New MR 29.5.1 Stable Release Candidate - fixes for CVEs TBA

cmr
Kind of a big deal
Kind of a big deal

New MR 29.5.1 Stable Release Candidate - fixes for CVEs TBA

Wireless firmware versions MR 29.5.1 changelog

Important note

  • Meraki APs use UDP port 7351 for cloud communication and TCP ports 80 and 443 for backup communications when running MR 27 and older firmware. When running MR 28+ firmware, Meraki APs will now use TCP port 443 as the primary means for cloud connectivity. In order to maintain connectivity to the Meraki cloud on MR 28+ ensure that TCP port 443 is allowed to communicate with 209.206.48.0/20 on firewalls that are deployed upstream of your Meraki APs. (Wi-Fi 6 and Wi-Fi 6E APs)

Legacy product notice

  • When configured for this version, MR12, MR16, MR18, MR24, MR26, MR32, MR34, MR62, MR66, and MR72 will run MR 26.8.3.

Bug fixes

  • General stability and performance improvements

Known issues

  • Sporadic packet loss & instability on Layer 3 roaming & Teleworker VPN SSID's (Wi-Fi 5 Wave 2 and Wi-Fi 6 APs)
18 REPLIES 18
RaphaelL
Kind of a big deal
Kind of a big deal

The good ol'

BUG FIXES

  • General stability and performance improvements

😕

jrhop
Getting noticed

Any idea when they will reveal the CVEs and their severity? It must be pretty serious as we have had an email saying we are going to be upgraded to 29.5.1 in a week or so and it only came out on the 23rd Jan.

Would you mind sharing the contents of said 29.5.1 CVE email?

 

Miguel

Hi @MiguelMVLA the email we received didnt say anything about the CVEs, it should said we would be automatically upgraded. I would also like to know the details on the CVEs. I have upgraded all our 100+ APs to 29.5.1, no issues reported so far.

antonis_sp
Building a reputation

Will this ever be fixed? 😋 It's been a few years now.

 

KNOWN ISSUES

  • Sporadic packet loss & instability on Layer 3 roaming & Teleworker VPN SSID's (Wi-Fi 5 Wave 2 and Wi-Fi 6 APs)
Adoos
Building a reputation

What does it even mean. Would be nice to know more detail around this legacy bug. 

MiguelMVLA
Here to help

Understood, thank you for clarifying.

Miguel
NolanHerring
Kind of a big deal

The release notes from 29.5 and 29.5.1 are identical, like 100% the same. So what did this introduce/fix?

Nolan Herring | nolanwifi.com
TwitterLinkedIn

NolanHerring, thank you for calling out the pain point of release notes being vague...Quite a few of us are experiencing widespread client disconnects due to "excess frame loss" and it would be great to know if the release in question addresses it or if the problem is noted as a known issue.

Miguel
cmr
Kind of a big deal
Kind of a big deal

29.5.1 is purely a security update to address as yet to be advised CVEs.  No other fixes.

jrhop
Getting noticed

Any update on when the CVE details will be released?

cmr
Kind of a big deal
Kind of a big deal

The 29.5.1 firmware has now been promoted to be a stable release.  I have chased for more information on the particular CVEs it fixed.

cmr
Kind of a big deal
Kind of a big deal

This is now a stable release and the CVE is as below:

 

SECURITY FIXES

Adoos
Building a reputation

Can anyone explain in more detail - 

 

  • Sporadic packet loss & instability on Layer 3 roaming & Teleworker VPN SSID's (Wi-Fi 5 Wave 2 and Wi-Fi 6 APs)

 

CarlosR
New here

Wondering if anyone have been experiencing issues after this version was deployed. Random clients disconnections, band change (5 to 2.4 or vice versa)....

cmr
Kind of a big deal
Kind of a big deal

Do you have client balancing or band steering turned on?  Either can do that and they have become more active in recent releases.

Band Steering. Disabling it made disconnections to reduce. But is this going to be like that now? a new feature or a bug to be fixed?

Cheers.

DarNic
Conversationalist

We have upgraded multiple sites to 29.5.1 with no issues. We made sure client load balancing was disabled as well. This fixed a number of disconnect issues and guest registration through ISE. 

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels