AC68U Firmware Update for DNS Fix

[TonyK132]

Will Asus release a firmware update for a fix for the recent DNS problem, or is that router now being left behind with no more updates? I use mine as a AiMesh node.

 

[ColinTaylor]

I use mine as a AiMesh node.

Then the question is moot in your case as you're not running a DNS server on it. It's still a valid question for other users using it as a router. It's only been a couple of days since dnsmasq was patched at source. I expect it'll be included in Asus' next security update as normal as the RT-AC68U is still supported.

 

[bennor]

Will Asus release a firmware update for a fix for the recent DNS problem, or is that router now being left behind with no more updates? I use mine as a AiMesh node.

Asus generally does not respond in or to this subform on Asus routers. As such you are asking for people to speculate. So some speculation. Chances are Asus will eventually release a patch for the DNSmasq vulnerability for their routers. When or how soon is anyone's guess.

In the mean time you can always use Asus-Merlin's firmware on a RT-AC68U router (if you need the DNSmasq DNSSEC fix for the router) since he released a patch for DNSmasq recently.

Release - Asuswrt-Merlin 386.12_6 is now available for AC models

Asuswrt-Merlin 386.12_6 has been released for Wifi 5 models. This is a security update addressing two vulnerabilities in dnsmasq when using DNSSEC. Changes since 386.12_4: 386.12_6 (26-Feb-2024) - UPDATED: dnsmasq to 2.90 (resolves CVE 2023-50868 and CVE 2023-50387). Downloads are here...

www.snbforums.com

386.12_6 (26-Feb-2024)
  - UPDATED: dnsmasq to 2.90 (resolves CVE 2023-50868 and CVE 2023-50387).

As already indicated by ColinTaylor the AiMesh node typically isn't running a DNS server on it. AiMesh nodes typically have a number of router features disabled. Same for AP mode.

 

[Tech9]

fix for the recent DNS problem

There is no DNSSEC option in stock Asuswrt firmware anyway. What "DNS problem" is an update going to fix?

 

[Analog-1]

here is no DNSSEC option in stock Asuswrt firmware anyway.

There is for AX routers. Not sure about AC models

 

[Tech9]

There is for AX routers.

Not available for RT-AC68U on current 386 firmware. Perhaps this router on stock Asuswrt is not even affected by Dnsmasq DNSSEC vulnerability.

 

[TonyK132]

There is no DNSSEC option in stock Asuswrt firmware anyway. What "DNS problem" is an update going to fix?

Oops!! I am so used to Merlin's version that I wrongly assumed Asus carried it forward to their stock firmwares. So as been pointed out, for my use case, I do not need this done.

 

[Tech9]

I wrongly assumed Asus carried it forward to their stock firmwares

They did, but in 388 firmware for AX-class routers. AC-class routers are on 386 firmware.