ericpaulbishop / gargoyle

Gargoyle Router Management Utility
http://www.gargoyle-router.com
468 stars 221 forks source link

How to upgrade ppp for gargoyle firmware ver1.12.0 #880

Closed fengchen-github closed 4 years ago

fengchen-github commented 4 years ago

Security Advisory 2020-02-21-1 - ppp buffer overflow vulnerability (CVE-2020-8597) https://openwrt.org/advisory/2020-02-21-1

lantis1008 commented 4 years ago

Options:

  1. Build your own firmware based on latest 1.12 branch
  2. Use latest community firmware (e.g. @ispyisail ) if/when one becomes available
  3. Ask Eric if he's interested in doing a 1.12.1 release to include this fix As well as:
    • Fix OpenVPN credentials getting trimmed in some circumstances
    • Fix modals in several themes
    • Several Tor fixes
    • Fixes for SIP and FTP type connections
    • Fixes for port information not showing on all devices
    • Fixes for usb storage plugin
    • Fixes for OpenWrt packages not being downloadable/installable
    • Fixes for cloudflare ddns

I'll leave it to you to decide how you want this resolved for yourself and close the issue when appropriate. Thanks.

lantis1008 commented 4 years ago

Has your question been answered @fengchen-github ?

fengchen-github commented 4 years ago

Maybe I will choose option 2, but I haven’t done it yet