Release Asuswrt-Merlin 386.13 / 386.13_2 is now available for AC models

[RMerlin]

Asuswrt-Merlin is now available for all supported Wifi 5 devices.

EDIT: 26-April-2024 - 386.13_2 has been released for the RT-AC86U and GT-AC2900, addressing a security issue in IPSEC (which isn't supported by the other Wifi 5 models).

Changes since 386.13_0:

386.13_2 (26-Apr-2024)
  - NOTE: This release is only available for the RT-AC86U
          and GT-AC2900.
  - UPDATED: strongswan to 5.9.13 (fixes CVE-2023-41913)

Changes since 386.12_6:

386.13 (7-Apr-2024)
  - NOTE: all the models supported by Asuswrt-Merlin on the
          386_xx series are now officialy on Asus' End of Life
          list, which means unless there are new major security
          issues, no new updates will be provided by Asus.

          Asuswrt-Merlin will tentatively attempt to continue to
          provide updates and fixes until the end of 2024, at which
          point all the 386_xx models will no longer be actively
          maintained.

  - UPDATED: openvpn to 2.6.10.
  - UPDATED: miniupnpd to 2.3.6.
  - UPDATED: tor to 0.4.7.16.
  - UPDATED: OUI database used by networkmap and the webui.
  - CHANGED: QOS/Classification page can now resolve local IPv6
             addresses.
  - CHANGED: Display tracked connections on the QoS/Classification
             page even if QoS isn't set to Adaptive QoS.
  - CHANGED: Prevent the use of Apple's iCloud Private Relay
             when enabling "Prevent client auto DoH".
  - CHANGED: NAT Passthrough page - removed the "Enabled + NAT
             Helper" option as the firewall no longer blocks
             traffic when set to disabled.  This is back to the
             former behaviour, where this setting only controls
             whether or not to load the NAT helper.  You might
             need to readjust that setting if you had previously
             changed it.
  - CHANGED: SIP, RTSP and H323 ALG (NAT helpers) are now
             disabled by default, as these legacy features tend
             to create issues with modern VoIP setups.
             This change will only apply to people doing a
             factory default reset of their router.
  - FIXED: CVE-2023-48795 in dropbear.
  - FIXED: Various issues with the QOS Classification page.
  - FIXED: UPNP leases without a description would not appear
           on the Forwarded Ports page.
  - FIXED: web server crashing when entering certain settings on
           the Network Filter Page.  Bypassed bug in closed source
           validation code for now.
  - FIXED: Concurrent cronjob changes through cru could cause
           collisions, leading to missing jobs (dave14305)
  - FIXED: CVE-2023-5678 & CVE-2024-0727 in openssl (backport from
           Ubuntu by RSDNTWK)

As indicated, all these models are now officially on Asus' end of life list. This means they will no longer provide updates for them, unless a critical issue happens, requiring an exceptional firmware release.

For Asuswrt-Merlin, the plan is currently to attempt at providing updates for these models until the end of 2024, at which point I will stop support and development for the entire 386_xx firmware series and its associated models.


Please keep the feedback in this thread about this specific release.

Downloads are here.
Changelog is here.

 

[RMerlin]

Reserved post.

 

[kernol]

All good so far on production RT-AC86U.
Logs are clean and everything stable.
MANY thanks for continuing to support these EOL routers.
Will be retiring this one before calendar year end - to enjoy faster WIFI speeds and general throughput.

 

[Gar]

Good on my AC66B1. Thanks again.

 

[HorseCalledHorse]

All good so far on production RT-AC86U.
Logs are clean and everything stable.
MANY thanks for continuing to support these EOL routers.
Will be retiring this one before calendar year end - to enjoy faster WIFI speeds and general throughput.

I got a good deal on an RT-AX86U Pro and swapped that out with my AC86U yesterday. I've been very impressed with the AX86U Pro so far but plan on using the AC86U as a wired access point. I might even try setting it up as an AIMesh node. Thanks to RMerlin, it'll still have years of service ahead!

 

[heysoundude]

Interesting: I just did my weekly manual check through amtm and nothing showed up. The GUI notification isn't lit either.
I guess that means it has seen the news its end is nigh as my router from my browsing for a new AX model and has given up ;-p

 

[DaveRS]

@RMerlin

Thanks for your continued support! Appreciate it.

p.s the changelog link is incorrect

 

[hjzwiers]

I updated the router though the upload, but now I can't access the router with my username and password. Any idea's?

 

[bennor]

I updated the router though the upload, but now I can't access the router with my username and password. Any idea's?

What router are you using?
What is the specific error message you are receiving?
Have you tried a different web browser?
Have you tried clearing the web browser's cache?
Are you using a computer connected directly to the router's LAN port using Ethernet?

 

[hjzwiers]

I updated the AC86U. I cleared the cache, no effect. I ran connected by ethernet cable, no effect. The error is invalid username or password. No tricks to get into the router, if I do a reset all my settings will be gone :-(

 

[ColinTaylor]

I updated the AC86U. I cleared the cache, no effect. I ran connected by ethernet cable, no effect. The error is invalid username or password. No tricks to get into the router, if I do a reset all my settings will be gone :-(

What was the firmware version before you updated?

Did you have SSH access to the router enabled. Does that still work?

 

[hjzwiers]

I did a reset (WPS way). I though it was quickest as I found a file with the configs. Had to repower all the nodes ... strange, this never happened before.

 

[KrypteX]

@RMerlin I very much appreciate this update. Seems to be better than the 386.12 series.

 

[Kitsap]

AC68U, dirty update from 386.12 on an Ethernet connected PC using Firefox. All smooth.

I am sorry to see this project wind down on this router, it has been a good run. There is only so much room in the bottom of my closet for old hardware. Need to reserve space for a new RT-AX88U Pro box.

Merlin, once again, thank you for your efforts.

 

[heysoundude]

Just over 12h of uptime since upgrade, smooth as silk.

 

[Gar]

Just over 12h of uptime since upgrade, smooth as silk.

Wait until the eclipse, things supposedly go screwy...

 

[DrTurk]

AC86U, dirty update from 386.12. No problems, so far.

Merlin, thanks for all you do.

 

[Squall Leonhart]

not sure its accurate to say that "Modern VOIP doesn't require SIP Passthrough", its very much required still on gigaset voip stations.

 

[heysoundude]

Wait until the eclipse, things supposedly go screwy...

Not the router…but I did happen to be at my local Costco just after the eclipse and the guy manning the cellphone kiosk was mentioning to whomever he was chatting with that his phone’s clock stopped during the peak darkness.

 

[Routerguyuk]

An Bug is still happening on this latest Firmware:386.13, where the firewall UI webpage https://{router IP}/Advanced_URLFilter_Content.asp does not save entries after clicking apply. There is no error reported to the user, rather it silently fails. This means it is impossible to add entries to the firewall via this UI.

I have checked with 3 browsers. Firefox (all add-ons disabled & incognito). Chrome latest private browsing mode, and Edge browser browsing mode.
All 3 will allow the entry of a value, but the issue is on submission of the form. The changes were not applied / saved.

RT-AC88U