1. Resolved an issue causing excessive log generation due to bwdpi issue.
2. Fixed a potential issue causing higher CPU utilization.

Please unzip the firmware file, and then verify the checksum.
SHA256: 2409b4cd8124038e416903cae960d4097a7c09932c1476ff3b52897faed86c0c

Security
- Updated libexif to 0.6.24.
- Updated ffmpeg to 4.4.2.
- Updated OpenVPN to 2.4.12 for CVE-2022-0547.
- Update cURL to 7.84.0 for CVE-2022-27782, CVE-2022-22576, CVE-2022-32208, CVE-2022-27781, CVE-2021-22945, etc.
- Updated OpenSSL to 1.1.1n for CVE-2022-0778.
- Fixed JANSSON-2.7 CVE-2016-4425.
- Fixed ntp-4.2.8p15 CVE-2016-10195, CVE-2016-10196, CVE-2016-10197, CVE-2018-5743, CVE-2012-3868.
- Fixed open redirect vulnerability in certain web page.
- Fixed XSS vulnerability of DDNS hostname.
- Fixed ZDI-CAN-16036.
- Fixed lighttpd may execute any command.
- Fixed Netatalk CVE-2018-1160.
- Fixed CVE-2022-26376.
- Fixed XSS vulnerability. Thanks to Jørgen Selsøyvold, Donn Morrison, Ida Heggen Trosdahl.
- Fixed Dropbear CVE-2019-17362.
- Fixed Buxybox CVE-2022-28391, CVE-2021-42386, CVE-2021-42384, CVE-2021-42382, CVE-2021-42383, CVE-2021-42379, CVE-2021-42380, CVE-2021-42385, CVE-2021-30065.


Features
- Added HE.NET DDNS service support.
- Added OpenVPN server IPv6 mode and enhanced connect via IPv6.
- Added custom LAN DHCP IPv6 DNS support.
- Added Telnet server IPv6 support.
- Added IPv6 access HTTP, SSH server from WAN support.
- Added DS Parameters IE filling for 5G band beacon / probe response.
- Added ASUS DDNS IPv6 update option to control registering with IPv6 address or not.
- Updated OpenVPN client option parser to support ignore-unknown-option.
- Updated ASUS NOTICE(Privacy).
- Updated Internet LED in AiMesh Node mode.
- Updated to support the length of VPN client password to 128 characters.
- Fixed and enhanced AiMesh related issues.
- Fixed AiCloud related issues.
- Fixed AiMesh Node primary AP isolation not work.
- Enhanced OpenVPN server if user set invalid value in "Custom configuration".
- Enhanced Windows client of OpenVPN server using server DNS.
- Enhanced Network Monitoring.

Please unzip the firmware file first then check the MD5 code.
MD5: d6fab629fb42979e1886075d137fb947

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U/R.
Advanced Settings > Administration > Firmware Upgrade

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U/R.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: 9ee58bcf191a9a6b4b398ef48526b5ca

Security Fixes and Improvements:
- Fixed HTTP smuggling issue of httpd.
- Fixed arbitrary file reading vulnerability of httpd.
- Fixed unauthorization DoS issue.
- Fixed stack overflow issue of eapd.
- Fixed string format stacks vulnerability, cross-site-scripting vulnerability and informational vulnerability. Thanks to Howard McGreehan.
- Fixed authenticated stored XSS vulnerability. Thanks to Luke Walker - SmartDCC.
- Fixed SQL injection vulnerability, json file traversal vulnerability, plc/port file traversal vulnerability, stack overflow vulnerability. Thanks to HP of Cyber Kunlun Lab.
- Fixed wget CVE-2019-5953.
- Fixed busybox CVE-2018-20679, CVE-2019-5747, CVE-2017-15873, CVE-2018-100517, CVE-2017-16544, CVE-2021-28831, CVE-2018-1000517.

Bug Fixes and Improvements:
- Fixed AiMesh/Guest network related issues.
- Fixed and enhanced DDNS related issues.
- Enhanced the time for DSL WAN recover from disconnection.
- Fixed Reboot Scheduler issue.
- Added DNS over TLS on DSL WAN.
- Fixed AiCloud related issues.
- Enhanced Fail-Back with Network Monitoring.
- Fixed and enhanced Traditional QoS.
- Fixed OpenVPN client not start if it takes longer time not synchronized with NTP.
- Enhanced for user uploading invalid OpenVPN client profile.
- Updated auto-generated OpenVPN server certificate with SHA256.
- Update OpenVPN server to accept client via IPv6.
- Fixed Guest Network 1 client could not access internet via OpenVPN client.
- Fixed the client of OpenVPN server could not be restricted by Access Restrictions.
- Fixed OpenVPN Client issue with Hide.Me.

Please unzip the firmware file first then check the MD5 code.
MD5: 07f63506d6247aafaa19e4596d53a91d

Security Fixes and Improvements:
- Fixed lldpd CVE-2020-27827.
- Fixed avahi CVE-2017-6519.
- Updated cURL to 7.78.0.
- Updated OpenVPN to 2.4.11.
- Fixed lighttpd CVE-2018-19052.
- Fixed dropbear brute-force protection.
- Fixed httpd stack overflow.
- Fixed DoS vulnerability from spoofed sae authentication frame. Thanks to Efstratios Chatzoglou, University of the Aegean, Georgios Kambourakis, European Commission at the European Joint Research Centre, and Constantinos Kolias, University of Idaho.

Bug Fixes and Improvements:
- Fixed and enhanced AiMesh/Guest network/Bandwidth Limiter related issues.
- Fixed internet connection issue if setting LAN DNS in WAN. (PiHole issues)
- Added httpd IPv6 support.
- Fixed AiCloud related bugs.
- Added Hostname in LAN DHCP server Manually Assigned IP List.
- Fixed OpenVPN server TAP + DHCP related issue.
- Fixed VPN client cannot access USB HDD on AiMesh node.
- Enhanced Ookla Speedtest performance.
- Minor GUI bug fixes.

Please unzip the firmware file first then check the MD5 code.
MD5: 49a06b25804aef72bca4541a435f834b

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U/R.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: 44cd1dc4460ba97cf3a60f679e4c2e0c

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U/R.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: 1d7898fb0431050cfae3aa0a0046956e

Security Fixes and Improvements:
- Fixed Wifi fragment and aggregation attack.
- Enhanced Slowloris Denial of Service attack.
- Updated to OpenSSL-1.1.1k for CVE-2021-3449.
- Updated dropbear to 2020.81.

Bug Fixes and Improvements:
- Fixed some USB modem recognition issue.
- Fixed DST time issue.
- Updated length of login username/password.
- Added searching Open NAT game profile form cloud.
- Fixed AiMesh/Guest Network/Mac Filter issues.
- Fixed buffer overflow on httpd.
- Fixed the issue of Internet Speed in the test result history.
- Added OpenVPN client support ipv6 through tunnel.
- Fixed SSID printing issue in Wireless Log.
- Fixed DNS not updated after OpenVPN client stopped.
- Fixed RE guest network hidden ssid is not work.
- Fixed AiMesh Backhaul rate related information issue while roamast is disabled.
- Updated problem description in Feedback page.
- Fixed possible kernel panic issue of TrendMicro module.
- Updated the limitation of maximum number of concurrent connections of FTP share.
- Fixed client of 2.4G First Guest Network cannot get IP address.
- Updated username validation of QIS and System page.
- Fixed client of RE Guest Network cannot get IP address.
- Fixed PC-offline-blocking still remains when offline time contain DST-start-time and continues after offline time.
- Fixed RE will sync the first USB account with the HTTP account.
- Enhanced ICMPv6 type 128 flooding protection.
- Enhanced ICMPv6 firewall handling.
- Added jitterentropy-rngd for feeding the Linux /dev/random.
- Updated USB modem APN data.
- Fixed FTP/TLS support.
- Fixed it takes too long time to obtain the Let's Encrypt certificate in China.
- Fixed sometimes the devices in LAN could not access internet if PPTP/L2TP client connected.
- Fixed cannot login the web page sometimes.
- Fixed certain WAN settings for IPTV not apply correctly via QIS.

Please unzip the firmware file first then check the MD5 code.
MD5: dc4838d1c96b1d356780a235e658a8db

Security Fixes and Improvements:
- Updated dnsmasq to 2.84 for CVE-2020-25681~25687.
- Enhanced httpd for Reflected XSS.
- Fixed some AiCloud security issues.
- Fixed httpd stack and buffer overflow issues.
- Enhanced httpd for DoS.
- Fixed Cross Site Scripting in some pages.
- Enhanced httpd for Format String Attack.

New:
- New schedular design for Parental Control.
- Added Game Mode / Open NAT.

DSL:
- Updated DSL firmware to v1.0.5.3.
- Added G.INP Stability Adjustment option for some cases with frequent noise fluctuations to a certain extent.
- Support DSL WAN as Secondary WAN.

Bug Fixes and Improvements:
- Enhanced WiFi client downstream throughput in certain VDSL DHCP case.
- Fixed and enhanced AiMesh related issues.
- Added Technical Support / Problem Type for Feedback page.
- Fixed unexpected parental control packet dropping by iptables issue.
- Fixed Let's Encrypt with 3rd party DDNS services.
- Fixed some Microsoft application not work if setup VPN connection.
- Fixed possible kernel panic issue of IGMP Snooping.
- Fixed possible kernel panic issue of bridge.
- Fixed possible kernel panic issue of PPTP.
- Enhanced for OpenVPN client profile with option "tls-crypt" and "key-direction".
- Fixed two Internet Connection tab if setting Single USB WAN.
- Fixed https local certificate issue if changing from Let's Encrypt to None.
- Fixed sometimes System Diagnostic of AiMesh Node would get stuck.
- Enhanced Internet Speed test.
- Enhanced Timezone/DST database.
- Fixed some potentail bugs of TrendMicro module.
- Fixed ETH WAN not apply correctly.
- Enhanced nvram space usage.
- Added DSL WAN DNS server selector.
- Updated USB Modem APN data.
- Fixed DHCP issue with Russia ISP Beeline.
- Fixed firewall rule issue for OpenVPN server in some cases.
- Enhanced bufferbloat issue for Traditional QoS and Bandwidth Limiter.
- Updated miniupnpd to 2.2.0.
- Enhanced jffs filesystem occupied by icon file with some Netgear AP in LAN.
- Fixed some usb modem issues.
- Added usb modem D-Link DWM-222 and ZTE MF821 support.
- Fixed Let's Encrypt issue.
- Fixed DSL WAN settings cannot be restored.
- Fixed aaews memory leak issue.
- Fixed load balance issue while disable primary wan.
- Fixed IE compatibility issue on Wireless Scheduler page.
- Fixed sometime routing rules or resolv.conf not correct while apply IPv6.
- Fixed DSL WAN some settings and display not correct if proto is static or pppoe.
- Fixed Traditinoal QoS download rule issue.
- Added Dual Wan support in AiMesh > Network page.
- Added DHCP option 60/61 on DSL WAN page.
- Added ICMPv6 type 128 flooding protection.
- Fixed ssh port can't be changed after first time configuration.
- Fixed feedback settings file issue.
- Fixed no internet if OpenVPN client in TAP + redirect-gateway case.
- Fixed NAT and add DNS from extended WAN services.
- Added sorting IP address function for Manually DHCP.
- Fixed getting IP failed in extend services with 802.1Q enabled case after QIS.

Please unzip the firmware file first then check the MD5 code.
MD5: 9d7f2c630b393b6187ebebe71fb2b838

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: 5915c38913ded395b3a3d29f1b0a3139

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: 32660798279ad7e7e360171b48ba5f47

Security Fix and Improvement:
- Fixed buffer overflow with shellcode of blocking_request.cgi..

Bug Fixes and Improvements:
- Fixed and enhanced AiMesh related issues.
- Fixed the abnormal detect when WAN is set as static ip.
- Fixed web response slow issue in Web History page.
- Fixed link status error which cause sometimes cannot access internet in Load Balance mode.
- Fixed OUI may not be found in networkmap.
- Fixed Parental Control not work.
- Fixed udp proxy and igmpproxy issue in bridge mode.
- Enhanced nvram space usage.
- Fixed memory leak issue.
- Fixed deleting the events of AiProtection incorrectly.
- Fixed AiMesh RE sync wrong wep key.
- Fixed missing host keys to start ssh server.
- Fixed no client traffic data on APP.
- Fixed Load Balance Primary WAN disconnect cause Secondary WAN show disconnect too.
- Fixed crash issue if control Primary WAN in NetworkMap.
- Fixed DSL WAN MAC clone not work.
- Fixed DSL WAN PPP option not work.
- Fixed restart wan while editting multiple WAN PVC/Service list.
- Fixed Network Map internet status WAN control issue.
- Fixed WPS Button Behaivour is missing on GUI.
- Updated DSL ISP list and support more IPTV profile.

Please unzip the firmware file first then check the MD5 code.
MD5: 4891f6bf195a2e4e7af97d7fd4614b53

Security Fix and Improvement:
- Enhanced httpd for Reflected XSS.

New:
- New UI for Wireless Time Scheduling.
- New Ookla Internet Speedtest.

Bug Fixes and Improvements:
- Fixed the abnormal connection with load-balance mode when the Primary WAN is static.
- Fixed Network Map page issue when dual wan is enabled.
- Fixed and enhanced AiMesh related issues.
- Fixed memory leak issue.
- Enhanced for network map client type/name.
- Fixed Bandwdith Limiter of Guest Network in RE node.
- Enhanced nvram space usage.
- Added to configure DSL WAN interface MTU.
- Fixed speed meter of Bandwidth Monitor will disappear while traffic flow over 100 MB.
- Fixed DSL WAN add PVC failed issue.
- Fixed cannot update some DSL WAN PPPoE configuration issue in WAN > Internet page.

Please unzip the firmware file first then check the MD5 code.
MD5: eeff9ae4bc6e6cdd99d0bbe4fb1bfece

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U/R.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: d29d50f2e5eae3f8452b1eae0966559a

Security Fixes and Improvement:
- Fixed httpd Command Injection.
- Enhanced brute-force protection for ssh and telnet.
- Fixed CVE-2019-15126 (Kr00k) vulnerability.
- Enhanced httpd for Directory traversal.
- Enhanced httpd for Reflected XSS.

New:
- Added AiMesh Web Page.

DSL:
- Updated ATM/PTM ISP List.
- Updated DSL firmware to v1.0.5.1.
- Updated DMT library to V5.6.36.0.
- Added Italy ISP Vodafone to ATM auto detection list.
- Disabled bitswap while manual setting area is Turkey.
- Fixed possible wrong ATM detection in QIS.
- Fixed setting IPTV profile not work in QIS.
Bug Fixes and Improvements:
- Fixed and enhanced AiMesh related issues.
- Fixed mac repeat bug and app client list compatibility.
- Fixed sometimes failed to feedback.
- Removed key/cert in exported ovpn file if configure "user auth. only" on OpenVPN server advanced settings.
- Reduced time of client status from connected to disconnect on OpenVPN server page.
- Fixed Let's Encrypt can't be enabled by IE.
- Fixed wrong Authentication Failed error of OpenVPN client, which is actually network connectivity issue.
- Fixed OpenVPN client sometimes fail to connect in topology subnet case.
- Enhanced Roaming assistant by MAC filter based probe response.
- Enhanced networkmap with vendor class query.
- Added two new Adaptive QoS modes, Learn-From-Home and Work-From-Home.
- Added 5 new app icons of Bandwidth Monitor.
- Fixed OpenVPN client not support compress lz4-v2 option.
- Fixed OpenVPN client not support tls-crypt option.
- Fixed OpenVPN client not handle some routing rules from server correctly.
- Fixed the Samba config of the RE node.
- Added download certificate function on system page.
- Added self-signed certificate with SAN (V3) for importing into browser.
- Updated dnsmasq to 2.81.
- Fixed support for USB disks with a single quote in their model name.
- Fixed live update issues.
- Updated Feedback Problem Description and string tags.
- Updated openssl to 1.1.1g.
- Fixed httpd access issue.
- Added a new option, Continuous Mode, in WAN DHCP query frequency setting.
- Fixed the client status error of OpenVPN Server if multiple user connected with same account.
- Fixed USB Modem not to check SIM of Android phone.
- Fixed Let's Encrypt renew certificate failed.

Please unzip the firmware file first then check the MD5 code.
MD5: 5003b025b19eaab8a0dee3a415e1491b

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U/R. Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: 3d21cd80abe1e793bec9326f24d44163

DSL:
- Added ADSL profile for Lebanon ISP Ogero.

Bug Fixes and Enhancements:
- Improved the USB Application page.
- Fixed kernel panic by kernel l2tp.
- Fixed missing some routing rules.
- Fixed the issue of OpenVPN client over PPTP/L2TP WAN.
- Improved for OpenVPN client not stopped correctly.
- Improved monotonic time of pppd/rp-pppoe/rp-l2tp.
- Improved server route handling of PPTP/L2TP.
- Fixed AiMesh related issues.
- Fixed ddns server replacing in the exported client profile of OpenVPN server.
- Improved the flow of checking Let's Encrypt at boot up.
- Fixed Let's Encrypt issue with uppercase domain.
- Improved the web page after updated Let's Encrypt certificate.
- Improved feedback and live update if network is unstable.
- Fixed incorrect routing rule of wan.
- Updated dnsmasq to 2.80-95-g1aef66b, fix CNAME loop.
- Fixed PPTP/L2TP reconnection issue.
- Fixed sometimes feedback failed.
- Updated odhcp6c to 1.1-97-ge199804
- Improved nvram space shortage which caused some configuration missing after reboot.

Please unzip the firmware file first then check the MD5 code.
MD5: 35b01ce51bd744604ac5403551b801bf

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U/R.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: 73e3632287830c06cd0d00666b5855ce

New Feature:
- LAN Host Name setting in LAN - LAN IP page.

Bug Fixes and Improvements:
- Fixed AiMesh related issues.
- Fixed dnsmasq issues.
- Fixed URL filter rule size limitation issue.
- Enhanced for possible Feedback failed.
- Fixed changing timezone but not sync in uptime for web page.
- Fixed time scheduling might not work issue.
- Fixed Wireless MAC filter cannot be deleted correctly.
- Fixed abnormal action of the PPP connection in the fail-back mode.
- Fixed Tunnel or DDNS related function doesn't work if VPN Client is enabled.
- Update to ACMEv2 support for Let's Encrypt.

Please unzip the firmware file first then check the MD5 code.
MD5: b4c6883c36a3eb64e87740056ae80c11

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U/R.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: 10b5920e9fb25df5943c8a2e810e42f4

New Feature:
- Now supports setup as AiMesh RE node.

Security Fixes and Improvements:
- Enhanced for Specially-crafted HTTP packet DoS/DDoS attack.

DSL:
- Added VDSL profile for Italy ISP Vodafone.

Bug Fixes and Improvements:
- Enhanced rule list of bandwidth limiter to be cleaned while turning QoS off.
- Updated Samba.
- Fixed AiMesh related issues.
- Fixed the DNS of PPTP/L2TP client may be replaced by the DNS of WAN in pure PPPoE environment.
- Added a hint while enable WPS and wireless authentication method is WPA2-Enterprise or WPA-Auto-Enterprise.
- Added language: KR/NL/SL.
- Fixed multiple memory leaks.
- Added multi-language for client name, AiMesh location on web page.
- Fixed setting wrong protocol of OpenVPN client.
- Enhanced possible domain resolv issue while enable OpenVPN client.
- Enhanced feedback content.
- Added the hint of CA related content error and added LZ4 option in Compression item of OpenVPN server.
- Enhanced SSH/Telnet login protection.
- Added IPv6 support for OpenVPN interface.
- Fixed OpenVPN client manual setting issue.
- Enhanced exported OpenVPN profile comptibility for older version of OpenVPN.
- Fixed possible wrong state of Openvpn server.
- Fixed error of the messaage dnsmasq-dhcp failed to write /var/lib/misc/dnsmasq.leases: No space left on device (retry in 60s).
- Fixed tdts potential OOM and networkmap OOM issue.
- Fixed setting wrong port with some OpenVPN profile.

Please unzip the firmware file first then check the MD5 code.
MD5: 33fa13b545b5c8eff24c4fdb421462e0

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: 730f29a52ebe9a30ca4d224b3bda0cf8

Security Fixes and Improvements:
- Fixed CVE-2019-11477, CVE-2019-11478, CVE-2019-11479.
- Updated OpenSSL to 1.0.2s.
- Fixed buffer overflow of Lighttpd.
- Fixed buffer overflow in asusdiscovery.
- Fixed command inject in the web-based management interface.
- Fixed AiCloud vulnerability by request long url.
- Block domain name resolving queries of suspicious servers. Disable execution permission of /jffs, suspicious files removal.

DSL:
- DSL firmware updated: v1.0.4.9.
- Updated dmt library to V5.5.2.11_20190418.
- Fixed compatibility issue with Turkish ISP. The moment the VDSL is about to go online, the DSLAM voluntarily gives up.
- Fixed compatibility issue with Austria ISP A1.

Bug Fixes and Improvements:
- Fixed roaming IOT issue.
- Support new Feedback mechanism.
- Enhanced status report of tunnel for related server.
- Enhanced to connect to router with SSH through tunnel.
- Fixed AiMesh related issues.
- Fixed password input field autocomplete.
- Updated OpenVPN to 2.4.7.
- Enahanced www to avoid special tag cause XSS issue.
- Updated URL of TrendMicro Privacy and Personal Data Collection Disclosure.
- Enhance DM api retry mechanism.
- Fixed memory corruption issue by over size beacon.
- Fixed the exported file from OpenVPN Server not include static key.
- Fixed portrigger rules issue.
- Update Tuxera modules. Fixed ntfsck cannot allocate memory with 4TB disk.
- Added Rog Client type and icon in clientlist.
- Added a new field "ASUS Service No./Case#" in feedback page.
- Fixed client mode MFP (Protected Management Frame) interoperability issue.
- Fixed ACME clients retry too fast and added User-Agent in header.
- Fixed wrong ctf disable condition.
- Removed some of the AiCloud features of sharing files to social networking sites.
- Fixed wrong OpenVPN client state even run successfully.
- Fixed the browser compatibility issue in Guest Network page.
- Updated DHCP, DMZ, WOL FAQ links.
- Enhanced networkmap.
- Updated the URL of Find supported firmware in NetworkMap AiMesh.
- Add wireless interface at node client.
- Fixed javascript error in Roaming Block List page.
- Fixed client connect to Guest Network be recognized as wired.
- Fixed client list issues.

Please unzip the firmware file first then check the MD5 code.
MD5: 31d6f1e6d7d94c07b9dde23e464e54e5

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: e050f3b3475412d8b07f4579653c7b7c

Security Fixes and Improvements:
- Fixed CVE-2004-0789 (DNS Response Flooding) vulnerability
- Updated OpenSSL to 1.0.2q
- Improved HTTPS of HTTP server
- Fixed httpd:
* CVE-2018-17021, XSS in appGet.cgi
* CVE-2018-17022, buffer overflow in ej_select_list
* DoS in blocking_request.cgi
* Reflected Cross-Site Scripting via appGet.cgi
* Missing Cross-Site Request Forgery Protection on appGet.cgi
* Command Injection via load_script Hook in appGet.cgi
* Uncontrolled Format String via nvram_match Family in appGet.cgi
* Stack Buffer Overflow via delete_sharedfolder() in appGet.cgi

New features:
- Support UTF8 SSID.
- Support Let's Encrypt.
- Added USB3.0/2.0 mode in Advanced Settings -> Administration -> USB Setting

DSL:
- DSL firmware updated: v1.0.4.7.
- Fixed WAN not be executed correctly in some cases. e.g. G.Vectoring + G.INP.
- Changed to VDSL PTM mode by default.
- ADSL WAN (ATM) QIS manual setting list updated,
Added Turkey ISP, D-Smart Net
Added Turkey ISP, Turkcell Superonline
Added Turkey ISP, Doping

Bug Fixes and Improvements:
- Fixed AiMesh related issues.
- Fixed TrendMicro module issues.
- Fixed SIP Pass-through issue.
- Fixed 2TB partition(or bigger) was generated by the newest Win10 cannot be mounted.
- Added Live Update in QIS.
- Fixed TrendMicro functions not work with DSL-AC68R.
- Fixed OpenVPN client password with special character %.

Please unzip the firmware file first then check the MD5 code.
MD5: fff67fdff90de312947fc196b45c1bd3

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: fa0a446ebb23cc5fc94ea06f7a200356

Note: If you upgraded to v3.0.0.4.384_21126(already removed from support site) earlier and experienced DSL failed to work/internet connection could not be established issue, please upgrade with v3.0.0.4.384_21128 twice. Do not reset firmware to factory default or make any changes in firmware settings between the two update attempts.

Security Fixes and Improvements:
- Fixed OpenVPN users could login to access Web UI.
- Modified permission of OpenVPN Server account to access other service.

New features:
- Now supports AiMesh feature.
- Support hide SSID in Guest Network.

DSL:
- DSL firmware updated: v1.0.4.6.
- DSL driver updated: v5.5.2.10 .
- Fixed VDSL low upload speed issue reported from UK.
- Enhancements for Turkey ISP Turk Telekom.
- Enhancements for Australia ISP Aussie Broadband and Telstra.
- Added the option for DHCP query frequency.
- VDSL WAN (PTM) QIS manual setting list updated,
Updated Australia ISP, Aussie Broadband
Updated Australia ISP, Skymesh (Automatic IP) (NBN)
Updated Australia ISP, Skymesh (PPPoE) (NBN)

Bug Fixes and Improvements:
- Fixed FAQ link in Smart Sync page.
- Improved capability issue with some Huawei USB modems.
- Fixed static IP validation in QIS.
- Updated DNS from server if OpenVPN client connected.
- Fixed missing of Internet connection (LAN) tab in Traffic Monitor if Dual WAN enabled.
- Fixed sometimes TrendMicro functions could not work.
- Modified EULA in DDNS, AiProtection, Adaptive QoS, Traffic Analyzer, Web history, Feedback page.
- Added Privacy declaration page.
- Fixed some issues of IPv6.
- Modified limitation of Port Forwarding rules to 64.
- Disable 5GHz Tx Frame Burst by default for certain countries.


Please unzip the firmware file first then check the MD5 code.
MD5: b151d241cef045b21c69cf09308e4060

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: 0107106f0869ede3392bacfc073c1e11

Security Fixes and Improvements:
- Fixed CVE-2017-11344: Global buffer overflow.
- Fixed CVE-2017-11345: Stack-based buffer overflow.
- Fixed CVE-2017-11420: Stack-based buffer overflow.
- Fixed CVE-2017-13704: dnsmasq crash.
- Fixed CVE-2017-14491: DNS - 2 byte heap based overflow.
- Fixed CVE-2017-14492: DHCP - heap based overflow.
- Fixed CVE-2017-14493: DHCP - stack based overflow.
- Fixed CVE-2017-14494: DHCP - info leak.
- Fixed CVE-2017-14495: DNS - OOM DoS.
- Fixed CVE-2017-14496: DNS - DoS Integer underflow.
- Fixed CVE-2017-9417: Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors.
- Fixed CVE-2017-12754: Stack buffer overflow.
- Fixed CVE-2018-5721: Stack-based buffer overflow.
- Fixed CVE-2018-5999/6000: processing of POST requests continues even if authentication fails.
- Fixed CVE-2018-8879: cleanup the bloat.
- Fixed AiCloud XSS vulnerabilities.
- Fixed predictable session tokens, logged user IP validation, Logged-in information disclosure.
- Fixed web UI authorization vulnerabilities.

New features:
- Now supports Guest Network > Bandwidth Limiter feature.
- Support URL Filter Black/White list.
- URL Filter now supports HTTPS sites.
- Support USB HDD Hibernation.

DSL:
- DSL firmware updated - v1.0.4.3.
- DSL driver updated - v5.5.2.9.
- Fixed G.vector compatibility issue with Greece ISP.
- Fixed possible ADSL Annex M connect issue.
- Fine tune NetworkMap for VDSL Regional Mode.
- Added Internet Detection (PPP Echo and DNS Probe) settings in DSL WAN.
- Simplify settings for UK Sky in QIS. Removed username / password.
- Fixed DSL setting not apply properly in QIS.
- VDSL WAN (PTM) QIS manual setting list updated,
Added Australia ISP, Exetel (NBN)
Added Australia ISP, Tangerine Telecom (NBN)
Added Australia ISP, Telecube (NBN)
Added Australia ISP, Skymesh (PPPoE) (NBN)
Updated Australia ISP, Skymesh (Automatic IP) (NBN)
Added Australia ISP, MyRepublic
Added Australia ISP, Buzz Telco
Added Australia ISP, Aussie Broadband
Added Cyprus ISP, CYTA
Added India ISP, Airtel (Automatic IP)
Added Mexico ISP, Telmex
Added Turkey ISP, TurkNet
- ADSL WAN (ATM) QIS manual setting list updated,
Added Kuwait ISP, Qualitynet (PPPoA)
Added Kuwait ISP, Qualitynet (PPPoE)
Added Turkey ISP, TurkNet

Please unzip the firmware file first then check the MD5 code.
MD5: 5ae5b520ac27ef4dad1383194d736e63

Once it is rescued, please make sure upgrade again with upper general firmware from the following in Web UI of DSL-AC68U/R.
Advanced Settings > Administration > Firmware Upgrade

Please unzip the firmware file first then check the MD5 code.
MD5: 75ad01489eab34d9d0fe21d98304ee4d