E3000 patch for WPA2 Krack

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Goto page 1, 2, 3  Next
Author Message
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sat Dec 30, 2017 13:15    Post subject: E3000 patch for WPA2 Krack Reply with quote
Hello everybody,

i have a Linksys E3000 and want to install the latest update (for WPA 2 Krack).
An info about that this problem was fixed, I found " http://svn.dd-wrt.com/changeset/33525 ". Unfortunately, I find on the FTP no download of this patch.
About the database search, I find only this "big" version: https://www.dd-wrt.com/site/support/router-database
This version does not have the patch yet.
On 16.10.2017 wrote "brainslayer" that this problem is fixed.
The "big" version is from 07.09.2017.
Where can I download a "Big" version containing this patch?

best regards
Chris
Sponsor
Malachi
DD-WRT Guru


Joined: 17 Jul 2012
Posts: 7206
Location: Columbus, Ohio

PostPosted: Sat Dec 30, 2017 13:56    Post subject: Reply with quote
ftp://ftp.dd-wrt.com/betas/2017/
_________________
I am far from a guru, I'm barely a novice.
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2326
Location: Canada

PostPosted: Sat Dec 30, 2017 14:30    Post subject: Wiki Reply with quote
I would suggest reading the link in my signature also.
_________________
Before asking a question on the forums, update dd-wrt: Where do I download firmware? I suggest reading it all.
QCA Best WiFi Settings


Some dd-wrt wiki pages are up to date, others are not. PM me if you find an old one.

Atheros:
Netgear R7800 x5 - WDS AP / station, gateway, QoS
TP-Link Archer C7 v2 x2 - WDS Station
D-Link 615 C1/E3/I1 x 7 - 1 WDS station
D-Link 825 B1 - Not used
D-Link 859 - WDS Station
D-Link 862L A1 x2 - WDS Station
UBNT 5AC loco x2 - airOS
UBNT loco M2 x2 - airOS

Broadcom
Linksys EA6400 - Gateway, QoS
Asus N66U - AP
Netgear WNDR3700v3 - not used
MediaTek
UBNT EdgeRouter X - switch
Netgear R6350 - not used
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sat Dec 30, 2017 15:44    Post subject: Reply with quote
Malachi wrote:
ftp://ftp.dd-wrt.com/betas/2017/


exactly in this path I searched. In vain I would not open here POST.
I have only found a 2k-3k mini version but no current BIG
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sat Dec 30, 2017 15:49    Post subject: Re: Wiki Reply with quote
ian5142 wrote:
I would suggest reading the link in my signature also.


Very clever! I would say you still read my post


why is it almost too time consuming for members to read POST thoroughly? Then you would realize that the simple FAQ was not enough!

or are simple questions generally undesirable?
jwh7
DD-WRT Guru


Joined: 25 Oct 2013
Posts: 2673
Location: Indy

PostPosted: Sat Dec 30, 2017 16:48    Post subject: Re: E3000 patch for WPA2 Krack Reply with quote
Nemisis wrote:
i have a Linksys E3000 and want to install the latest update (for WPA 2 Krack).
An info about that this problem was fixed, I found " http://svn.dd-wrt.com/changeset/33525 ". Unfortunately, I find on the FTP no download of this patch.
About the database search, I find only this "big" version: https://www.dd-wrt.com/site/support/router-database
This version does not have the patch yet.
On 16.10.2017 wrote "brainslayer" that this problem is fixed.
The "big" version is from 07.09.2017.
Where can I download a "Big" version containing this patch?
33525 was the initial fix for non-Broadcom devices. The final fix (for BCM and all) was 33678. The E3000 wiki states to use nv60k files when upgrading (or use the trailed build), for which k2.6 has both mega and big. Though, I'd suggest you use the k3.x build; mega-e3000 is equivalent to k26 "big". Plus, it has SFE accelerated NAT if using the firewall; see the wiki on upgrading to k3x. I assume you've read the warning about builds to use for upgrading to nv60k builds.
_________________
# NAT/SFE/CTF: limited speed w/ DD # Repeater issues # DD-WRT info: FAQ, Builds, Types, Modes, Changes, Demo #
OPNsense x64 5050e ITX|DD: DIR-810L, 2*EA6900@1GHz, R6300v1, RT-N66U@663, WNDR4000@533, E1500@353,
WRT54G{Lv1.1,Sv6}@250
|FreshTomato: F7D8302@532|OpenWRT: F9K1119v1, RT-ACRH13, R6220, WNDR3700v4
Malachi
DD-WRT Guru


Joined: 17 Jul 2012
Posts: 7206
Location: Columbus, Ohio

PostPosted: Sat Dec 30, 2017 17:16    Post subject: Re: Wiki Reply with quote
Nemisis wrote:
ian5142 wrote:
I would suggest reading the link in my signature also.


Very clever! I would say you still read my post


why is it almost too time consuming for members to read POST thoroughly? Then you would realize that the simple FAQ was not enough!

or are simple questions generally undesirable?


It is very time consuming to answer the same question, over and over. You've been a member of this forum since 2008 and don't know where the builds are or how to ,ocate them.
I gave you the link to all the firmware released in 2017, with the latest one just 2 days ago.
Don't you think that would have a build with the krack fix in it?

_________________
I am far from a guru, I'm barely a novice.
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sat Dec 30, 2017 17:31    Post subject: Re: E3000 patch for WPA2 Krack Reply with quote
jwh7 wrote:
Nemisis wrote:
i have a Linksys E3000 and want to install the latest update (for WPA 2 Krack).
An info about that this problem was fixed, I found " http://svn.dd-wrt.com/changeset/33525 ". Unfortunately, I find on the FTP no download of this patch.
About the database search, I find only this "big" version: https://www.dd-wrt.com/site/support/router-database
This version does not have the patch yet.
On 16.10.2017 wrote "brainslayer" that this problem is fixed.
The "big" version is from 07.09.2017.
Where can I download a "Big" version containing this patch?
33525 was the initial fix for non-Broadcom devices. The final fix (for BCM and all) was 33678. The E3000 wiki states to use nv60k files when upgrading (or use the trailed build), for which k2.6 has both mega and big. Though, I'd suggest you use the k3.x build; mega-e3000 is equivalent to k26 "big". Plus, it has SFE accelerated NAT if using the firewall; see the wiki on upgrading to k3x. I assume you've read the warning about builds to use for upgrading to nv60k builds.


hello jwh7,

many thanks for the answer.
I have already installed a k2.6 version on my system.
This runs as * NEWD-2_K2.6_big-nv60k.bin
I am also very happy with this version.
Due to the bug in the WPA2 connection, however, I have to install a recent update that contains the patch.
I have just seen that there is an update:
ftp://ftp.dd-wrt.com/betas/2017/12-29-2017-r34311/broadcom_K26/dd-wrt.v24-34311_NEWD-2_K2.6_big-nv60k.bin

Is the patch already included in this update?
I could not find a "33678" on "ftp://ftp.dd-wrt.com/betas/2017/".

On "https://www.dd-wrt.com/site/support/router-database" I am offered this version for the model Linksys E3000 "dd-wrt.v24-21061_NEWD-2_K2.6_big-nv60k.bin"
This is older than my installed version ??
Although the date "2017-09-07" is in the database, we are offering version "21061"!?!?
An error?

Is this download correct with the change for the WPA 2 bug?

ftp://ftp.dd-wrt.com/betas/2017/12-29-2017-r34311/broadcom_K26/dd-wrt.v24-34311_NEWD-2_K2.6_big-nv60k.bin

best regards
Chris
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sat Dec 30, 2017 17:39    Post subject: Re: Wiki Reply with quote
Malachi wrote:
Nemisis wrote:
ian5142 wrote:
I would suggest reading the link in my signature also.


Very clever! I would say you still read my post


why is it almost too time consuming for members to read POST thoroughly? Then you would realize that the simple FAQ was not enough!

or are simple questions generally undesirable?


It is very time consuming to answer the same question, over and over. You've been a member of this forum since 2008 and don't know where the builds are or how to ,ocate them.
I gave you the link to all the firmware released in 2017, with the latest one just 2 days ago.
Don't you think that would have a build with the krack fix in it?


hello Malachi,

Your statement is not correct.
My question was not where to download, but where to find a special download.
Where the firmware versions are, I know. I just did not find the correct one for my system containing the patch (WPA 2 bug).

Believing is not the same.
I would like to know exactly, so I ask here in the forum.
Since you have the status "Forum Guru" on grounds of many postings, you could have already answered me explicitly.

The only correct answer or support came from "jwh7" so far
Thanks a lot for this .
jwh7
DD-WRT Guru


Joined: 25 Oct 2013
Posts: 2673
Location: Indy

PostPosted: Sat Dec 30, 2017 17:46    Post subject: Re: E3000 patch for WPA2 Krack Reply with quote
Nemisis wrote:
I have just seen that there is an update:
ftp://ftp.dd-wrt.com/betas/2017/12-29-2017-r34311/broadcom_K26/dd-wrt.v24-34311_NEWD-2_K2.6_big-nv60k.bin

Is the patch already included in this update?
I could not find a "33678" on "ftp://ftp.dd-wrt.com/betas/2017/".

On "https://www.dd-wrt.com/site/support/router-database" I am offered this version for the model Linksys E3000 "dd-wrt.v24-21061_NEWD-2_K2.6_big-nv60k.bin"
This is older than my installed version ??
Although the date "2017-09-07" is in the database, we are offering version "21061"!?!?
Well, most importantly, the required Peacock announcement states to not use the Router Database, for this reason...it creates tremendous confusion. 21061 is from 2013.

The version in the filename is just the DD-WRT version, which arbitrarily changed a year ago from v2.4 to v3.0 (which is unrelated to kernel version, but coincidentally even more confusing as a result). Plus, that DD version wasn't changed everywhere.

The build numbers are just sequential commits, and Brainslayer releases the beta builds periodically, so yes any build after 33678 has the fix. The latest build fixes some wireless issues so yes, use 34311. K26 is fine, but I'd recommended using the k3x build, as it has other vulnerabilities that have been fixed in the past couple years, which k2.6 didn't get. If the router isn't your gateway, then k2.6 is probably ok.

_________________
# NAT/SFE/CTF: limited speed w/ DD # Repeater issues # DD-WRT info: FAQ, Builds, Types, Modes, Changes, Demo #
OPNsense x64 5050e ITX|DD: DIR-810L, 2*EA6900@1GHz, R6300v1, RT-N66U@663, WNDR4000@533, E1500@353,
WRT54G{Lv1.1,Sv6}@250
|FreshTomato: F7D8302@532|OpenWRT: F9K1119v1, RT-ACRH13, R6220, WNDR3700v4
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sat Dec 30, 2017 18:01    Post subject: Re: E3000 patch for WPA2 Krack Reply with quote
jwh7 wrote:
Nemisis wrote:
I have just seen that there is an update:
ftp://ftp.dd-wrt.com/betas/2017/12-29-2017-r34311/broadcom_K26/dd-wrt.v24-34311_NEWD-2_K2.6_big-nv60k.bin

Is the patch already included in this update?
I could not find a "33678" on "ftp://ftp.dd-wrt.com/betas/2017/".

On "https://www.dd-wrt.com/site/support/router-database" I am offered this version for the model Linksys E3000 "dd-wrt.v24-21061_NEWD-2_K2.6_big-nv60k.bin"
This is older than my installed version ??
Although the date "2017-09-07" is in the database, we are offering version "21061"!?!?
Well, most importantly, the required Peacock announcement states to not use the Router Database, for this reason...it creates tremendous confusion. 21061 is from 2013.

The version in the filename is just the DD-WRT version, which arbitrarily changed a year ago from v2.4 to v3.0 (which is unrelated to kernel version, but coincidentally even more confusing as a result). Plus, that DD version wasn't changed everywhere.

The build numbers are just sequential commits, and Brainslayer releases the beta builds periodically, so yes any build after 33678 has the fix. The latest build fixes some wireless issues so yes, use 34311. K26 is fine, but I'd recommended using the k3x build, as it has other vulnerabilities that have been fixed in the past couple years, which k2.6 didn't get. If the router isn't your gateway, then k2.6 is probably ok.


hello jwh7,

okay then I know that.
But then the date should be changed in the router database and a link to the actually current release be included.
That's really very confusing.

If I use the "k3x build", is it enough to do a 30-30-30 run before and after the update? Can I easily switch from the K2.6 version to the "k3x build"?

Is the K2.6 version only patched in a makeshift way?

Yes, the router is my gateway to the modem of the provider (cable Germany - Provider).

best regards
Chris
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2326
Location: Canada

PostPosted: Sat Dec 30, 2017 19:03    Post subject: Don't Use the Router database Reply with quote
This is exactly why the router database is not to be used, it is rarely updated with new builds. Read the wiki page I linked to, that outlines how to go about upgrading dd-wrt.
_________________
Before asking a question on the forums, update dd-wrt: Where do I download firmware? I suggest reading it all.
QCA Best WiFi Settings


Some dd-wrt wiki pages are up to date, others are not. PM me if you find an old one.

Atheros:
Netgear R7800 x5 - WDS AP / station, gateway, QoS
TP-Link Archer C7 v2 x2 - WDS Station
D-Link 615 C1/E3/I1 x 7 - 1 WDS station
D-Link 825 B1 - Not used
D-Link 859 - WDS Station
D-Link 862L A1 x2 - WDS Station
UBNT 5AC loco x2 - airOS
UBNT loco M2 x2 - airOS

Broadcom
Linksys EA6400 - Gateway, QoS
Asus N66U - AP
Netgear WNDR3700v3 - not used
MediaTek
UBNT EdgeRouter X - switch
Netgear R6350 - not used
jwh7
DD-WRT Guru


Joined: 25 Oct 2013
Posts: 2673
Location: Indy

PostPosted: Sat Dec 30, 2017 19:18    Post subject: Re: E3000 patch for WPA2 Krack Reply with quote
Nemisis wrote:
If I use the "k3x build", is it enough to do a 30-30-30 run before and after the update? Can I easily switch from the K2.6 version to the "k3x build"?

Is the K2.6 version only patched in a makeshift way?

Yes, the router is my gateway to the modem of the provider (cable Germany - Provider).
Old kernels get end-of-life'd and stop receiving updates.

See here; I'd say GUI resets (after) are fine unless you run in to issues. You could try going straight to the latest k3x E3000 build, since it is a trailed build, but I've not seen reports of others doing that.

_________________
# NAT/SFE/CTF: limited speed w/ DD # Repeater issues # DD-WRT info: FAQ, Builds, Types, Modes, Changes, Demo #
OPNsense x64 5050e ITX|DD: DIR-810L, 2*EA6900@1GHz, R6300v1, RT-N66U@663, WNDR4000@533, E1500@353,
WRT54G{Lv1.1,Sv6}@250
|FreshTomato: F7D8302@532|OpenWRT: F9K1119v1, RT-ACRH13, R6220, WNDR3700v4
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sat Dec 30, 2017 19:55    Post subject: Re: Don't Use the Router database Reply with quote
ian5142 wrote:
This is exactly why the router database is not to be used, it is rarely updated with new builds. Read the wiki page I linked to, that outlines how to go about upgrading dd-wrt.


hello ian5142,

then you should close the main page of the router database the same or create a link directly into the wiki.
A new user is usually directed to the main page via Google and relies on the information there.
Therefore, it is subjectively very bad if this database is not maintained at the same time.
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2326
Location: Canada

PostPosted: Sat Dec 30, 2017 19:58    Post subject: Permission Reply with quote
I can't, I don't have the ability to change the website in any way. I just update the wiki.

e-mail "info@dd-wrt.com"

_________________
Before asking a question on the forums, update dd-wrt: Where do I download firmware? I suggest reading it all.
QCA Best WiFi Settings


Some dd-wrt wiki pages are up to date, others are not. PM me if you find an old one.

Atheros:
Netgear R7800 x5 - WDS AP / station, gateway, QoS
TP-Link Archer C7 v2 x2 - WDS Station
D-Link 615 C1/E3/I1 x 7 - 1 WDS station
D-Link 825 B1 - Not used
D-Link 859 - WDS Station
D-Link 862L A1 x2 - WDS Station
UBNT 5AC loco x2 - airOS
UBNT loco M2 x2 - airOS

Broadcom
Linksys EA6400 - Gateway, QoS
Asus N66U - AP
Netgear WNDR3700v3 - not used
MediaTek
UBNT EdgeRouter X - switch
Netgear R6350 - not used
Goto page 1, 2, 3  Next Display posts from previous:    Page 1 of 3
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum