Voxel Custom firmware build for Orbi RBK50/RBK53 (RBR50, RBS50) v. 9.2.5.2.29SF-HW

[Voxel]

Continuation of

https://www.snbforums.com/threads/custom-firmware-build-for-orbi-rbk50-v-2-5-0-42sf-hw.60308/
. . .
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-26sf-hw.82463/
https://www.snbforums.com/threads/c...-v-9-2-5-2-27sf-hw-v-9-2-5-2-27-1sf-hw.83500/
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-28sf-hw.84485/

New version of my custom firmware build: 9.2.5.2.29SF-HW.

Changes (vs 9.2.5.2.28SF-HW):

1. Toolchain: Go is upgraded 1.20.3->1.20.5.
2. OpenSSL v. 1.1.1 package is upgraded 1.1.1t->1.1.1u (fixing CVE-2023-0466, CVE-2023-0465, CVE-2023-0464).

https://nvd.nist.gov/vuln/detail/CVE-2023-0466​

(score 5.3, Medium)​

https://nvd.nist.gov/vuln/detail/CVE-2023-0465​

(score 5.3, Medium)​

https://nvd.nist.gov/vuln/detail/CVE-2023-0464​

(score 7.5, High)​

3. lighttpd package is upgraded 1.4.69->1.4.71.
4. wget package is upgraded 1.21.3->1.21.4.
5. curl package is upgraded 8.0.1->8.1.2.
6. bind package is upgraded 9.18.13->9.18.15.
7. ethtool package is upgraded 6.2->6.3.
8. dbus package is upgraded 1.14.6->1.14.8.
9. e2fsprogs package is upgraded 1.46.6->1.47.0.
10. coreutils package (gnu-date) is upgraded 9.2->9.3.
11. less package is upgraded 608->633.
12. nghttp2 package is upgraded 1.52.0->1.54.0.
13. readline: split to 'libreadline' and 'libhistory', disable 'libhistory' in 'defconfig' (unused).
14. Host tools: upgrade e2fsprogs to 1.47.0.
15. Host tools: upgrade patchelf to 0.18.0.
16. Host tools: upgrade xz to 5.4.3.
17. Host tools: upgrade mkimage/u-boot to 2023.04.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[gssjshark]

Thanks @Voxel !!

 

[Cyph3r]

I attempted to update but received the following error:

"Warning! You are trying to download firmware with version v9.2.5.2.29SF-HW which is older than the firmware with version v9.2.5.2.27.1SF-HW you had. Do you want to continue?"

Is it ok to ignore this message?

 

[gssjshark]

I attempted to update but received the following error:

"Warning! You are trying to download firmware with version v9.2.5.2.29SF-HW which is older than the firmware with version v9.2.5.2.27.1SF-HW you had. Do you want to continue?"

Is it ok to ignore this message?

Yes, continue anyway. Ignore this message.

 

[gssjshark]

Just donated @Voxel! Just saw your message in the download file. Others please consider donating if you can. We need to keep the Voxel project alive!

 

[ddrum2000]

So ran into a big issue with me devices today. I have a RBR50 and 1 RBS50. Earlier today I tried to upgrade the firmware from Netgear stock firmware 2.7.5.4 to Voxel 9.2.5.29. Neither the satellite nor the router seemed to reboot correctly. I was able to nmrpflash back to Netgear stock firmware but I can't get anywhere on the satellite, the ring blinks white forever.

Any suggestions on how to successfully unbrick the satellite and then possibly upgrade to the Voxel firmware.

 

[gssjshark]

So ran into a big issue with me devices today. I have a RBR50 and 1 RBS50. Earlier today I tried to upgrade the firmware from Netgear stock firmware 2.7.5.4 to Voxel 9.2.5.29. Neither the satellite nor the router seemed to reboot correctly. I was able to nmrpflash back to Netgear stock firmware but I can't get anywhere on the satellite, the ring blinks white forever.

Any suggestions on how to successfully unbrick the satellite and then possibly upgrade to the Voxel firmware.

You need to downgrade your firmware by flashing official netgear 2.5.2.4, then flash voxel on top of that.

 

[ddrum2000]

Update since the last post. I got everything back to stock. When I try to downgrade an earlier firmware, Orbi makes me go through the full setup again. Ordinarily this wouldn't be a problem except that it take 5-10 min to load each setup page. Once I get through the setup, the Orbi works fine. This happens on 2.7.5.4 (current version) as well as 2.5.2.4. Do you know:
1 - why this takes so long to load each page through the setup. Yes I've factory reset it, tried both wired and wifi, etc.
2 - does it have to go through the setup each time?

Any other pointers? Thanks.

 

[gssjshark]

It shouldn’t take that long to load. TFTP the 2.5.2.4 firmware on the router and all satellites. Then factory reset all units by holding down the pin. Rerun initial setup. Then flash voxel firmware through Orbi UI to all units individually. Please make sure you disconnect the main router from internet modem until voxel firmware has been flashed on all units.

 

[Ender]

In my setup, lightttpd update seems to have issues. I have this rc.user file for recreating both ssh pubkey login and custom https cert (which has been working flawlessly so far):

#!/bin/sh
[ ! -r /mnt/ntgr/.ssh/authorized_keys ] || {
        [ -d /root/.ssh ] || mkdir -p /root/.ssh
        chmod 700 /root/.ssh
        cp -p /mnt/ntgr/.ssh/authorized_keys /root/.ssh/
}
[ ! -r /mnt/ntgr/certs/server.pem ] || {
        cp -p /mnt/ntgr/certs/server.pem /etc/lighttpd/certs/server.pem
        ln -f /etc/lighttpd/certs/server.pem /etc/lighttpd/certs/routerlogin.pem
        /etc/init.d/lighttpd restart
}
true

After the update to .29, lighttpd segfaults after the first https request. I've tried to run the daemon and here's the output:

root@RBR50:/etc/lighttpd# /usr/sbin/lighttpd -f /etc/lighttpd/lighttpd.conf -D
2023-06-18 12:08:22: (plugin.c.209) dlopen() failed for: /usr/lib/lighttpd/mod_h2.so File not found
2023-06-18 12:08:22: (mod_openssl.c.2575) ssl.cipher-list is deprecated.  Please prefer lighttpd secure TLS defaults, or use ssl.openssl.ssl-conf-cmd "CipherString" to set custom cipher list.
2023-06-18 12:08:22: (mod_openssl.c.2575) ssl.cipher-list is deprecated.  Please prefer lighttpd secure TLS defaults, or use ssl.openssl.ssl-conf-cmd "CipherString" to set custom cipher list.
Segmentation fault
root@RBR50:/etc/lighttpd#

ssl.cipher-list deprecation was already in .28 but the dlopen() failing is new with .29.

I hope this helps. Thanks in advance.

 

[Voxel]

I hope this helps. Thanks in advance.

Yes this helps. Thanks for reporting. Wait for a SnapShot fix.

Voxel.

 

[Voxel]

Wait for a SnapShot fix.

SnapShot version 9.2.5.2.29.1SF-HW is available.

Changes (vs 9.2.5.2.29SF-HW):

1. lighttpd: add 'mod_h2.so' module to fix WebGUI access by HTTPS.

Voxel.

 

[gssjshark]

SnapShot version 9.2.5.2.29.1SF-HW is available.

Changes (vs 9.2.5.2.29SF-HW):

1. lighttpd: add 'mod_h2.so' module to fix WebGUI access by HTTPS.

Voxel.

Thanks @Voxel

 

[Ender]

SnapShot version 9.2.5.2.29.1SF-HW is available.

Changes (vs 9.2.5.2.29SF-HW):

1. lighttpd: add 'mod_h2.so' module to fix WebGUI access by HTTPS.

Voxel.

Many thanks @Voxel . HTTPS in release .29.1 works flawlessly again.

 

[andykt]

Thanks as always @Voxel - Your builds have given my router and satellites a new life.

 

[maximum01]

I bricked my RBS50 , I tried tftp but says network not connected. I have a jtag, can anyone give me a few pointers?

 

[Voxel]

I bricked my RBS50 , I tried tftp but says network not connected. I have a jtag, can anyone give me a few pointers?

It is very difficult to brick RBR/RBS. IMO you should use only TFTP.

Try to follow the procedure from this post:

Voxel - Custom firmware build for Orbi RBK50/RBK53 (RBR50, RBS50) v. 9.2.5.2.18SF-HW & v. 9.2.5.2.18.1SF-HW

Is there a data sheet/document/article/thread that basically outlines what functionality this firmware provides beyond the stock firmware? I see all the various Linux packages, yes, but does it all really mean at the end of the day? I was used to seeing stuff years ago about DD-WRT or Tomato...

www.snbforums.com

Voxel.

 

[maximum01]

Thank you,
This is what worked for me:
Setup the Ethernet port as described in the tftp article.
1. I started command prompt as administrator.
2. I setup tftp with the file RBS50 V2.7.5.4 I downloaded from netgear.
3. I pressed and held the reset button, while turning on the power switch. The light was solid red for a few seconds, then started flashing.
4. While still holding the reset, I hit the enter key and run the tftp, until it finished loading. I released the reset button when the file started loading.
5. Then I setup tftp with RBS50-V9.2.5.2.29.1SF-HW I downloaded from Voxel, turned off the power switch then repeated steps 3 and 4.

Everything is up to date and working perfect.
Thank you for the help!!!