2.32SF-HW):

1. Toolchain: Go is upgraded 1.21.6->1.22.2.
2. expat package is upgraded 2.5.0->2.6.2 (fixing CVE-2023-52425, CVE-2023-52426, CVE-2024-28757).

https://nvd.nist.gov/vuln/detail/CVE-2023-52425​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-52426​

(score 5.5, Medium)​

https://www.suse.com/security/cve/CVE-2024-28757.html​

(score 7.5, High)​

3. unbound package (used in stubby) is upgraded 1.19.0->1.19.3 (fixing CVE-2023-50387, CVE-2023-50868, CVE-2024-1931).

https://nvd.nist.gov/vuln/detail/CVE-2023-50387​

(score 7.5, High)​

https://access.redhat.com/security/cve/CVE-2023-50868​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2024-1931​

(score 7.5, High)​

4. dropbear package is upgraded 2022.83->2024.84 (fixing CVE-2023-48795).

https://nvd.nist.gov/vuln/detail/CVE-2023-48795​

(score 5.9. Medium)​

5. bind package is upgraded 9.18.21->9.18.25 (fixing CVE-2023-4408, CVE-2023-5517, CVE-2023-5679, CVE-2023-50387, CVE-2023-50868, CVE-2023-50387).

https://nvd.nist.gov/vuln/detail/CVE-2023-4408​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-5517​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-5679​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-50387​

(score 7.5, High)​

https://access.redhat.com/security/cve/CVE-2023-50868​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-50387​

(score 7.5, High)​

6. libuv: add patch to fix CVE-2024-24806.

https://nvd.nist.gov/vuln/detail/CVE-2024-24806​

(score 7.3, High)​

7. nghttp2 package is upgraded 1.59.0->1.61.0.

https://nvd.nist.gov/vuln/detail/CVE-2024-28182​

(score 5.3, Medium)​

8. lua: add patch to fix CVE-2014-5461.

https://www.suse.com/security/cve/CVE-2014-5461.html​

(score 5.0. Medium)​

9. OpenVPN is upgraded 2.6.8->2.6.10.
10. lighttpd package is upgraded 1.4.73->1.4.75.
11. curl package is upgraded 8.6.0->8.7.1.
12. ipset package is upgraded 7.19->7.21.
13. wget package is upgraded 1.21.4->1.24.5.
14. util-linux package is upgraded 2.39.3->2.39.4.
15. coreutils package is upgraded 9.4->9.5.
16. gettext-full package is upgraded 0.22.4->0.22.5.
17. libcap-ng package is upgraded 0.8.4->0.8.5.
18. ca-certificates package is upgraded 20230311->20240203.
19. Host tools: upgrade UPX to 4.2.3.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[gssjshark]

Thanks @Voxel !

 

[TeamZero]

Thanks!!!

 

[alexnev]

Thank you @Voxel!

 

[andykt]

Thanks once again @Voxel

 

[wimmme]

Thanks @Voxel , appreciate it !

 

[quackamole]

@Voxel 33 still has an unknown issue with severely degraded / non-existent speeds when using the router VPN. going back to 31 restores speed

 

[Voxel]

@Voxel 33 still has an unknown issue with severely degraded / non-existent speeds when using the router VPN. going back to 31 restores speed

I'll check it, but not now, sorry. I am out-of-home.

Voxel.

 

[R. Gerrits]

@Voxel 33 still has an unknown issue with severely degraded / non-existent speeds when using the router VPN. going back to 31 restores speed

out of curiosity, is the issue with the OpenVPN client (your router connects to some VPN provider) or with the OpenVPN server? (for instance you phone connects to your router).

In case of the latter, did you install a new .opvn profile on your phone as well after upgrade?

(.32 moves from OpenVPN 2.5.x to 2.6.x and .32 switches to a new default cipher CHACHA20-POLY1305
So perhaps is it just an issue that 2.6.x doesn't play nice with the AES cipher that used to be the default?

 

[quackamole]

OpenVPN Server. no I have not. I will look at doing that. thanks!