srlabs / blue-merle

The blue-merle package enhances anonymity and reduces forensic traceability of the GL-E750 Mudi 4G mobile wi-fi router
BSD 3-Clause "New" or "Revised" License
171 stars 26 forks source link

New Mudi Firmware 4.3.9 wich includes important Securtiy Updates #31

Closed nestire closed 5 months ago

nestire commented 6 months ago

There is a new Firmware that fixes various vulnerability the most problematic https://nvd.nist.gov/vuln/detail/CVE-2023-46454

I tested blue-merle on with a Mudi 750 V2 on 4.3.9. Besides the Firmware Version check that fails for a fully automated install it works as expected (Tested: Button, Webinterface, ClI) added a fix for the firmware check in this PR #28

dzigitaz commented 6 months ago

hello, i have difficulties installing blue merle on the latest version... Maybe you could explain how to install it without fully automated install?

frank-dspeed commented 5 months ago

works for me

root@GL-E750:/tmp# opkg install blue-merle*.ipk
Installing blue-merle (2.0.0-0) to root...
Installing coreutils (9.0-2) to root...
Downloading https://fw.gl-inet.com/releases/v22.03.4/packages-4.2/ath79/packages/coreutils_9.0-2_mips_24kc.ipk
Installing coreutils-shred (9.0-2) to root...
Downloading https://fw.gl-inet.com/releases/v22.03.4/packages-4.2/ath79/packages/coreutils-shred_9.0-2_mips_24kc.ipk
Installing libpython3-3.10 (3.10.9-1) to root...
Downloading https://fw.gl-inet.com/releases/v22.03.4/packages-4.2/ath79/packages/libpython3-3.10_3.10.9-1_mips_24kc.ipk
Installing python3-base (3.10.9-1) to root...
Downloading https://fw.gl-inet.com/releases/v22.03.4/packages-4.2/ath79/packages/python3-base_3.10.9-1_mips_24kc.ipk
Installing libffi (3.4.2-2) to root...
Downloading https://fw.gl-inet.com/releases/v22.03.4/packages-4.2/ath79/packages/libffi_3.4.2-2_mips_24kc.ipk
Installing libbz2-1.0 (1.0.8-1) to root...
Downloading https://fw.gl-inet.com/releases/v22.03.4/packages-4.2/ath79/packages/libbz2-1.0_1.0.8-1_mips_24kc.ipk
Installing python3-light (3.10.9-1) to root...
Downloading https://fw.gl-inet.com/releases/v22.03.4/packages-4.2/ath79/packages/python3-light_3.10.9-1_mips_24kc.ipk
Installing python3-pyserial (3.4-2) to root...
Downloading https://fw.gl-inet.com/releases/v22.03.4/packages-4.2/ath79/packages/python3-pyserial_3.4-2_mips_24kc.ipk
Version 4.3.9 is *probably* supported

You have a GL.iNet GL-E750, running firmware version 4.3.9.
blue-merle has only been tested with GL-E750 Mudi Version 4.3.8.
The device or firmware version you are using have not been verified to work with blue-merle.
Would you like to continue on your own risk? (y/N): y
richoffpints commented 5 months ago

So blue merel works with the v2? What card is being used or did u uses that it worked on?

richoffpints commented 5 months ago

Why is this closed? I asked a question

Linuzifer commented 5 months ago

Yes. This is exactly why the issue was closed. Please read the friendly manual.

dzigitaz commented 5 months ago

It is not giving me the message at the end "Would you like to continue on your own risk? (y/N): "

richoffpints commented 4 months ago

are u using the mudiv2 @dzigitaz