Voxel Custom firmware build for Orbi RBK50/RBK53 (RBR50, RBS50) v. 9.2.5.2.25SF-HW

[Voxel]

Continuation of

https://www.snbforums.com/threads/custom-firmware-build-for-orbi-rbk50-v-2-5-0-42sf-hw.60308/
. . .
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-23sf-hw.79922/
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-24sf-hw.80816/

New version of my custom firmware build: 9.2.5.2.25SF-HW.

Changes (vs 9.2.5.2.24SF-HW):

1. Toolchain: Go is upgraded 1.18.6->1.18.7.
2. zlib: add patch to fix CVE-2022-37434.

https://nvd.nist.gov/vuln/detail/CVE-2022-37434​

(score 9.8, Critical)​

3. expat package is upgraded 2.4.8->2.5.0 (fixing CVE-2022-40674, CVE-2022-43680).

https://nvd.nist.gov/vuln/detail/CVE-2022-40674​

(score 9.8, Critical)​

https://nvd.nist.gov/vuln/detail/CVE-2022-43680​

(score 7.5, High)​

4. unbound package (used in stubby) is upgraded 1.16.2->1.17.0 (fixing CVE-2022-3204).

https://nvd.nist.gov/vuln/detail/CVE-2022-3204​

(score 7.5, High)​

5. stubby package is upgraded 0.4.0->0.4.2.
6. curl package is upgraded 7.85.0->7.86.0.
7. lighttpd package is upgraded 1.4.65->1.4.66.
8. ethtool package is upgraded 5.19->6.0.
9. nghttp2 package is upgraded 1.49.0->1.50.0.
10. bind package is upgraded 9.18.6->9.18.8.
11. libnl-tiny package is upgraded 2022-05-17->2022-05-23.
12. popt package is upgraded 1.18->1.19.
13. libreadline package is upgraded 8.1.2->8.2.
14. gettext-full package is upgraded 0.21->0.21.1.
15. iperf3 package is upgraded 3.11->3.12.
16. Host tools: upgrade xz to 5.2.7.
17. Host tools: upgrade mkimage/u-boot to 2022.10

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[TeamZero]

Thanks again as always!!!

 

[Dustin278]

Top notch Voxel! Running as smooth as all your other releases!

 

[RhythmMachine]

First off, after the long period I went through of nearly throwing my Orbi system through a window (one of mine, simply because I don't live close enough to Netgear to access one of theirs), thank you for providing stability that let me reliably work from home through the pandemic.

I got locked out of my Orbi admin menu for using the wrong admin password (and the security questions somehow didn't seem to work), and I didn't pay enough attention to the "factory reset doesn't work with Voxel firmware" warning you have right up front in the Read Me. Sooo.... been going through the process of using tftp to restore my system so I can load your firmware on again.

I have a backup config file that has a lot of my settings in it (DHCP reservations, subnet, forwarded ports), but when I tried to restore my settings using that file, I think it also brought back the same admin credentials that I don't know (the credentials I just used to set it up again didn't work), so I had to repeat the process again.

Is there a way to either apply my settings from the config without it also reverting to the old credentials, or parsing the file so I can apply my settings again manually?

 

[R. Gerrits]

Is there a way to either apply my settings from the config without it also reverting to the old credentials, or parsing the file so I can apply my settings again manually?

I don't know the format of that backup file.

But what if you connect to the orbi via ssh, then restore the backup and then immediately change the password again via ssh?

Or alternatively, configure an SSH-key -> this way you should even be able to login via ssh without knowing the password. And then you can reset the password via ssh.

But I'm not exactly sure on how to change the password via SSH.
Perhaps before restoring the backup, do "nvram get http_passwd" and copy the value.
and then after the restore, do "nvram set http_passwd=the_value_you_copied" followed by "nvram commit"
(also not sure if you should set http_passwd_digest to that same value)

 

[dakial]

I'm having an issue with the Firmware Update page won't load. It simply stays in the "please wait a moment..." eternally.
oddly enough I can access all the other pages, just the firmware update one not. Anyone experienced this and/or know how to solve it?

EDIT: Nevermind, it was a browser bug (firefox), it ran normally on chrome.