KeeneticOS updates — Dev Channel

Added MAC filtering for ApCli backhaul connection with bound BSSID for correct operation of Mesh Wi-Fi System. [SYS-1118]

Fixed the Wi-Fi Fast Transition (802.11r) operation in the case of different SSIDs on the same network segment. [NDM-2917]

The use of the traceroute diagnostic tool with a specified port for TCP/UDP has been corrected. CLI command example: tools traceroute 1.1.1.1 port 1883. [NDM-3138]

Fixed duplicate 802.11k (Radio Resource Management) RRM: perform scan notified channel: events in the System log when changing Wi-Fi channel on Mesh Wi-Fi System nodes. [SYS-1098]

The error message wind: failed to decrypt message has been moved to debug messages. [SYS-1084] [Forum topic]

The OpenSSL library has been updated to the latest version 3.1.5, which fixes the following list of vulnerabilities: CVE-2023-5678, CVE-2024-0727. [SYS-1097]

Updated the system timezone for Kazakhstan to UTC+5. [NDM-3147]

Fixed the issue where Band Steering mode would reset to the None selection under certain conditions. [NDM-3126]

The new "Handoff" option to force Wi-Fi clients with weak signals to disconnect is now available via the Command Line Interface (CLI). [NDM-3081]

Fixed wireless client disconnect/connect event conditions that were causing incorrect notifications from the Keenetic mobile application. [NDM-3079]

The new Pairwise Master Key Security Association (PMK SA) cache lifetime control option is now available in the Command Line Interface (CLI). The default value has been changed from 720 seconds to 1440 seconds. [NDM-3052]

Fixed nginx service startup failure without installed Keenetic mobile application system component. [NDM-3046] [Forum topic]

The new IPv6 interface identifier options are now available, providing a custom setting in the Command Line Interface (CLI). [NDM-2672]

The new source-address option allows the source IP address to be specified for the ping and ping6 CLI commands. [NDM-3016]

Fixed wireless client rejection with STA had re-associated from 00:00:00:00:00:00 message in the System log. [SYS-1029]

Disabled global scope in IPv6 ULA prefix announcement to prevent clients from using local addresses as the default connection and unavailability by KeenDNS name. [NDM-2993]

The option to enforce Protected Management Frames (PMF) is now available for wireless interfaces with WPA2 protection. [NDM-2930]

Introduced synchronisation of read-only permission for user accounts for Mesh Wi-Fi system extenders. [NDM-2985]

The additional user accounts are now transfered to extenders in the Wi-Fi System. [NDM-2871]

Added sequential shutdown of bridged interfaces during a broadcast storm to protect remote access to the Keenetic device. [SYS-1003]

Increased the number of wireless Network name SSIDs up to 7 on each band. [SYS-995]

The issue that caused the system to reboot with the FT_KDP_EventInform error message has been fixed. [SYS-994]

Fixed wireless connection of HP LaserJet printers using WPS technology. [SYS-988]

Fixed broken Command Line Interface (CLI) command no rekey-interval for wireless interfaces. [SYS-990]

Fixed Band Steering configuration errors on extenders. [NDM-2962] [Forum topic]

Fixed wireless backhaul operation on extenders with scheduled Wi-Fi radio shutdowns. [NDM-2912]

Fixed time zone synchronisation on Extenders in a Mesh Wi-Fi System. [NDM-2918]

Fixed use of static 78.47.125.180 DNS record use for the KeenDNS direct mode. [NDM-2905]

The OpenSSL library is updated to the latest version 3.1.2, which fixes the following list of vulnerabilities: CVE-2023-3817, CVE-2023-3446, CVE-2023-2975. [SYS-949]

Fixed KeenDNS cloud connectivity over IPv6 protocol. [NDM-2894]

The problem that causes the error message Ndns::Tunnel: out of memory [0xcffe00ba] in the System log has been fixed. [NDM-2895] [Forum topic]

The OpenSSL library is updated to the latest version, 3.1.1, which fixes the following list of vulnerabilities: CVE-2023-2650, CVE-2023-0465. [SYS-883]

Fixed KeenDNS cloud connectivity over IPv6 without an IPv4 Internet connection. [NDM-2870]