Voxel Custom firmware build for Orbi RBK50/RBK53 (RBR50, RBS50) v. 9.2.5.2.42SF-HW

[Voxel]

Continuation of

https://www.snbforums.com/threads/custom-firmware-build-for-orbi-rbk50-v-2-5-0-42sf-hw.60308/
. . .
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-40sf-hw.94936/
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-41sf-hw.95666/

New version of my custom firmware build: 9.2.5.2.42SF-HW.

Changes (vs 9.2.5.2.41SF-HW):

1. Toolchain: binutils is upgraded 2.45->2.45.1.
2. Toolchain: Go is upgraded 1.25.1->1.25.4.
3. OpenSSL v. 3.0.x package is upgraded to OpenSSL v. 3.5.x 3.0.17->3.5.4 (fixing CVE-2025-9230, CVE-2025-9232).
4. bind package is upgraded 9.18.39->9.18.41 (fixing CVE-2025-8677, CVE-2025-40778, CVE-2025-40780).
5. expat package is upgraded 2.7.1->2.7.3 (fixing CVE-2025-59375, CVE-2024-8176).
6. unbound package (used in stubby) is upgraded 1.23.1->1.24.1 (fixing CVE-2025-11411).
7. OpenVPN is upgraded 2.6.14->2.6.15.
8. lighttpd package is upgraded 1.4.81->1.4.82.
9. util-linux package is upgraded 2.41.1->2.41.2.
10. curl package is upgraded 8.16.0->8.17.0.
11. pcre2 package is upgraded 10.46->10.47.
12. nghttp2 package is upgraded 1.67.0->1.68.0.
13. libnl-tiny package is upgraded 2025-03-19->2025-11-03.
14. iw package is upgraded 6.9->6.17.
15. less package is upgraded 679->685.
16. Host tools: upgrade mkimage/u-boot to 2025.10.
17. Host tools: upgrade mtd-utils to 2.3.0.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[TeamZero]

Thanks so much!!

 

[Julian Brooks]

Continuation of

https://www.snbforums.com/threads/custom-firmware-build-for-orbi-rbk50-v-2-5-0-42sf-hw.60308/
. . .
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-40sf-hw.94936/
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-41sf-hw.95666/

New version of my custom firmware build: 9.2.5.2.42SF-HW.

Changes (vs 9.2.5.2.41SF-HW):

1. Toolchain: binutils is upgraded 2.45->2.45.1.
2. Toolchain: Go is upgraded 1.25.1->1.25.4.
3. OpenSSL v. 3.0.x package is upgraded to OpenSSL v. 3.5.x 3.0.17->3.5.4 (fixing CVE-2025-9230, CVE-2025-9232).
4. bind package is upgraded 9.18.39->9.18.41 (fixing CVE-2025-8677, CVE-2025-40778, CVE-2025-40780).
5. expat package is upgraded 2.7.1->2.7.3 (fixing CVE-2025-59375, CVE-2024-8176).
6. unbound package (used in stubby) is upgraded 1.23.1->1.24.1 (fixing CVE-2025-11411).
7. OpenVPN is upgraded 2.6.14->2.6.15.
8. lighttpd package is upgraded 1.4.81->1.4.82.
9. util-linux package is upgraded 2.41.1->2.41.2.
10. curl package is upgraded 8.16.0->8.17.0.
11. pcre2 package is upgraded 10.46->10.47.
12. nghttp2 package is upgraded 1.67.0->1.68.0.
13. libnl-tiny package is upgraded 2025-03-19->2025-11-03.
14. iw package is upgraded 6.9->6.17.
15. less package is upgraded 679->685.
16. Host tools: upgrade mkimage/u-boot to 2025.10.
17. Host tools: upgrade mtd-utils to 2.3.0.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

Am having trouble with v42 of the firmware. I upgraded my Router and 2x satellites this morning but could not connect to the internet. Have now downgraded back to v41 and all is good again. Am not sure what is going on or how to diagnose things further.

 

[Julian Brooks]

Am having trouble with v42 of the firmware. I upgraded my Router and 2x satellites this morning but could not connect to the internet. Have now downgraded back to v41 and all is good again. Am not sure what is going on or how to diagnose things further.

Further to the above message, there is something wrong somewhere with v41 too. v41 will not work on one of my RBR50 Satellites. So far I have rolled the non-working one back to v40. On both v41 and v42 access to the internet is block by the Satellite.

 

[alexnev]

Hi Voxel,
Thank you very much for the hard work you put into this project!
Im on the latest firmware and unfortunately i cant get openvpn server to work. It worked fine in older firmware versions.
I'm on a static IP address from my ISP. I pinged IP from my cell phone and it pings with no issues.
I downloaded fresh cert and connection profiles from opennvpn tab on router.
On my iphone, while connected through cellular, Openvpn client cant reach host with UDP 12973 port. It just times out trying to connect.
I tried to see logthrough netgear interface but cant see anything vpn related there.
Can you please help where to look?
Thank you!

 

[edoroom]

Hi Voxel,
Thank you very much for the hard work you put into this project!
Im on the latest firmware and unfortunately i cant get openvpn server to work. It worked fine in older firmware versions.
I'm on a static IP address from my ISP. I pinged IP from my cell phone and it pings with no issues.
I downloaded fresh cert and connection profiles from opennvpn tab on router.
On my iphone, while connected through cellular, Openvpn client cant reach host with UDP 12973 port. It just times out trying to connect.
I tried to see logthrough netgear interface but cant see anything vpn related there.
Can you please help where to look?
Thank you!

I agree same issue for me too since this firmware, it would unable to connect ;-)

Thanks alot for the updates and keeping this device secure and alive!

 

[Voxel]

Im on the latest firmware and unfortunately i cant get openvpn server to work. It worked fine in older firmware versions.

Could you please clarify which was the latest firmware version where the OpenVPN server worked?

Voxel.

 

[alexnev]

Could you please clarify which was the latest firmware version where the OpenVPN server worked?

Voxel.

Hi Voxel,
I didn’t use VPN for a while but I would say 3-4 versions back it was working 100%. I can do a test - let me know which one is best to roll back to to try?

 

[Voxel]

Hi Voxel,
I didn’t use VPN for a while but I would say 3-4 versions back it was working 100%. I can do a test - let me know which one is best to roll back to to try?

Hi alexnev,

If possible, please find the latest version that worked for you with the OpenVPN server. Let me explain: I am currently using Orbi RBK50 in AP mode, and it is difficult to check all previous versions myself, as I would leave my family and myself without Internet access for quite a long time. You understand, everyone (my family) works using the Internet. Not just for entertainment.

That means I have to change the configuration of my RBR50 and turn everything off. In addition, I first have to check my log file: what has changed since that version.

Voxel.

 

[alexnev]

Hi Voxel,
Totally understand, I'm in the same shoes - my family very unhappy when i mess with internet. Luckily, I have another RBR50 device I can easily test things on!

I just backed up my main router which is on v42 of the firmware with non-working VPN.
I flashed v36 of your software to my spare router and restore config from my main. Just to be safe i generate fresh cert from VPN server and voila - VPN works with no issues on my iPhone.

So, summary:
v36 has working VPN [v39 Open VPN 2.6.14; V38 Open VPN 2.6.13; V37 Open VPN 2.6.12; v36 Open VPN 2.6.12]
v40 has working VPN (tested with cert generated from v36) [Open VPN v 2.6.14]
v41 has working VPN (tested with cert generated from v36) [Open VPN v 2.6.14]
v42 VPN is not working
Something in changes between v42 and v41 killed VPN. Maybe this:

OpenVPN is upgraded 2.6.14->2.6.15.

Looks like latest version of open vpn now is 2.6.17, maybe it will work?

Next I'm trying to flash v40 - and I will try to pinpoint latest version with working VPN, I will post shortly. It shouldn't take very much time.
Alex

Update: Tested v40 - working; Tested v41 - working; Freshly flashed v42 - VPN is not working with symptoms as described in my first post.