Release Asus ZenWiFi XT8 - New Firmware: 3.0.0.4.386_45879 (2021-09-29)

[s0x]

Good morning everyone

Just received a prompt on the router to update to the firmware 3.0.0.4.386_45879, still not available on the ASUS Website it seems, but available on the following url:

https://dlcdnets.asus.com/pub/ASUS/wireless/ZenWiFi_XT8/FW_ZENWIFI_XT8_300438645879.zip

I won't be upgrading just now, maybe on the weekend.

Change Log:

Firmware version 3.0.0.4.386_45879
- Release Note -

Bug Fixes and Enhancements:
1. Improve system stability and fix GUI issue
2. This version includes several vulnerability patches.
BusyBox
- CVE-2016-2148
- CVE-2016-6301
- CVE-2018- 1000517

cURL
- CVE-2020-8169
- CVE-2019-5481
- CVE-2019-5482
- CVE-2018-1000120
- CVE-2018- 1000300
- CVE-2018-16839

Lighttpd
- CVE-2018-19052

Linux
- CVE-2020-14305
- CVE-2020-25643
- CVE-2019-19052

lldpd
- CVE-2020-27827

Avahi
- CVE-2017-6519

hostapd
- CVE-2021-30004
- CVE-2019-16275

OpenVPN
- CVE-2020-11810
- CVE-2020-15078

wpa
- CVE-2021-30004
- CVE-2021-27803
- CVE-2019-11555
- CVE-2019-9499
- CVE-2019-9498
- CVE-2019-9497
- CVE-2019-9496
- CVE-2019-9495
- CVE-2019-9494
- CVE-2017-13086
- CVE-2017-13084
- CVE-2017-13082
- CVE-2016-4476
- CVE-2015-8041

3 .Fixed DoS vulnerability from spoofed sae authentication frame.
Thanks to Efstratios Chatzoglou, University of the Aegean, Georgios Kambourakis, European Commission
    at the European Joint Research Centre, and Constantinos Kolias, University of Idaho.

 

[scootertramp]

Good morning everyone

Just received a prompt on the router to update to the firmware 3.0.0.4.386_45879, still not available on the ASUS Website it seems, but available on the following url:

https://dlcdnets.asus.com/pub/ASUS/wireless/ZenWiFi_XT8/FW_ZENWIFI_XT8_300438645879.zip

I won't be upgrading just now, maybe on the weekend.

Change Log:

Firmware version 3.0.0.4.386_45879
- Release Note -

Bug Fixes and Enhancements:
1. Improve system stability and fix GUI issue
2. This version includes several vulnerability patches.
BusyBox
- CVE-2016-2148
- CVE-2016-6301
- CVE-2018- 1000517

cURL
- CVE-2020-8169
- CVE-2019-5481
- CVE-2019-5482
- CVE-2018-1000120
- CVE-2018- 1000300
- CVE-2018-16839

Lighttpd
- CVE-2018-19052

Linux
- CVE-2020-14305
- CVE-2020-25643
- CVE-2019-19052

lldpd
- CVE-2020-27827

Avahi
- CVE-2017-6519

hostapd
- CVE-2021-30004
- CVE-2019-16275

OpenVPN
- CVE-2020-11810
- CVE-2020-15078

wpa
- CVE-2021-30004
- CVE-2021-27803
- CVE-2019-11555
- CVE-2019-9499
- CVE-2019-9498
- CVE-2019-9497
- CVE-2019-9496
- CVE-2019-9495
- CVE-2019-9494
- CVE-2017-13086
- CVE-2017-13084
- CVE-2017-13082
- CVE-2016-4476
- CVE-2015-8041

3 .Fixed DoS vulnerability from spoofed sae authentication frame.
Thanks to Efstratios Chatzoglou, University of the Aegean, Georgios Kambourakis, European Commission
    at the European Joint Research Centre, and Constantinos Kolias, University of Idaho.

 

[scootertramp]

Took the plunge and updated to 3.0.0.4.386_45879 last night around 11PM EDT.
So far all is quite.

 

[Asuk78]

just wondering, if its me or the link isn't working ?

 

[s0x]

just wondering, if its me or the link isn't working ?

It seems the file was taken down..

 

[Smokey613]

Mine only shows 43181 now for an update. This morning it showed 45879. I guess they had issues with it. I am staying with 42095 for now.

 

[mrbill]

I took the plunge and 45879 seems to have resolved frequent drops on some older devices. Also on the positive side, our main Roku player has not experienced any lag/buffering as it did under 43181. I'll keep my fingers crossed, but looks to be a huge improvement for me.

 

[Smokey613]

Too bad 45879 appears to no longer be available.

 

[s0x]

I took the plunge and 45879 seems to have resolved frequent drops on some older devices. Also on the positive side, our main Roku player has not experienced any lag/buffering as it did under 43181. I'll keep my fingers crossed, but looks to be a huge improvement for me.

The builds are incremental right? Despite released for different routers. I "built" the "change log" in

https://pastebin.com/3w7j3PyX

, and if so the changes are more than what's on this version changelog.

Too bad 45879 appears to no longer be available.

I kept the download from yesterday if you want to try it. I'm not responsible if something breaks tho.

 

[scootertramp]

45879 is back on ASUS dowload site this morning.

Version 3.0.0.4.386.45879
2021/09/30 55.65 MBytes

 

[Gustour]

45879 is back on ASUS dowload site this morning.

Version 3.0.0.4.386.45879
2021/09/30 55.65 MBytes

But 404 Not found if you click on

 

[s0x]

No longer listed on the regional PT website as well. Still up on the global Asus site, but I guess it'll be pulled off the list too.

 

[ninjabob]

Loaded last night and thus far no issues - early days.

 

[cbailez]

The builds are incremental right? Despite released for different routers. I "built" the "change log" in

https://pastebin.com/3w7j3PyX

, and if so the changes are more than what's on this version changelog.



I kept the download from yesterday if you want to try it. I'm not responsible if something breaks tho.

Do you still have the file? Only my main node got the update and the other 2 have the older firmware 43181. Would you be able to share?

 

[cbailez]

Thanks a million! I appreciate it!

 

[s0x]

New release, posted by @Lars https://www.snbforums.com/threads/asus-zenwifi-xt8-new-firmware-3-0-0-4-386_45898.75102/