2026-09-04 06:09 UTC
@xrobau@mastodon.au Any chance of some reference to the issue - a CVS or something?
Replies (1)
-
@ewenmcneill@cloudisland.nz 2026-09-04 08:35
@kauer@aus.social Mikrotik are basically saying “patch now, we’ll tell you why later”. So no public CVEs yet. But all release trains got patched today. People analysing the binary diffs suggest there’s changes to username parsing and RSA signature verification, either or both may be the critical fix. (Link is one person’s analysis.) I’ve seen reports that 7.23.4 (now “long term”) breaks DHCPv6, but reports suggest it works on 7.24.2 (“stable”). CC @xrobau@mastodon.au https://npratley.net/reversing-mikrotiks-silent-patch-the-routeros-7-23-4-fix-they-wouldnt-explain/