Voxel Custom firmware build for Orbi LBR20 v. 9.2.5.2.43SF-HW

[Voxel]

Continuation of:

https://www.snbforums.com/threads/c...bi-lbr20-v-9-2-5-2-24sf-hw.73983/#post-708327
. . .
https://www.snbforums.com/threads/custom-firmware-build-for-orbi-lbr20-v-9-2-5-2-41sf-hw.87289/
https://www.snbforums.com/threads/custom-firmware-build-for-orbi-lbr20-v-9-2-5-2-42sf-hw.88721/

New version of my custom firmware build: 9.2.5.2.43SF-HW.

Changes (vs 9.2.5.2.42SF-HW):

1. Toolchain: Go is upgraded 1.21.6->1.22.2.
2. expat package is upgraded 2.5.0->2.6.2 (fixing CVE-2023-52425, CVE-2023-52426, CVE-2024-28757).

https://nvd.nist.gov/vuln/detail/CVE-2023-52425​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-52426​

(score 5.5, Medium)​

https://www.suse.com/security/cve/CVE-2024-28757.html​

(score 7.5, High)​

3. unbound package (used in stubby) is upgraded 1.19.0->1.19.3 (fixing CVE-2023-50387, CVE-2023-50868, CVE-2024-1931).

https://nvd.nist.gov/vuln/detail/CVE-2023-50387​

(score 7.5, High)​

https://access.redhat.com/security/cve/CVE-2023-50868​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2024-1931​

(score 7.5, High)​

4. dropbear package is upgraded 2022.83->2024.84 (fixing CVE-2023-48795).

https://nvd.nist.gov/vuln/detail/CVE-2023-48795​

(score 5.9. Medium)​

5. bind package is upgraded 9.18.21->9.18.25 (fixing CVE-2023-4408, CVE-2023-5517, CVE-2023-5679, CVE-2023-50387, CVE-2023-50868, CVE-2023-50387).​

https://nvd.nist.gov/vuln/detail/CVE-2023-4408​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-5517​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-5679​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-50387​

(score 7.5, High)​

https://access.redhat.com/security/cve/CVE-2023-50868​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-50387​

(score 7.5, High)​

6. libuv: add patch to fix CVE-2024-24806.

https://nvd.nist.gov/vuln/detail/CVE-2024-24806​

(score 7.3, High)​

7. nghttp2 package is upgraded 1.59.0->1.61.0.

https://nvd.nist.gov/vuln/detail/CVE-2024-28182​

(score 5.3, Medium)​

8. lua: add patch to fix CVE-2014-5461.

https://www.suse.com/security/cve/CVE-2014-5461.html​

(score 5.0. Medium)​

9. OpenVPN is upgraded 2.6.8->2.6.10.
10. lighttpd package is upgraded 1.4.73->1.4.75.
11. curl package is upgraded 8.6.0->8.7.1.
12. ipset package is upgraded 7.19->7.21.
13. wget package is upgraded 1.21.4->1.24.5.
14. util-linux package is upgraded 2.39.3->2.39.4.
15. coreutils package is upgraded 9.4->9.5.
16. gettext-full package is upgraded 0.22.4->0.22.5.
17. libcap-ng package is upgraded 0.8.4->0.8.5.
18. ca-certificates package is upgraded 20230311->20240203.
19. Host tools: upgrade UPX to 4.2.3.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[Lbrfan]

Thank you for providing what netgear took from us (telnet) and made even better. LBR20 is such a powerful 4G router with your firmware.

 

[nordicboy]

@Voxel Thank You!!!!

 

[HumboldtDryGoods]

Greetings, I came here to get my LBR20 up and running, I have done so, I thank you Voxel, good work, very stable and I need the device to send me SMS alerts from other devices on my network and I can do that with the included sms-tool, my question is this, why is the SMS front end for the web not send enabled nor have message clearing buttons? I am noob at PHP but can I just add it with some work?
Is there any place I should start to understand what platform specific things I need to know about running programs on the router and using them remotely

*edit : also I wondered what I would need to do to encapsulate the json output of the MMS and turn it in to an image or something on the web front end? Does the router have to be able to handle the MMS contents or can it be passed to the browser to render or play

 

[Voxel]

Greetings, I came here to get my LBR20 up and running, I have done so, I thank you Voxel, good work, very stable and I need the device to send me SMS alerts from other devices on my network and I can do that with the included sms-tool, my question is this, why is the SMS front end for the web not send enabled nor have message clearing buttons? I am noob at PHP but can I just add it with some work?
Is there any place I should start to understand what platform specific things I need to know about running programs on the router and using them remotely

Hi,

Unfortunately, some of the GPL source code from NETGEAR is not available. So I have to use binary programs for Web GUI with their CGI processor.

So I have done what is possible to read SMS from the Web GUI, but there is no way to do something for sending SMS. Only by sms-tool.

Same for processing MMS.

P.S. It doesn't use PHP, but only its own closed for modification binary CGI processor.

Sorry,
Voxel.