Voxel Custom firmware build for R9000/R8900 v. 1.0.4.67HF

[Voxel]

Continuation of:

https://www.snbforums.com/threads/custom-firmware-build-for-r9000.40125/
. . .
https://www.snbforums.com/threads/custom-firmware-build-for-r9000-r8900-v-1-0-4-65hf.82440/
https://www.snbforums.com/threads/custom-firmware-build-for-r9000-r8900-v-1-0-4-66hf.83325/

New version of my custom firmware build: 1.0.4.67HF.

Changes (vs 1.0.4.66HF):

1. Toolchain: Go is upgraded 1.19.5->1.20.2.
2. OpenSSL v. 1.1.1 package is upgraded 1.1.1s->1.1.1t (fixing CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286).

https://www.openssl.org/news/openssl-1.1.1-notes.html​

CVE-2023-0286, High severity.​

CVE-2023-0215, Moderate severity.​

CVE-2022-4450, Moderate severity.​

CVE-2022-4304, Moderate severity.​

3. OpenSSL 1.0.2: create and add patches to fix CVE-2023-0215/CVE-2023-0286.

https://nvd.nist.gov/vuln/detail/CVE-2023-0215​

(score 7.5, High)​

https://nvd.nist.gov/vuln/detail/CVE-2023-0286​

(score 7.4, High)​

4. e2fsprogs package is upgraded 1.46.5->1.46.6 (fixing CVE-2022-1304).

https://nvd.nist.gov/vuln/detail/cve-2022-1304​

(score 7.8, High)​

5. OpenVPN is upgraded 2.5.8->2.5.9.
6. DNSCrypt Proxy v.2 is upgraded 2.1.2->2.1.4.
7. dbus package is upgraded 1.14.4->1.14.6.
8. curl package is upgraded 7.87.0->7.88.1.
9. iperf3 package is upgraded 3.12->3.13.
10. proftpd package is upgraded 1.3.7f->1.3.8.
11. ethtool package is upgraded 6.1->6.2.
12. uci package is upgraded 2021-10-22->2023-03-05.
13. ca-certificates package is upgraded 20211016->20230311.
14. sqlite (minidlna) package is upgraded 3400000->3410100.
15. netatalk package is upgraded 2.2.6->3.1.14.

To disable AppleFilingProtocol/TimeMachine/netatalk at all use the following commands:​

nvram set noafp=1​

nvram commit​

reboot​

16. netatalk-utility package is upgraded 1.0.0->1.0.1 (needed to support netatalk 3.1.4).
17. Add 'less' package, disable busybox 'less'.
18. util-linux: add 'dmesg' utility instead of busybox version.
19. Remove libltdl (unused).
20. Optimize router performance if 802.11ad Wi-Fi is disabled.
21. dnsmasq: add changes from the stock V1.0.5.42.
22. samba-scripts: change 'update_user' script.
23. ethtool: split into 'tiny' and 'full' options and choose 'ethtool-tiny' in default config.
24. '-O3' optimization for part of kernel components (kernel level).
25. Host tools: upgrade e2fsprogs to 1.46.6 (fixing CVE-2022-1304).

https://nvd.nist.gov/vuln/detail/cve-2022-1304​

(score 7.8, High)​

26. Host tools: upgrade libtool to 2.4.7.
27. Host tools: change Makefile to use new libtool.

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[Kitsap]

Voxel,

When I look at the change log, you have been busy!

Dirty update from 1.0.4.66.2HF to 1.0.4.67HF. Smooth as usual.

Thank you.

 

[Jauger]

20. Optimize router performance if 802.11ad Wi-Fi is disabled. Very Interesting....

 

[Kitsap]

20. Optimize router performance if 802.11ad Wi-Fi is disabled. Very Interesting....

Would love to hear some details about this.....

 

[Voxel]

20. Optimize router performance if 802.11ad Wi-Fi is disabled.

There was a problem (and it is still present in the latest stock firmware): even if the 802.11ad radio is turned off in the router settings, it performed an endless cycle of 802.11ad checks, running at least ten commands every second, which are completely unnecessary because of 802.11ad is turned off.

In addition the special kernel module for 802.11ad was always loaded and generated a huge number of system messages.

All of this led to degradation of the router's performance. Now this is not performed in the case of 802.11ad is OFF.

So

20. Optimize router performance if 802.11ad Wi-Fi is disabled.

Voxel.

 

[Kitsap]

With the external Wi-Fi on/off switch is in the off state, I note the option to enable/disable the 802.11ad is greyed out as expected. However, when the external Wi-Fi on/off switch is in the on state, the option line is completely gone. In other words, when the external on/off switch is on the 802.11ad radio is on full time. No option to remove the enable check mark like for the 2.4 GHz and 5 GHz radios. See attached images.

Is this correct?

 

[Panner]

On mine it is in "Advanced-Advanced Settings-Wireless Settings" and is always there even when it is not shown on the other wireless settings pages (Basic or Advanced-Setup.

 

[Voxel]

With the external Wi-Fi on/off switch is in the off state, I note the option to enable/disable the 802.11ad is greyed out as expected. However, when the external Wi-Fi on/off switch is in the on state, the option line is completely gone. In other words, when the external on/off switch is on the 802.11ad radio is on full time. No option to remove the enable check mark like for the 2.4 GHz and 5 GHz radios. See attached images.

I never use the physical button to switch the Wi-Fi. As @Panner correctly noted, it is better to use advanced Wireles settings page

Voxel.

 

[Kitsap]

Thank you both. I have learned something. I am now using the Advanced Setup Wireless Settings page to disable the wireless radios.

I used the manual on/off switch because it was convenient, but it did control all three radios.

 

[kamoj]

Thank you everyone sharing information!
If the WiFi is offed by hard switch while (re-)installing new firmware, the wifi (can) get corrupt!
I've seen this several times. That's one of the things the addon tries to fix.

 

[Panner]

Updated earlier this week from 66.2SF to 67SF. Dirty ipdate and running well since then (with Kamoj V5.5b27 installed)

 

[Jackln]

Upgraded from 66.2 to 67 and it's working great in R9000. Thank you.