Availability of the image builders with fixed vulnerabilities?

Hello,

this has been asked in various threads already, and I didn’t see any response from gl-inet. Recently vulnerabilities in dnsmasq and hostapd were publicized and were fixes have been implemented in LEDE Project master tree.

When can we expect the image builders for gl-inet devices with those vulnerabilities fixed (new dnsmasq and hostapd)?

Thanks!

Firmware V2.263 has been released today with the fix.

All imagebuilders have been updated with the newest package.

Thank you! I’ve tried checking http://www.gl-inet.com/download/ but the image builders are nowhere to be found there. Can you post the up-to-date links? I’m mostly interested in MT300N v1 and v2 image builders.

Found one here: https://www.gl-inet.com/openwrt/ramips/

 

Prolly want this one: http://www.gl-inet.com/lede/ramips/

shouldn’t the dnsmasq* files here:

http://www.gl-inet.com/lede/ramips/2.263/packages/base/

have a newer date than July-2017?

 

Thanks for the links you guys.

@alzhao – when using the OpenWRT-based image builder posted above for MT300N I get the error when trying to run:make image PROFILE=“GL-MT300N”

The error is:

Collected errors:

  • satisfy_dependencies_for: Cannot satisfy the following dependencies for kmod-mt76:

  • kernel (= 3.18.27-1-cb8c7ab4168ccfe99ab712f71be31604) *

  • opkg_install_cmd: Cannot install package wpad-mini.

Makefile:129: recipe for target ‘package_install’ failed

make[2]: *** [package_install] Error 255

@stangri, you don’t need to select kmod-mt76 for MT300N I think.

But not sure about the kernel mismatch. Let me try and come back.

@alzhao I didn’t select anything, I just ran “make image PROFILE=”GL-MT300N”” without any packages.

@alzhao – any updates?

An you included AR750 when you provide updated builders?

@alzhao – can you confirm that the 2.6.3 image builder you’ve posted for MT300N fails to produce an image for you as well?

I’m in the limbo right now – the old image builder has a known security flaw, while the new one doesn’t work, please advise.