Is v5.26 also contain latest vulnerabilities?

RouterOS General
1

I understand 5.26 is quite a bit behind the times these days, but also 5.x was being updated at one point fixing vulnerabilities.. is this no longer the case? Or was 5.26 so old that it didn’t have the compromised ntp issue?

I am just wondering if I should be going through the effort of upgrading the older systems. They work perfectly and give me no reason to upgrade so I leave them alone. However if they are becoming vulnerable then that changes my outlook. :smiley:

Thanks!
-Brian

Examples below:
What’s new in 6.24 (2014-Dec-23 13:38):

*) ntp - fixed vulnerabilities;


What’s new in 5.26 (2013-Sep-04 15:01):

*) ssh - fixed denial of service;

2

upgrading kernel or ntp would risk completely destabilizing v5.26 and would require major work and major testing.
many people prefer v5.26 because it works fine as it is. simply disable ntp and implement strong firewall and you will be fine

3

Great thank you, I am all about if its not broken don’t fix it. :smiley: I appreciate the response.