Release RT-AC86U Version 3.0.0.4.384.82072

[OzarkEdge]

Some models (and firmware versions) do have auto-update enabled.

Can the user switch/SSH that OFF?

OE

 

[RMerlin]

Can you be more specific

It varies between firmware releases (in the past, sometimes they enabled, then disabled it between releases). As of 384_81992, these models have auto update enabled:

merlin@ubuntu-dev:~$ cat asuswrt.384-81992-ac86/release/src-rt/target.mak | grep FORCE_AUTO_UPGRADE

export RT-AC88U_BASE := IPV6SUPP=y HTTPS=y ARM=y BCM57=y AUTODICT=y BBEXTRAS=y USBEXTRAS=y EBTABLES=y SAMBA3="3.6.x" MEDIASRV=y MODEM=y PARENTAL2=y ACCEL_PPTPD=y PRINTER=y WEBDAV=y SMARTSYNCBASE=y USB="USB" GRO=y APP="installed" PROXYSTA=y DNSMQ=y SHP=y BCMWL6=y BCMWL6A=y TUNEK="n" BCM5301X=y DISK_MONITOR=y BTN_WIFITOG=y OPTIMIZE_XBOX=y ODMPID=y LED_BTN=y BCMSMP=y XHCI=y DUALWAN=y REPEATER=y NEW_USER_LOW_RSSI=y OPENVPN=y TIMEMACHINE=y MDNS=y TFAT=y NTFS="tuxera" HFS="tuxera" VPNC=y BRCM_NAND_JFFS2=y JFFS2LOG=y BWDPI=y DUMP_OOPS_MSG=y LINUX_MTD="64" DEBUGFS=y TEMPROOTFS=y SSH=y EMAIL=y FRS_FEEDBACK=y SYSSTATE=y ADBLOCK=n ROG=y SSD=n STAINFO=y BCM5301X_TRAFFIC_MONITOR=y CLOUDCHECK=y BCM_RECVFILE=y CFEZ=y ERPTEST=n WIFILOGO=n FORCE_AUTO_UPGRADE=y FAKEID=n REBOOT_SCHEDULE=y MULTICASTIPTV=y QUAGGA=y ASPMD=n BCMEVENTD=n WLCLMLOAD=n BCM_MUMIMO=y YANDEXDNS=y LAN50=y ATCOVER=y GETREALIP=y NOTIFICATION_CENTER=y ALEXA=y IFTTT=y LETSENCRYPT=y SW_HW_AUTH=y NATNL_AICLOUD=y NATNL_AIHOME=y HD_SPINDOWN=y IPSEC=STRONGSWAN IPSEC_SRVCLI_ONLY=SRV AMAS=y ETHOBD=y DWB=y UTF8_SSID=y AVBLCHAN=y NVRAM_ENCRYPT=y

export HND-94908_BASE := HND_ROUTER=y PROFILE="94908HND" SW_HW_AUTH=y AMAS=y UTF8_SSID=y ETHOBD=y DWB=y SAMBA3="3.6.x" FORCE_AUTO_UPGRADE=y
export RT-AC85P := IPV6SUPP=y HTTPS=y MIPS32=r2 RALINK=y MT7621=y BBEXTRAS=y USBEXTRAS=y EBTABLES=y SAMBA3=y MEDIASRV=y PARENTAL2=y ACCEL_PPTPD=y  USB="USB"  AUTODICT=y LANWAN_LED=y SHP=y RTAC85P=y ODMPID=y DUAL_TRX=y LED_ALL=y NEW_RGDM=y RA_SKU_IN_DRV=y OPENVPN=y VPNC=y DUMP_OOPS_MSG=y DEBUGFS=y REBOOT_SCHEDULE=y SSH=y NO_SELECT_CHANNEL=y HD_SPINDOWN=y FORCE_AUTO_UPGRADE=y NTFS="open" \
    EXT4FS=y DISK_MONITOR=y MDNS=y NTFS="open" EMAIL=y FRS_FEEDBACK=y SYSSTATE=y USB_SWAP=y UTF8_SSID=y FORCE_AUTO_UPGRADE=y \

export GT-AXY16000 := IPV6SUPP=y HTTPS=y QCA=y IPQ807X=y BBEXTRAS=y USBEXTRAS=y EBTABLES=y SAMBA3=3.6.x MEDIASRV=y MODEM=y PARENTAL2=y ACCEL_PPTPD=y PRINTER=y USB="USB" GRO=y APP="installed" NEW_APP_ARM=y AUTODICT=y LANWAN_LED=y BUILD_NAME="GT-AXY16000" GTAXY16000=y SHP=y NVRAM_SIZE=0x20000 NVRAM_ENCRYPT=1 ODMPID=y UBI=y DUAL_TRX=n EXT4FS=y OPENVPN=y VPNC=y EMAIL=y FRS_FEEDBACK=y SYSSTATE=y ROG=y ROG_UI=y TIMEMACHINE=y MDNS=y DUMP_OOPS_MSG=y DEBUGFS=y SSH=y REBOOT_SCHEDULE=y OPTIMIZE_XBOX=y FINDASUS=y IPSEC=STRONGSWAN IPSEC_SRVCLI_ONLY=SRV NETOOL=y TRACEROUTE=y STAINFO=y HD_SPINDOWN=y VPN_FUSION=y FORCE_AUTO_UPGRADE=y IFTTT=y ALEXA=y OPEN_NAT=y \
export RT-AX89U := IPV6SUPP=y HTTPS=y QCA=y IPQ807X=y BBEXTRAS=y USBEXTRAS=y EBTABLES=y SAMBA3=3.6.x MEDIASRV=y MODEM=y PARENTAL2=y ACCEL_PPTPD=y PRINTER=y USB="USB" GRO=y APP="installed" NEW_APP_ARM=y AUTODICT=y LANWAN_LED=y BUILD_NAME="RT-AX89U" RTAX89U=y SHP=y NVRAM_SIZE=0x20000 NVRAM_ENCRYPT=1 ODMPID=y UBI=y DUAL_TRX=n EXT4FS=y OPENVPN=y VPNC=y EMAIL=y FRS_FEEDBACK=y SYSSTATE=y ROG=n ROG_UI=n TIMEMACHINE=y MDNS=y DUMP_OOPS_MSG=y DEBUGFS=y SSH=y REBOOT_SCHEDULE=y OPTIMIZE_XBOX=y FINDASUS=y IPSEC=STRONGSWAN IPSEC_SRVCLI_ONLY=SRV NETOOL=y TRACEROUTE=y STAINFO=y HD_SPINDOWN=y VPN_FUSION=n FORCE_AUTO_UPGRADE=y IFTTT=y ALEXA=y \
    NEWSSID_REV2=y IFTTT=y ALEXA=y EMAIL=y FRS_FEEDBACK=y SYSSTATE=y NVRAM_64K=y FORCE_AUTO_UPGRADE=y \

 

[RMerlin]

Can the user switch/SSH that OFF?

OE

Don't think so. Don't know for sure as I don't use their update code, so I don't really keep track of it.

 

[VANT]

Everything is clear. Thanks RMerlin

 

[ATLga]

It varies between firmware releases (in the past, sometimes they enabled, then disabled it between releases). As of 384_81992, these models have auto update enabled:

merlin@ubuntu-dev:~$ cat asuswrt.384-81992-ac86/release/src-rt/target.mak | grep FORCE_AUTO_UPGRADE

export RT-AC88U_BASE := IPV6SUPP=y HTTPS=y ARM=y BCM57=y AUTODICT=y BBEXTRAS=y USBEXTRAS=y EBTABLES=y SAMBA3="3.6.x" MEDIASRV=y MODEM=y PARENTAL2=y ACCEL_PPTPD=y PRINTER=y WEBDAV=y SMARTSYNCBASE=y USB="USB" GRO=y APP="installed" PROXYSTA=y DNSMQ=y SHP=y BCMWL6=y BCMWL6A=y TUNEK="n" BCM5301X=y DISK_MONITOR=y BTN_WIFITOG=y OPTIMIZE_XBOX=y ODMPID=y LED_BTN=y BCMSMP=y XHCI=y DUALWAN=y REPEATER=y NEW_USER_LOW_RSSI=y OPENVPN=y TIMEMACHINE=y MDNS=y TFAT=y NTFS="tuxera" HFS="tuxera" VPNC=y BRCM_NAND_JFFS2=y JFFS2LOG=y BWDPI=y DUMP_OOPS_MSG=y LINUX_MTD="64" DEBUGFS=y TEMPROOTFS=y SSH=y EMAIL=y FRS_FEEDBACK=y SYSSTATE=y ADBLOCK=n ROG=y SSD=n STAINFO=y BCM5301X_TRAFFIC_MONITOR=y CLOUDCHECK=y BCM_RECVFILE=y CFEZ=y ERPTEST=n WIFILOGO=n FORCE_AUTO_UPGRADE=y FAKEID=n REBOOT_SCHEDULE=y MULTICASTIPTV=y QUAGGA=y ASPMD=n BCMEVENTD=n WLCLMLOAD=n BCM_MUMIMO=y YANDEXDNS=y LAN50=y ATCOVER=y GETREALIP=y NOTIFICATION_CENTER=y ALEXA=y IFTTT=y LETSENCRYPT=y SW_HW_AUTH=y NATNL_AICLOUD=y NATNL_AIHOME=y HD_SPINDOWN=y IPSEC=STRONGSWAN IPSEC_SRVCLI_ONLY=SRV AMAS=y ETHOBD=y DWB=y UTF8_SSID=y AVBLCHAN=y NVRAM_ENCRYPT=y

export HND-94908_BASE := HND_ROUTER=y PROFILE="94908HND" SW_HW_AUTH=y AMAS=y UTF8_SSID=y ETHOBD=y DWB=y SAMBA3="3.6.x" FORCE_AUTO_UPGRADE=y
export RT-AC85P := IPV6SUPP=y HTTPS=y MIPS32=r2 RALINK=y MT7621=y BBEXTRAS=y USBEXTRAS=y EBTABLES=y SAMBA3=y MEDIASRV=y PARENTAL2=y ACCEL_PPTPD=y  USB="USB"  AUTODICT=y LANWAN_LED=y SHP=y RTAC85P=y ODMPID=y DUAL_TRX=y LED_ALL=y NEW_RGDM=y RA_SKU_IN_DRV=y OPENVPN=y VPNC=y DUMP_OOPS_MSG=y DEBUGFS=y REBOOT_SCHEDULE=y SSH=y NO_SELECT_CHANNEL=y HD_SPINDOWN=y FORCE_AUTO_UPGRADE=y NTFS="open" \
    EXT4FS=y DISK_MONITOR=y MDNS=y NTFS="open" EMAIL=y FRS_FEEDBACK=y SYSSTATE=y USB_SWAP=y UTF8_SSID=y FORCE_AUTO_UPGRADE=y \

export GT-AXY16000 := IPV6SUPP=y HTTPS=y QCA=y IPQ807X=y BBEXTRAS=y USBEXTRAS=y EBTABLES=y SAMBA3=3.6.x MEDIASRV=y MODEM=y PARENTAL2=y ACCEL_PPTPD=y PRINTER=y USB="USB" GRO=y APP="installed" NEW_APP_ARM=y AUTODICT=y LANWAN_LED=y BUILD_NAME="GT-AXY16000" GTAXY16000=y SHP=y NVRAM_SIZE=0x20000 NVRAM_ENCRYPT=1 ODMPID=y UBI=y DUAL_TRX=n EXT4FS=y OPENVPN=y VPNC=y EMAIL=y FRS_FEEDBACK=y SYSSTATE=y ROG=y ROG_UI=y TIMEMACHINE=y MDNS=y DUMP_OOPS_MSG=y DEBUGFS=y SSH=y REBOOT_SCHEDULE=y OPTIMIZE_XBOX=y FINDASUS=y IPSEC=STRONGSWAN IPSEC_SRVCLI_ONLY=SRV NETOOL=y TRACEROUTE=y STAINFO=y HD_SPINDOWN=y VPN_FUSION=y FORCE_AUTO_UPGRADE=y IFTTT=y ALEXA=y OPEN_NAT=y \
export RT-AX89U := IPV6SUPP=y HTTPS=y QCA=y IPQ807X=y BBEXTRAS=y USBEXTRAS=y EBTABLES=y SAMBA3=3.6.x MEDIASRV=y MODEM=y PARENTAL2=y ACCEL_PPTPD=y PRINTER=y USB="USB" GRO=y APP="installed" NEW_APP_ARM=y AUTODICT=y LANWAN_LED=y BUILD_NAME="RT-AX89U" RTAX89U=y SHP=y NVRAM_SIZE=0x20000 NVRAM_ENCRYPT=1 ODMPID=y UBI=y DUAL_TRX=n EXT4FS=y OPENVPN=y VPNC=y EMAIL=y FRS_FEEDBACK=y SYSSTATE=y ROG=n ROG_UI=n TIMEMACHINE=y MDNS=y DUMP_OOPS_MSG=y DEBUGFS=y SSH=y REBOOT_SCHEDULE=y OPTIMIZE_XBOX=y FINDASUS=y IPSEC=STRONGSWAN IPSEC_SRVCLI_ONLY=SRV NETOOL=y TRACEROUTE=y STAINFO=y HD_SPINDOWN=y VPN_FUSION=n FORCE_AUTO_UPGRADE=y IFTTT=y ALEXA=y \
    NEWSSID_REV2=y IFTTT=y ALEXA=y EMAIL=y FRS_FEEDBACK=y SYSSTATE=y NVRAM_64K=y FORCE_AUTO_UPGRADE=y \

Thanks!

 

[soleillune]

It is the first time my RT-AC86U auto update (from 81992 to 82072). There is no option to disable it.

 

[OzarkEdge]

Don't think so. Don't know for sure as I don't use their update code, so I don't really keep track of it.

That sounds like using Asuswrt-Merlin might switch it OFF.

OE

 

[ATLga]

Well time to look elsewhere for a router. Do not like anything that auto updates, period. I have a R7800 sitting unopened in a box that I've kept around "just in case" (pandemic backup) and I guess it's time to open it up and give it a try.

Played around with the r7800. OMG that web ui is S.L.O.W. Did notice it has a toggle box in the update settings for auto yes/no and a disclaimer for using it on "yes". Asus should implement that. See some quirkiness from this one compared to the Asus, so it'll go back in the box and put aside for "just in case". I don't really have a use for the additional feature set of Merlin's firmware, but if it will disable the auto update, I may have to look into using it.

 

[OzarkEdge]

Did notice it has a toggle box in the update settings for auto yes/no and a disclaimer for using it on "yes". Asus should implement that.

I agree... I have requested this in the AiMesh 2.0 beta thread. Feel free to pile on there.

Beta - ASUSWRT 386 RC2 public beta with full functions AiMesh 2.0

Is there a projected date for the "stable" release of this firmware? Or is that a moving target... per-say?

www.snbforums.com

OE

 

[Zardoz]

Mine also automatically updated, leaving my mesh in a mess.

Had to reboot everything again for it all to come back online.

 

[XIII]

Buffer overflow. Now that's interesting.

Indeed.

Just a day after @RMerlin announced there won’t be any Asuswrt-Merlin releases for a while ASUS already releases a vulnerability patch.

How serious is this issue? Do we need to move to stock? (Hope not)

 

[ATLga]

Indeed.

Just a day after @RMerlin announced there won’t be any Asuswrt-Merlin releases for a while ASUS already releases a vulnerability patch.

How serious is this issue? Do we need to move to stock? (Hope not)

Must have been serious enough to force the update on users

 

[CaptnDanLKW]

Might not be able to turn it off, but I suspect we can black hole the DNS for the update server (only from the router)... that's probably in the source code somewhere.

 

[quadra2030]

Maybe it's old news (or it was already present on previous stock firmwares), but I can connect to Samba share with SMB v2 (2.002).. thought it was possible on Merlin only.

 

[ATLga]

Wonder if you roll back if it will update you again

 

[tallytr]

Mine didn't auto update. I clicked on check but didn't even find the new firmware yesterday so I uploaded manually....

 

[RMerlin]

That sounds like using Asuswrt-Merlin might switch it OFF.

OE

We use completely different update code since I need to point at my own server for update checks.

 

[RMerlin]

Must have been serious enough to force the update on users

Unrelated, as the auto update code is in the firmware you are currently running, not on the update itself that isn't running on your router yet.

 

[XIII]

Unrelated, as the auto update code is in the firmware you are currently running, not on the update itself that isn't running on your router yet.

Unless that existing code is querying a server that informs it that the next update is a mandatory one?

 

[Slyder1980]

Auto updated this end as well. I noticed this f/w a couple of days ago and usually like to see the reaction here over a week but woke up this morning to see if automatically got the f/w installed. That's never happened since I brought the router 2yrs ago. Mandatory update maybe.