MikroTik RouterOS MIPS-BE Firmware 6.39 RC 49

What's new in 6.39rc49:

- www - fixed http server vulnerability; 
- capsman - improved CAP status querying;
- defconf - fixed default configuration generation when wireless package is disabled;
- ike2 - check child state before allowing rekey;
- ike2 - send EAP identity as user-name RADIUS attribute;
- lte - added LTE signal level reading for Cinterion modems;
- queue - fixed reboot loop when queues were used (introduced in 6.39rc42);
- rb3011 - added partitioning support;
- tr069-client - added "Device.Hosts.Host.{i}." support;
- userman - fixed rare crash when User Manager requested file does not exist on router;
- wireless - fixed RBSXT5HacD2nr2 small channel support;

Other changes since 6.38.5:

- bridge - added "fast-forward" setting and counters (enabled by default only for new bridges) (CLI only);
- bridge - added support for special and faster case of fastpath called "fast-forward" (available only on bridges with 2 interfaces);
- filesystem - fixed rare situation when filesystem failed to read all configuration on startup;
- filesystem - fixed rare situation when filesystem went into read-only mode (some configuration might have gotten lost on reboot);
- firewall - discontinued support for p2p matcher (old rules will become invalid);
- l2tp - added fastpath support when MRRU is enabled;
- ppp - completely rewritten internal fragmentation algorithm (when MRRU is used), optimized for multicore;
- ppp - implemented internal algorithm for "change-mss", no mangle rules necessary;
- pppoe - added fastpath support when MRRU and MLPPP are enabled;
- quickset - configuration changes are now applied only on "OK" and "Apply" (not on mode change);
- winbox - minimal required version is v3.11;
- address - fixed crash when address is assigned to another bridge port;
- capsman - added CAP discovery interface list support;
- capsman - added save-channel option to speed up frequency selection on CAPsMAN restart;
- capsman - added support for static virtual interfaces on CAP;
- capsman - improved support for communicating frame priority between CAP and CAPsMAN;
- certificate - allow CRL address to be specified as DNS name;
- defconf - fixed Groove 52 ac band settings;
- dhcp-client - added "script" option which executes script on state changes;
- dhcpv4-server - added "lease-hostname" script parameter;
- dhcpv4-server - do some lease checks only on enabled object;
- dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=21&t=116471);
- email - check for errors during SMTP exchange process;
- ethernet - renamed "rx-lose" to "rx-loss" in ethernet statistics;
- gps - added "fix-quality" and "horizontal-dilution" parameters;
- graphing - fixed graph disappearance after power outage;
- hotspot - added access to HTTP headers using $(http-header-name);
- ike2 - always replace empty TSi with configured address if it is available;
- ike2 - default to /32 peer address mask;
- ike2 - fixed EAP message length;
- ike2 - fixed ISA handler object removal on SA delete;
- ike2 - fixed ph2 state when sending notify;
- ike2 - fixed state when sending delete packet;
- ike2 - update "calling_station_id" radius attribute;
- ike2 - update peer identity after successful EAP authentication;
- ippool - return proper error message when trying to create duplicate name;
- ipsec - added "last-seen" parameter to active connection list;
- ipsec - better responder flag calculator for console;
- ipsec - fixed "/ip ipsec policy group export verbose";
- ipsec - fixed "mode-cfg" verbose export;
- ipsec - updated tilera classifier for UDP encapsulated ESP;
- l2tp-server - added "use-ipsec=required" option;
- leds - added LTE modem access technology trigger;
- leds - changed error message on unsupported board;
- leds - do not update single LED state when it is not changed;
- leds - show warning on print when "modem-signal-threshold" is not available;
- log - added "gps" topic;
- log - added "tr069" topic;
- log - added warning when Winbox/Dude sessions were denied;
- log - make SNMP logs more compact;
- lte - added error handling for remote AT execute;
- lte - added initial support for Quectel ec25;
- lte - added support for Vodafone R216 (Huawei);
- lte - buffer AT events while info command is active;
- lte - fixed "/interface lte info X once";
- lte - fixed IPv6 address prefix on interface
- lte - fixed network mode selection for me909u, mu609;
- lte - fixed older standard CEREG parsing;
- lte - fixed support for Huawai R216;
- lte - fixed user-command;
- ppp - fixed rare kernel failure on PPP client connection;
- ppp-client - added support for Datacard 750UL and DWR-730;
- pppoe - set default keepalive 10s for newly created PPPoE clients;
- rb1100ahx2 - fixed random counter resets for ether12,13;
- snmp - "No Such Instance" error message is replaced with "No Such Object";
- snmp - improved response speed when multiple requests are received within short period of time;
- snmp - optimized bridge table processing;
- tile - added initial support for NVMe SSD disk drives;
- tr069-client - added "Ethernet.Interface.{i}.MACAddress" parameter;
- tr069-client - added architecture name parameter (X_MIKROTIK_ArchName - vendor specific);
- tr069-client - added basic stats parameters for some interface types;
- tr069-client - added basic support for "/ip firewall filters";
- tr069-client - added connection request authentication;
- tr069-client - added DHCP server support;
- tr069-client - added parameters for DNS client management support;
- tr069-client - added ping diagnostics support;
- tr069-client - added support for escaped entity references (& < > ' ");
- tr069-client - added support for managing "/system/identity/" value;
- tr069-client - added support for memory and CPU load parameters;
- tr069-client - added traceroute diagnostics support;
- tr069-client - close connection if CPE considers XML as invalid;
- tr069-client - fixed "AddObjectResponse" “InstanceNumber” value;
- tr069-client - fixed special escape characters on XML data send;
- tr069-client - general improvements on reducing storage space;
- tr069-client - generate random connection request target path;
- tr069-client - increased performance on GetParameterValues;
- tr069-client - set CHR license ID as ".SerialNumber" value to avoid "no serial number" error in ACS;
- traceroute - small fix;
- usb - added support for more CP210X devices;
- wAP ac - improved 2.4GHz wireless performance;
- webfig - added menu bar to quickly select between Webfig, Quickset and Terminal;
- webfig - allow shorten bytes to k,M,G in firewall "connection-bytes" and "connection-rates";
- webfig - fixed delays on key press in terminal;
- webfig - fixed tab ordering on Google Chrome;
- webfig - improved field layout;
- webfig - make Terminal window work within Webfig window;
- winbox - added "group-key-update" to CAPsMAN security settings;
- winbox - added GPS menu;
- winbox - added "save-selected" setting under CAPsMAN channels;
- winbox - added "static-virtual" to wireless CAP;
- winbox - allow shorten bytes to k,M,G in firewall "connection-bytes" and "connection-rates";
- winbox - allow to change user password to empty one;
- winbox - allow to not specify certificate in IPSec peer settings;
- winbox - allow to specify certificate type when exporting it;
- winbox - allow to specify interfaces that CAPsMAN can use for management;
- winbox - allow unhide SNMP passwords;
- winbox - do not create time field when copying CAPsMAN access list entry;
- winbox - do not show empty LTE fields in Info menu;
- winbox - do not try to disable dynamic items from firewall tables;
- winbox - fixed misleading error when trying to export certificate;
- winbox - increased maximal number of Winbox sessions 20->100;
- winbox - properly name CAP Interface on new interface creation;
- winbox - removed "sfp-rate-select" setting from ethernet interface;
- wireless - added Egypt 5.8 country settings;
- wireless - apply broadcast bit to DHCP requests when using "station-pseudobridge" mode;
- wireless - do not allow equal MAC addresses between multiple Virtual APs when same "master-interface" is used;
- wireless - fixed issue when wireless interfaces might not show up in CAP mode;
- wireless - fixed occasional crash on interface disabling;
- wireless - fixed rare crash on nv2 configurations;
- wireless - fixed rare wireless ac interface lockup;
- x86 - added support for NVMe SSD disk drives;

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn’t either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn’t be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don’t always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you’re looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don’t power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don’t miss the update that will improve your device.