v7.9.1 [stable] is released!

Announcements
1

RouterOS version 7.9.1 has been released in the “v7 stable” channel!
Before an upgrade:

  1. Remember to make backup/export files before an upgrade and save them on another storage device;
  2. Make sure the device will not lose power during upgrade process;
  3. Device has enough free storage space for all RouterOS packages to be downloaded.

What’s new in 7.9.1 (2023-May-19 15:11):
!) ipv6 - fixed DNS server processing by IPv6/ND services (CVE-2023-32154);

To upgrade, click “Check for updates” at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while a router is not working as suspected or after some problem has appeared on the device

Please keep this forum topic strictly related to this particular RouterOS release.

2

…
Would’ve been nice to have the “fixes” from 7.10beta5 in this release.

3

Bug in webfig still persists: Toggle WiFi Interface off, then on. It stays greyed out even if it got enabled. This applies to all toggable rows in any config area.

4

read the changelog

5

2023-05-22_12-52-26.jpg

6

THIS RELEASE CONTAINS ONLY ONE THING
IT IS IN THE CHANGELOG

7

Why don’t you just close this topic so that no one else could reply?

We already have another topic if someone wants to discuss the specific security issue.

8

Please feel free to continue discussing topics that are also related to the previous stable version 7.9, as the latest version 7.9.1 primarily focuses on addressing a single security fix (see http://forum.mikrotik.com/t/announcement-regarding-cve-2023-32154/166854/1)

9

As mentioned in http://forum.mikrotik.com/t/v7-9-stable-is-released/166376/224 I am also seeing a DAC cable between a CCR2004-16G-2S+ and an Aruba 1930 switch no longer being able to connect. That CCR2004 was running 7.6 before and the cable worked just fine for all releases before 7.9 (tested with 7.9, 7.9.1 and 7.10beta5).
Screenshot from 2023-05-22 09-03-44.png

10

This is also present in 7.10b. Just noticed this the other day after upgrading a couple routers to 7.9.

11

workx

Screenshot 2023-05-22 184826.jpg

12

It seems my backup script not work well

:local MODEL [/system resource get board-name]

:do {
:if ([:len [/file find type="backup" ]] > 0) do={
:foreach FILE in=[/file find name~"$MODEL.*" && type="backup" ]  do={
:local oldBackupFilename [/file get $FILE name];
/ file remove "$oldBackupFilename"
:log info message="Deleted Old Backup File--$oldBackupFilename";
 } 
 } 
 }

The $oldBackupFilename looks like RB5009UPr+S±7.9.1 (stable)-20230523.backup
Now it doesn’t work.

The scripts used to work since 6.x and I tested on another device running 7.8 which works also.

13

But did you install it on all those machines without waiting even if it was stable or if a problem came up?

14

And the rest?
What’s the use of the “:do {” at the beginning of the script?

Put “RB5009UPr+S+” inside a “~” create a new RegEx: "RB5009UPr+S+."…
so the file name searched is like
RB5009UP{one or more r}{one or more S}{any characters here}
and the + disappear from string.
For do the correct search the regexp must be writed:
RB5009UPr+S+.

This works and is less complicated, but suffer the same “+” problem:

:foreach item in=[/file find where name~"^$[/system resource get board-name]" and type="backup"]  do={
    :log info message="Deleted Old Backup File: $[/file get $item name]"
    /file remove $item
}

Hint: Use RouterBOARD name instead of the RouterBOARD model.

:foreach item in=[/file find where name~"^$[/system identity get name]" and type="backup"]  do={
    :log info message="Deleted Old Backup File: $[/file get $item name]"
    /file remove $item
}

You can control how you call the device, bout you can’t control the RouterBOARD name…

15

!) ipv6 - fixed DNS server processing by IPv6/ND services (CVE-2023-32154);

What this issue affects: The issue affects devices running MikroTik RouterOS versions v6.xx and v7.xx with enabled IPv6 advertisement receiver functionality. You are only affected if one of the below settings is applied:

the issue affects v6.xx and v7.xx, i did not see any update for v6?
I think alot of people still using v6.x.x

thx

16

@buset1974 They have already mentioned that they will be releasing it for v6 also, they are still checking the releases it takes time, probably the next day or so. Check the blog:
https://blog.mikrotik.com/security/cve-2023-32154.html

17

Thank you for that.
Using the identity name should be a better choice !

I just test again.
if I add “-”, the backup file name with MODEL will be recognized.

"$MODEL.*"  ==> "$MODEL . "-" . *"

edit: It will delete all backup file…
have to switch to use identity name.

18

( “$MODEL-.*” or (“$MODEL” . “-” . “.*”) is the same, “$MODEL . “-” . *” is wrong )

19

fasttrack counters are not working on hap ax3

20

There is a bug in v7.9.1, When upgrading CCR2004-1G-12S+2XS from v7.8 to v7.9.1 the SFP+ mudules stops sending light on random SFP+ ports, downgrading to v7.8 fix the problem again