Patch release of the firmware version 6.3.1. Let's have a look at some improvements and fixes. As always security first. Full change log can be found in Release Notes.
Let's start with some security updates:
Fix Linux Kernel Vulnerabilities
- We have updated the
dhcp-iscprogram to version 4.1-ESV-R16-P1. This update has fixed CVE-2021-25217 (high). For more details about this release, see the webpage at https://downloads.isc.org/isc/dhcp/4.1-ESV-R16-P1/dhcp-4.1-ESV-R16-P1-RELNOTES.
- We have updated the
- We have updated the curl program to version 7.78.0. This update has fixed CVE-2021-22897 (medium), CVE-2021-22898 (low), CVE-2021-22901 (high), CVE-2021-22922, CVE-2021-22923, CVE-2021-22924, CVE-2021-22925 and CVE-2021-22926. For more details about this curl release, see https://curl.haxx.se/changes.html#7_78_0.
- We have updated the strongSwan software to version 5.9.3. For more details about this release, see the webpage at https://github.com/strongswan/strongswan/releases/tag/5.9.3.
Important security updates out of the way, we can look at new addition to web interface and new programs added.
MTU and MRU for PPTP and L2TP
- PPTP: Two new options in the PPTP configuration page available to configure the MTU (Maximum Transmission Unit) and the MRU (Maximum Receive Unit) parameters. The default value for both options is 1460 bytes to avoid sending fragmented packets.
- L2TP: Two new options in the L2TP configuration page available to configure the MTU (Maximum Transmission Unit) and the MRU (Maximum Receive Unit) parameters. The default value for both options is 1400 bytes, the same as used so far.
Number of FW Rules Increase
Total amount of the firewall rules, that can be configured on the Firewall configuration page, was increased from eight to sixteen rules for both, the incoming and forwarded packets.
Fix IPsec Issue
Fixed the IPsec SA checking for when multiple tunnels with the same IDs and different local or remote subnets are established. This issue was introduced in the firmware 6.3.0.
WiFi Firmware and Driver Update
We have updated the firmware of the Laird SU60 WiFi module to version 126.96.36.199.
|ICR-3232||6.3.1||Firmware - zip|
|SR-308xxxxx||6.3.1||Firmware - zip|
|ICR-3232W||6.3.1||Firmware - zip|
|LR77-v2||6.3.1||Firmware - zip|
|LR77-v2 Libratum||6.3.1||Firmware - zip|
|UR5i-v2||6.3.1||Firmware - zip|
|UR5i-v2 Libratum||6.3.1||Firmware - zip|