Jan 28th: 380.69_2 released:
Asuswrt-Merlin 380.69_2 is now available for all supported models.
This is a bugfix release for the legacy 380 codebase. New features are no longer getting added to the 380.xx releases, as primary development was shifted to the New Gen series (382.xx and higher).
Highlights of changes since 380.68_4:
Please see the changelog for the details.
Downloads are here.
Changelog is here.
Code:
- CHANGED: Quantenna watchdog is less likely now to
incorrectly assume the QTN CPU has crashed
(which can lead to router reboots). (RT-AC87U)
- FIXED: IE11 field validation issues on OpenVPN and
DHCP pages.
- FIXED: Router crash when importing an OpenVPN certificate
longer than 3499 characters (the supported limit)
- FIXED: Users were allowed to enter invalid characters on
some of the OpenVPN client page fields.
- FIXED: CVE-2018-5999 in httpd (backport from 384_10007)
- FIXED: CVE-2018-5721 in httpd (Merlin & theMIROn)
Asuswrt-Merlin 380.69_2 is now available for all supported models.
This is a bugfix release for the legacy 380 codebase. New features are no longer getting added to the 380.xx releases, as primary development was shifted to the New Gen series (382.xx and higher).
Highlights of changes since 380.68_4:
- Updated wireless SDK for the RT-N66U and RT-AC66U, fixing KRACK vulnerability in repeater and media bridge mode.
- Added option to disable Asus's NAT Tunnel (backported from 382)
- Updated odhcp6c, with fixes for some ISPs with broken support.
- Updated libogg to 1.3.3, libvorbis to 1.3.5, openssl to 1.0.2n and tor to 0.2.9.14.
- Also updated wget to 1.19.2, fixing connectivity with TLS 1.2 servers.
- Samba security fixes for CVE-2017-15275, CVE-2017-12163 and CVE-2017-12150, backported from upstream.
- DNSFilter rules will no longer overrule DNS rules used by OpenVPN clients while they are in Exclusive mode.
Please see the changelog for the details.
Downloads are here.
Changelog is here.
Last edited: