XT8 firmware 45879

[in2ndo]

Anybody update their XT8’s to 3.0.0.4.386_45879 yet?
Any issues ?

 

[Mio Ozaeta]

Does anyone have the Release Notes for this latest build?

 

[karma]

when you do a check for firmware in the router and click on the new version (without installing it of course) this shows up, oddly though i don't see anything on the support pages about this newer version. and no, i haven't tried it.

Firmware version 3.0.0.4.386_45879
- Release Note -

Bug Fixes and Enhancements:
1. Improve system stability and fix GUI issue
2. This version includes several vulnerability patches.
BusyBox
- CVE-2016-2148
- CVE-2016-6301
- CVE-2018- 1000517

cURL
- CVE-2020-8169
- CVE-2019-5481
- CVE-2019-5482
- CVE-2018-1000120
- CVE-2018- 1000300
- CVE-2018-16839

Lighttpd
- CVE-2018-19052

Linux
- CVE-2020-14305
- CVE-2020-25643
- CVE-2019-19052

lldpd
- CVE-2020-27827

Avahi
- CVE-2017-6519

hostapd
- CVE-2021-30004
- CVE-2019-16275

OpenVPN
- CVE-2020-11810
- CVE-2020-15078

wpa
- CVE-2021-30004
- CVE-2021-27803
- CVE-2019-11555
- CVE-2019-9499
- CVE-2019-9498
- CVE-2019-9497
- CVE-2019-9496
- CVE-2019-9495
- CVE-2019-9494
- CVE-2017-13086
- CVE-2017-13084
- CVE-2017-13082
- CVE-2016-4476
- CVE-2015-8041

3 .Fixed DoS vulnerability from spoofed sae authentication frame.
Thanks to Efstratios Chatzoglou, University of the Aegean, Georgios Kambourakis, European Commission
at the European Joint Research Centre, and Constantinos Kolias, University of Idaho.

 

[Kapet]

https://dlcdnets.asus.com/pub/ASUS/wireless/ZenWiFi_XT8/FW_ZENWIFI_XT8_300438645879.zip

 

[cbailez]

Link doesn't work.

 

[Kapet]

Link doesn't work.

Yes, it doesn't work now. Previously worked ...

 

[cbailez]

I am unable to update my 2 nodes. Do you have a local copy that you can upload. I was only able to update the main router from the router IP address.

 

[Kapet]

I am unable to update my 2 nodes. Do you have a local copy that you can upload. I was only able to update the main router from the router IP address.

Strange ... I updated my router and node from the web interface, no problem ...

 

[cbailez]

I have them in AP mode. My main router is a Ubiquiti ER4

 

[ThatGuyinNC]

Strange ... I updated my router and node from the web interface, no problem ...

Any issues with the update so far?

 

[Kapet]

Any issues with the update so far?

I didn't have any problems. I pressed one "Refresh" button in the web interface of the router, and both the router and the node were updated at once. Then the router demanded to manually turn off and turn on the router and the node...
The "Google Assistant" item has appeared in the application "ASUS Router" on the smartphone in the settings. But he requires to open access to a remote connection to the router. I do not want to open such access yet. Therefore, I will not tell you how to use it ... Voice control of the router via a smartphone ...

 

[jmpr]

Some vulnerabilities are very old. Why the first firm (or any) didn't come with those patches applied?

 

[slrt]

The link from here is broken (404), and the routers don't see it anymore either.
Did Asus pull the upgrade?

 

[jmpr]

The link from here is broken (404), and the routers don't see it anymore either.
Did Asus pull the upgrade?

Not in mine:

 

[Kapet]

Не в моем:

View attachment 36583

Strange something is happening with Asus, with updates ...

 

[jmpr]

Strange something is happening with Asus, with updates ...

I'm in Spain. Perhaps updates are not pulled at the same time to prevent bandwith failures.

 

[Dodgydrains]

In another forum it was confirmed the link is broken, ASUS will fix it soon.

 

[jmpr]

In another forum it was confirmed the link is broken, ASUS will fix it soon.

Will wait for it being pulled in webui. I'm not in a hurry. Present firm is perfect. I would not update to this one, but it solves lots of security issues.

 

[kildare]

In another forum it was confirmed the link is broken, ASUS will fix it soon.

Currently it's no longer shown in the Asus download page, so likely it's not only a problem of a broken download link, but IMHO just a pulled bugged firmware.
Otherwise Asus had simply and easily corrected the missing link.

 

[crawfish]

They recently did this with my motherboard firmware as well, posting it, removing it, then restoring it a few days later. Not exactly confidence-inspiring, is it.