Voxel Custom firmware build for Orbi RBK50/RBK53 (RBR50, RBS50) v. 9.2.5.2.43SF-HW

[Voxel]

Continuation of

https://www.snbforums.com/threads/custom-firmware-build-for-orbi-rbk50-v-2-5-0-42sf-hw.60308/
. . .
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-41sf-hw.95666/
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-42sf-hw.96150/

New version of my custom firmware build: 9.2.5.2.43SF-HW.

Changes (vs 9.2.5.2.42SF-HW):

1. Toolchain: Go is upgraded 1.25.4->1.25.6.
2. OpenSSL v. 3.5.x package is upgraded 3.5.4->3.5.5 (fixing

CVE-2025-11187,​

CVE-2025-15467,​

CVE-2025-15468,​

CVE-2025-15469,​

CVE-2025-66199,​

CVE-2025-68160,​

CVE-2025-69418,​

CVE-2025-69419,​

CVE-2025-69420,​

CVE-2025-69421,​

CVE-2026-22795,​

CVE-2026-22796).​

3. dropbear package is upgraded 2024.88->2025.89 (fixing CVE-2025-14282, CVE-2019-6111).
4. OpenVPN is upgraded 2.6.15->2.6.17 (fixing CVE-2025-13086, CVE-2025-13751).
5. unbound package (used in stubby) is upgraded 1.24.1->1.24.2 (fixing CVE-2025-11411).
6. expat package is upgraded 2.4.3->2.4.4 (fixing CVE-2026-24515, CVE-2026-25210).
7. libpcap package is upgraded 1.10.5->1.10.6 (fixing CVE-2025-11961, CVE-2025-11964).
8. DNSCrypt Proxy v.2 is upgraded 2.1.14->2.1.15.
9. util-linux package is upgraded 2.41.2->2.41.3.
10. bind package is upgraded 9.18.41->9.18.44.
11. cifs-utils package is upgraded 7.4->7.5.
12. nano package is upgraded 8.6->8.7.
13. iperf3 package is upgraded 3.19.1->3.20.
14. sysstat package is upgraded 12.7.8->12.7.9.
15. tcpdump package is upgraded 4.99.5->4.99.6.
16. libnl-tiny package is upgraded 2025-11-03->2025-12-02.
17. ncurses package is upgraded 6.5->6.6.
18. libtalloc package is upgraded 2.4.3->2.4.4.
19. jansson package is upgraded 2.14.1->2.15.0.
20. OpenSSL v. 3.5.x: change TLS Security Level to '1' instead of default '2'.
21. Host tools: upgrade xz to 5.8.2.
22. Host tools: upgrade mkimage/u-boot to 2026.01.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[boto]

What a huge security patch ! Thanks a lot @Voxel

 

[wimmme]

Thanks for having our backs here. Greatly appreciated ! Thanks a lot @Voxel

 

[Julian Brooks]

Continuation of

https://www.snbforums.com/threads/custom-firmware-build-for-orbi-rbk50-v-2-5-0-42sf-hw.60308/
. . .
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-41sf-hw.95666/
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-42sf-hw.96150/

New version of my custom firmware build: 9.2.5.2.43SF-HW.

Changes (vs 9.2.5.2.42SF-HW):

1. Toolchain: Go is upgraded 1.25.4->1.25.6.
2. OpenSSL v. 3.5.x package is upgraded 3.5.4->3.5.5 (fixing

CVE-2025-11187,​

CVE-2025-15467,​

CVE-2025-15468,​

CVE-2025-15469,​

CVE-2025-66199,​

CVE-2025-68160,​

CVE-2025-69418,​

CVE-2025-69419,​

CVE-2025-69420,​

CVE-2025-69421,​

CVE-2026-22795,​

CVE-2026-22796).​

3. dropbear package is upgraded 2024.88->2025.89 (fixing CVE-2025-14282, CVE-2019-6111).
4. OpenVPN is upgraded 2.6.15->2.6.17 (fixing CVE-2025-13086, CVE-2025-13751).
5. unbound package (used in stubby) is upgraded 1.24.1->1.24.2 (fixing CVE-2025-11411).
6. expat package is upgraded 2.4.3->2.4.4 (fixing CVE-2026-24515, CVE-2026-25210).
7. libpcap package is upgraded 1.10.5->1.10.6 (fixing CVE-2025-11961, CVE-2025-11964).
8. DNSCrypt Proxy v.2 is upgraded 2.1.14->2.1.15.
9. util-linux package is upgraded 2.41.2->2.41.3.
10. bind package is upgraded 9.18.41->9.18.44.
11. cifs-utils package is upgraded 7.4->7.5.
12. nano package is upgraded 8.6->8.7.
13. iperf3 package is upgraded 3.19.1->3.20.
14. sysstat package is upgraded 12.7.8->12.7.9.
15. tcpdump package is upgraded 4.99.5->4.99.6.
16. libnl-tiny package is upgraded 2025-11-03->2025-12-02.
17. ncurses package is upgraded 6.5->6.6.
18. libtalloc package is upgraded 2.4.3->2.4.4.
19. jansson package is upgraded 2.14.1->2.15.0.
20. OpenSSL v. 3.5.x: change TLS Security Level to '1' instead of default '2'.
21. Host tools: upgrade xz to 5.8.2.
22. Host tools: upgrade mkimage/u-boot to 2026.01.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

Hello, I wonder if someone can guide me to a solution to my issue.

I am running an RBR50 in AP mode with 2x RBS50 satellites on Voxel firmware v41. These sit behind an Asus Router RT-AC86U which runs Merlin Firmware. The Asus router is now on firmware that is no longer updated, the last being sometime last year I recall.

My issue is that after upgrading to v43 I am unable to connect to the internet on any device on my wifi. I get the error:

'Your connection is not private' NET:: ERR_CERT_AUTHORITY_INVALID

Restoring to v41, everything works.

I am wondering if the issue is that my main router is not as up-do-date as the Voxel firmware. But have no way to test this theory. Any suggestions would be appreciated

 

[TeamZero]

Thanks Voxel !