MikroTik RouterOS 6.49.13 → 6.49.20
3 releases · 0 breaking changes · 2 security fixes · 1 advisory fixed
2security0breaking0deprecated4feature5fix
Vulnerabilities fixed by this upgrade
- 5.4 CVE-2024-54772 An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18.…
Breaking changes
None in the release notes.
Security changes
- security security - allow only "http:" and "https:" schemas in relevant dst fields in 6.49.19
- security Fixes CVE-2024-54772: An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18.… in 6.49.18
Every release in between
otherconsole - updated copyright notice
otherethernet - improved system stability for RB912, RB911 devices
fixmac-server - fixed configuration change for "interface-list" property
otherrouterboard - do not show "upgrade-firmware" if available installation is older than minimal supported one
otherconsole - updated copyright notice
featurelte - added support for R11e-LTE6 v039 firmware release
securitysecurity - allow only "http:" and "https:" schemas in relevant dst fields
fixsystem - fixed v6 to v7 upgrade from separate packages
othersystem - improved upgrade procedure reliability
otherupgrade - the upgrade, testing, and development channels now direct to the latest long-term version of RouterOS v7
securityFixes CVE-2024-54772: An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18.…
otherconsole - updated copyright notice
otherfetch - improved system stability when using TFTP
otherhotspot - properly escape all reserved URI characters
featureradius - added "require-message-auth" option that requires "Message-Authenticator" in received Access-Accept/Challenge/Reject messages
otherradius - include "Message-Authenticator" in any RADIUS communication messages besides accounting for all services
featuresystem - added "shutdown" parameter for reset-configuration (CLI only)
fixsystem - fixed false log message about successful package installation
fixsystem - fixed v6 to v7 upgrade from separate packages
othersystem - improved system stability
othersystem - set flash-boot mode as "boot-device" after system reset initiated by reset button ("/system routerboard upgrade" required)
othersystem - set flash-boot mode as "boot-device" after system reset initiated from software
otheruser - improved authentication procedure when RADIUS is not used
featurewireless - allow to set Canada2 country profile when locked with US lock package for CubeG device
fixwireless - fixed antenna gain for SXT5ac device