Software Update: RouterOS 6.40.9

MikroTik has released RouterOS 6.40.9 in the bugfix branch. RouterOS is an operating system that focuses on running router tasksThis includes routing network traffic, of course, but also a firewall, bandwidth management, controlling wireless access points, a hotspot gateway and a VPN server. It can be done on the hardware from MikroTik when doing its job on x86 or virtual machines. Before use, a license required, which is included with the purchase of MikroTik hardware. The list of changes for this release is as follows:

What’s new in 6.40.9

• security – fixed vulnerabilities CVE-2018-1156, CVE-2018-1157, CVE-2018-1158, CVE-2018-1159;
• certificate – fixed “add-scep” template existence check when signing certificate;
• defconf – fixed wAP LTE kit default configuration;
• ethernet – improved large packet handling on ARM devices with wireless;
• ethernet – removed obsolete slave flag from “/interface vlan” menu;
• filesystem – fixed NAND memory going into read-only mode;
• hotspot – fixed user authentication when queue from old session is not removed yet;
• interface – fixed interface configuration responsiveness;
• ipsec – fixed policies becoming invalid if added after a disabled policy;
• ldp – properly load LDP configuration;
• ppp – fixed “hunged up” grammar to “hung up” within PPP log messages;
• sfp – hide “sfp-wavelength” parameter for RJ45 transceivers;
• snmp – added remote CAP count OID for CAPsMAN;
• supout – added “partitions” section to supout file;
• tile – fixed Ethernet interfaces becoming unresponsive;
• tr069-client – fixed unresponsive tr069 service when blackhole route is present;
• userman – fixed compatibility with PayPal TLS 1.2;
• userman – improved unique username generation process when adding batch of users;
• winbox – added missing “dscp” and “clamp-tcp-mss” settings to IPv6 tunnels;
• winbox – allow to specify full URL in SCEP certificate signing process;
• winbox – by default specify keepalive timeout value for tunnel type interfaces;
• winbox – show firmware upgrade message at the bottom of “System/RouterBOARD” menu;
• winbox – show “scept-url” for certificates;
• winbox – show “sector-writes” on ARM devices that have such counters;
• winbox – show “sector-writes” on devices that have such counters;
• winbox – show “System/Health” only on boards that have health monitoring;
• wireless – added option to disable PMKID for WPA2;
• wireless – enable all chains by default on devices without external antennas after configuration reset;
• wireless – fixed packet processing after removing wireless interface from CAP settings;
• wireless – improved client “channel width” detection;
• wireless – improved Nv2 PtMP performance;
• wireless – increased stability on hAP ac^2 and cAP ac with legacy data rates;
• wireless – updated “united-states” regulatory domain information;