New MR 29.5.1 Stable Release Candidate - fixes for CVEs TBA

[cmr]

Wireless firmware versions MR 29.5.1 changelog

Important note

• Meraki APs use UDP port 7351 for cloud communication and TCP ports 80 and 443 for backup communications when running MR 27 and older firmware. When running MR 28+ firmware, Meraki APs will now use TCP port 443 as the primary means for cloud connectivity. In order to maintain connectivity to the Meraki cloud on MR 28+ ensure that TCP port 443 is allowed to communicate with 209.206.48.0/20 on firewalls that are deployed upstream of your Meraki APs. (Wi-Fi 6 and Wi-Fi 6E APs)

Legacy product notice

• When configured for this version, MR12, MR16, MR18, MR24, MR26, MR32, MR34, MR62, MR66, and MR72 will run MR 26.8.3.

Bug fixes

• General stability and performance improvements

Known issues

• Sporadic packet loss & instability on Layer 3 roaming & Teleworker VPN SSID's (Wi-Fi 5 Wave 2 and Wi-Fi 6 APs)

[RaphaelL]

The good ol'

BUG FIXES

• General stability and performance improvements

😕

[jrhop]

Any idea when they will reveal the CVEs and their severity? It must be pretty serious as we have had an email saying we are going to be upgraded to 29.5.1 in a week or so and it only came out on the 23rd Jan.

[MiguelMVLA]

Would you mind sharing the contents of said 29.5.1 CVE email?

[jrhop]

Hi @MiguelMVLA the email we received didnt say anything about the CVEs, it should said we would be automatically upgraded. I would also like to know the details on the CVEs. I have upgraded all our 100+ APs to 29.5.1, no issues reported so far.

[antonis_sp]

Will this ever be fixed? 😋 It's been a few years now.

KNOWN ISSUES

• Sporadic packet loss & instability on Layer 3 roaming & Teleworker VPN SSID's (Wi-Fi 5 Wave 2 and Wi-Fi 6 APs)

[Adoos]

What does it even mean. Would be nice to know more detail around this legacy bug. 

[MiguelMVLA]

Understood, thank you for clarifying.

[NolanHerring]

The release notes from 29.5 and 29.5.1 are identical, like 100% the same. So what did this introduce/fix?

[MiguelMVLA]

NolanHerring, thank you for calling out the pain point of release notes being vague...Quite a few of us are experiencing widespread client disconnects due to "excess frame loss" and it would be great to know if the release in question addresses it or if the problem is noted as a known issue.

[cmr]

29.5.1 is purely a security update to address as yet to be advised CVEs.  No other fixes.

[jrhop]

Any update on when the CVE details will be released?

[cmr]

The 29.5.1 firmware has now been promoted to be a stable release.  I have chased for more information on the particular CVEs it fixed.

[cmr]

This is now a stable release and the CVE is as below:

SECURITY FIXES

• Qualcomm wireless chipset vulnerability - https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwa93623 (Wi-Fi 5 Wave 2 and Wi-Fi 6 APs)

[Adoos]

Can anyone explain in more detail - 

• Sporadic packet loss & instability on Layer 3 roaming & Teleworker VPN SSID's (Wi-Fi 5 Wave 2 and Wi-Fi 6 APs)

[CarlosR]

Wondering if anyone have been experiencing issues after this version was deployed. Random clients disconnections, band change (5 to 2.4 or vice versa)....

[cmr]

Do you have client balancing or band steering turned on?  Either can do that and they have become more active in recent releases.

[CarlosR]

Band Steering. Disabling it made disconnections to reduce. But is this going to be like that now? a new feature or a bug to be fixed?

Cheers.

[DarNic]

We have upgraded multiple sites to 29.5.1 with no issues. We made sure client load balancing was disabled as well. This fixed a number of disconnect issues and guest registration through ISE.