What's new

Voxel Custom firmware build for R7800 v. 1.0.2.95SF

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Voxel

Part of the Furniture
Continuation of

. . .
https://www.snbforums.com/threads/custom-firmware-build-for-r7800-v-1-0-2-93sf.78318/
https://www.snbforums.com/threads/custom-firmware-build-for-r7800-v-1-0-2-94sf.78610/

New version of my custom firmware build: 1.0.2.95SF.

Changes (vs 1.0.2.94SF):

1. Toolchain: GCC is upgraded 11.3.0->12.1.0.
2. Toolchain: Go is upgraded 1.18.1->1.18.3.
3. OpenSSL v. 1.1.1 package is upgraded 1.1.1n->1.1.1o (fixing CVE-2022-1292, score 9.8, Critical).
4. libxml2 package is upgraded 2.9.13->2.9.14 (fixing CVE-2022-29824, score 6.5, Medium).
5. OpenVPN is upgraded 2.5.6->2.5.7.
6. unbound package (used in stubby) is upgraded 1.15.0->1.16.0.
7. curl package is upgraded 7.82.0->7.83.1.
8. libubox package is upgraded 2021-11-20->2022-05-15.
9. ubus package is upgraded 2022-02-28->2022-06-01.
10. sysstat package is upgraded 12.5.6->12.6.0.
11. logrotate package is upgraded 3.19.0->3.20.1.
12. OpenSSL 0.9.8 package is upgraded 0.9.8p->0.9.8zg.
13. nano package is upgraded 6.2->6.3.
14. Slight boost adding '-ftree-vectorize' and '-fvect-cost-model=unlimited' flags to compilation options (speed up).
15. proftpd package is upgraded 1.3.7c->1.3.7d.
16. amule: add UPX packing.
17. Upgrade WebGUI LG_VERSION.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.
 
Continuation of

. . .

New version of my custom firmware build: 1.0.2.95SF.
...

3. OpenSSL v. 1.1.1 package is upgraded 1.1.1n->1.1.1o (fixing CVE-2022-1292, score 9.8, Critical).
12. OpenSSL 0.9.8 package is upgraded 0.9.8p->0.9.8zg.


...

Voxel.
I am wondering: why are there two different versions of OpenSSL present/needed?
Works great anyway!
Regards
 
I am wondering: why are there two different versions of OpenSSL present/needed?
Works great anyway!
Regards

Oh, I'm even afraid to say, but three different versions...

The first one (version 0.9.8) is for running the rather obsolete fbwifi program (don't worry too much, it is not used explicitly w/o your explicite intervention), the second version 1.0.2 for running services like ReadyCLOUD, https, and the like (used by NG/DNI because of outdated SDK they have to use), and the third version 1.1.1 is my attempt to go more modern by avoiding significant security vulnerabilities for several services, such as OpenVPN, DoH with TLS 1.3 etc.

Voxel.
 
Best firmware for R7800 provide better security and faster speed, and the ONLY reason I still staying on R7800 as main router.

Yep. I have an asus ax-82u with faster wifi and supports some LACP.... but I can't have the tricked out DNS configuration that I can do with voxel's version, so I keep the r7800 as my main

Anyway, I upgraded from 1.0.2.94.4. I did get the warning about .95 being older.

seems fine so far! Thanks for the work!

as usual I had to restore my one line dnsmasq config edit to restore using the full dnsmasq from here:
(5) R7800-Voxel replacing stock DHCP or DNS or both? | SmallNetBuilder Forums (snbforums.com)
 
Oh, I'm even afraid to say, but three different versions...

The first one (version 0.9.8) is for running the rather obsolete fbwifi program (don't worry too much, it is not used explicitly w/o your explicite intervention), the second version 1.0.2 for running services like ReadyCLOUD, https, and the like (used by NG/DNI because of outdated SDK they have to use), and the third version 1.1.1 is my attempt to go more modern by avoiding significant security vulnerabilities for several services, such as OpenVPN, DoH with TLS 1.3 etc.

Voxel.
Thank you for this. I've been remediating openssl at work and had completely neglected it at home.
 
For some reason I can't get this installed. It uploads, a page flashes and then takes me back to the Firmware Update page.
On 1.0.2.94.4SF.

Edit: Changed to a different browser and it worked, but gave me a warning about it being an older firmware than the one already installed.
 

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top