{"id":5459,"date":"2017-03-10T13:48:40","date_gmt":"2017-03-10T19:48:40","guid":{"rendered":"http:\/\/gregsowell.com\/?p=5459"},"modified":"2017-03-10T13:48:40","modified_gmt":"2017-03-10T19:48:40","slug":"mikrotik-routeros-v6-37-5-bugfix-v6-38-5-current-and-v6-39rc49-rc","status":"publish","type":"post","link":"https:\/\/gregsowell.com\/?p=5459","title":{"rendered":"MikroTik RouterOS v6.37.5 [bugfix], v6.38.5 [current] and v6.39rc49 [rc]"},"content":{"rendered":"

What’s new in 6.37.5 (2017-Mar-09 11:54):<\/p>\n

!) www – fixed http server vulnerability; This is presumably the fix for the CIA Hive Exploit<\/a> in the Mikrotik httpd implementation<\/strong>
\n*) chr – fixed problem when transmit speed was reduced by interface queues;
\n*) dhcp – do not listen on IPv4\/IPv6 client to IPv6 MLD packets;
\n*) dude – (changes discussed here: https:\/\/wiki.mikrotik.com\/wiki\/Manual:The_Dude_v6\/dude_v6.xx_changelog);
\n*) export – do not show “read-only” IRQ entries;
\n*) filesystem – implemented procedures to verify and restore internal file structure integrity upon upgrading;
\n*) firewall – do not allow to set “time” parameter to 0s for “limit” option;
\n*) firewall – fixed import of exported configuration that had updated “limit” setting;
\n*) graphing – fixed graphing crash when high amount of traffic is processed;
\n*) hotspot – fixed rare kernel crash on multicore systems;
\n*) hotspot – fixed redirect to URL where escape characters are used (requires newly generated HTML files);
\n*) hotspot – show Host table commentaries also in Active tab and vice versa;
\n*) interface – do not treat multiple zeros as single zero on name comparison;
\n*) irq – properly detect all IRQ entries;
\n*) l2tp-client – fixed IPSec policy generation after reboot;
\n*) lcd – show fan2 speed only if it is available;
\n*) leds – fixed defaults for RBSXT5HacD2nr2;
\n*) mmips – improved general stability;
\n*) rb3011 – fixed noise from buzzer after silent boot;
\n*) switch – fixed crash when trying to configure second master port on the same chipset (RB3011, RB2011, CCR1009-8G-1S+);
\n*) userman – allow access to User Manager users page only through “\/user” URL;
\n*) userman – show warning when no users are selected for CSV file generation;
\n*) winbox – added “add-relay-info” and “relay-info-remote-id” to DHCP relay;
\n*) winbox – added H flag to “\/ip arp” ;
\n*) winbox – added missing “use-fan2” and “active-fan2” to “\/system health”;
\n*) winbox – allow shorten bytes to k,M,G in bridge firewall just like in \u201c\/ip firewall\u201d;
\n*) winbox – do not hide “power-cycle-after” option;
\n*) winbox – do not hide 00:00:00:00:00:00 MAC address in unpublished ARPs;
\n*) winbox – fixed matching “connection-state=untracked” connections;
\n*) winbox – fixed typo in \u201c\/system resources pci\u201d list;
\n*) winbox – hide advertise tab in Hotspot user profile configuration if “transparent-proxy” is not enabled;
\n*) winbox – make “power-cycle-after” show correct value;
\n*) winbox – make “power-cycle-interval” not to depend on “power-cycle-ping-enabled” in PoE settings;
\n*) winbox – properly show BGP communities in routing filters table filter;
\n*) wireless – fixed scan tool stuck in background;
\n*) wireless – improved compatibility with Intel 2200BG wireless card;
\n*) wireless – update Thailand country frequency settings;<\/p>\n

What’s new in 6.38.5 (2017-Mar-09 11:32):<\/p>\n

!) www – fixed http server vulnerability;<\/p>\n

What’s new in 6.39rc49 (2017-Mar-09 12:33):<\/p>\n

!) www – fixed http server vulnerability;
\n*) capsman – improved CAP status querying;
\n*) defconf – fixed default configuration generation when wireless package is disabled;
\n*) ike2 – check child state before allowing rekey;
\n*) ike2 – send EAP identity as user-name RADIUS attribute;
\n*) lte – added LTE signal level reading for Cinterion modems;
\n*) queue – fixed reboot loop when queues were used (introduced in 6.39rc42);
\n*) rb3011 – added partitioning support;
\n*) tr069-client – added “Device.Hosts.Host.{i}.” support;Glad to see they are still thinking about this – I see potential for sure.<\/strong>
\n*) userman – fixed rare crash when User Manager requested file does not exist on router;
\n*) wireless – fixed RBSXT5HacD2nr2 small channel support;<\/p>\n

v6.37.5 forum topic discussion:
\nhttps:\/\/forum.mikrotik.com\/viewtopic.php?f=21&t=119373<\/p>\n

v6.38.5 forum topic discussion:
\nhttps:\/\/forum.mikrotik.com\/viewtopic.php?f=21&t=119302<\/p>\n

v6.39rc49 forum topic discussion:
\nhttps:\/\/forum.mikrotik.com\/viewtopic.php?f=21&t=116357<\/p>\n","protected":false},"excerpt":{"rendered":"

What’s new in 6.37.5 (2017-Mar-09 11:54): !) www – fixed http server vulnerability; This is presumably the fix for the CIA Hive Exploit in\u2026<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-5459","post","type-post","status-publish","format-standard","hentry","category-mikrotik"],"_links":{"self":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/5459","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5459"}],"version-history":[{"count":1,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/5459\/revisions"}],"predecessor-version":[{"id":5460,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/5459\/revisions\/5460"}],"wp:attachment":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5459"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5459"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5459"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}