Flint 2 Openwrt24 4.8.2 getting old/risky

Router
1

Openwrt has recently released 24.10.4.

This fixed 2 security issues:

Kernel and other components have also been updated.

Our 4.8.2 is based on 24.10.2 - now 2 updates behind.

Will we see an update to openwrt24 firmware to catch up soon?

2

Hello,

We are examining whether this security hole has any impact on gl routers.

If there is an impact, let us schedule resource to update to latest op24 as possible.

5 Likes
4

Thanks Bruce!

5

R&D team has given a plan, the closed-source firmware will merge security patches into future firmware versions, and open-source firmware will upgrade the op version to 24.10.4.

Thank you!

6 Likes
6

Bruce,

Is there an ETA for the OP24 update to 24.10.4?

7

This month.

2 Likes
8

Thanks.

If it’s going to be 4 more weeks, I’ll swap out the Flint 2 for now rather than risk CVE's.

I have a Netgear XR500 on Openwrt 24.10.4 as backup for these situations.

9

It is expected to be released in early November, the earliest in this week, next week at the latest.

2 Likes
11

Do these CVEs effect GLs stable FW builds. If so, when will a stable release become available that patches them?

12

I commented on the fact that 2 CVE’s patched by Openwrt 24.10.4 had not been patched in OP24-4.8.2.

They now have been patched in OP24-4.8.3.

I also commented that GL-inet made no mention of these two CVE’s in its Security Vulnerabilities section of its website, nor on the Release notes for OP24-4.8.3.

I commented that CVE’s that affect Openwrt also affect GL-inet firmware and should be noted.

Still no mention of these two CVE’s.

Why is GL-inet hiding active CVE issues from its users in this way??

13

Hello,

Sorry for the late reply.

Open-source firmware such as op24, has been updated to openwrt 24.10.4 and v4.8.3-op24 firmware has been released.

Closed-source firmware will follow the firmware release rhythm of each model and merge relevant patch in each next updated version.

The Reporting Security Vulnerabilities on the official website will be updated later after the firmware is released.

15

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.