25.2.54.212/213 - April 2025, LTS

Release category: Mandatory

Enhancements

  1. IPsec is now supported in FIPS mode.

  2. FIPS mode is now auto-enabled when Primary Responder mode is enabled.

  3. Support for a regional field in the Cellular firmware bundles has been added.

  4. Support a Pre-Login banner has been added for the CLI and Web UI.

  5. Support for a configuration banner has been added for the CLI and Web UI. By default, it will display a message if the device is being managed by a Digi Remote Manager Template.

  6. The device will now gracefully disconnect from Digi Remote Manager when performing a cellular modem firmware update over the cellular connection.

  7. The event and system logging has been updated to better log

    1. User logging in and out of the Web UI

    2. The web UI pages that a user loads

    3. To include the user when a configuration change is made

  8. The memory usage for the Query State support has been optimized.

  9. The Premium Features page in the Web UI has been renamed to Subscriptions to align with Digi Remote Manager.

  10. Support for configuring a static IPv6 address to an interface has been added.

Security fixes

Package updates will include all security updates for the stated release, unless stated otherwise.

  1. The Linux kernel has been updated to Linux LTS version 6.12.12 [DAL-10484]

  2. The OpenSSH package has been updated to v9.9p2 [DAL-10992]

    CVE-2025-26465 CVSS Score: 6.8 Medium

    CVE-2025-26466 CVSS Score: 5.9 Medium

  3. The expat package has been updated to v2.7.0

    CVE-2024-8176 CVSS Score: 7.5 High

    CVE-2024-45490 CVSS Score: 9.8 Critical

    CVE-2024-45491 CVSS Score: 9.8 Critical

    CVE-2024-45492 CVSS Score: 9.8 Critical

    CVE-2024-50602 CVSS Score: 5.9 Medium

  4. An issue with the Web UI Containers page which could make the device unresponsive when dealing with a POST request has been resolved. [DAL-10797]

  5. A DoS vulnerability with the Web UI scripts page has been resolved. [DAL-10759]

  6. A number of fixes for the Web UI Terminal page have been made including access without first logging into the Web UI. [DAL-10339, DAL-10646]

  7. The L2TP support has been updated to ensure port 1701 is not open when L2TP is disabled. [DAL-10587]

  8. A couple of cross site scripting vulnerabilities with the Web UI have been resolved. [DAL-8651, DAL-9024]

  9. The Linux kernel setting CONFIG_CPU_MITIGATIONS have been enabled. [DAL-10769]

Bug fixes

  1. A number of issues with the Query State support have been resolved. [DAL-10808, DAL-10924, DAL-10926, DAL-10961, DAL-10991, DAL-11016, DAL-11049, DAL-11082, DAL-11108, DAL-11117, DAL-11186, DAL-11200, DAL-11207]

  2. An issue where a parameter could not be configured via Digi Remote Manager as it triggers a reboot which caused issues for the Rollback feature has been resolved. [DAL-10987]

  3. An issue where the Digi Remote Manager connection not using the primary WAN interface has been resolved. [DAL-11065]

  4. A number of issues with the NEMO support have been resolved [DAL-10859, DAL-11059]

    1. Devices were not reachable over the tunnel.

    2. NEMO tunnel not working after a cellular reboot.

    3. Tx and Rx statistics have been swapped.

  5. An issue with the LAN configuration on an EX15 and EX50 where an incorrect interface device was being displayed on Digi Remote Manager has been resolved. [DAL-11069]

  6. An issue when trying to access the log files on the device via Digi Remote Manager has been resolved. [DAL-10947]

  7. An issue with WAN Bonding where the tunnel would not be reestablished after the Ethernet WAN cable was unplugged and plugged back in again has been resolved. [DAL-10811]

  8. An issue where a Python script using the digidevice.runt.get function not being stopped by the CLI system script stop command has been resolved. [DAL-10686]

  9. An issue with the Python hashlib causing a segmentation fault when the device in Primary Responder mode has been resolved. [DAL-11168]

  10. An issue with IPsec where inbound IKE packets were being blocked after a period of time has been resolved. [DAL-10543]

  11. An issue where the built in script modem_sim_info could leave SureLink and SIM Failover configuration disabled has been resolved. [DAL-10850]

  12. An issue where multiple log messages indicating the cloud connector being stopped when Digi Remote Manager support is disabled has been resolved. [DAL-11071]

  13. An issue with the runt application crashing causing the device to reboot have been resolved. [DAL-10979]

  14. An issue with Containers failing to deploy via Digi Remote Manager has been resolved. [DAL-10964]

  15. An issue with the Cellular Modem Firmware bundle support where the incorrect bundle version being reported has been resolved [DAL-11161]

  16. An issue where the event log could be filled with serial reloading messages has been resolved. [DAL-11073]

  17. An issue with IPv6 cellular connections where the supplied DNS servers where not being setup correctly has been resolved. [DAL-11211]

  18. An issue with Speedtest not working with IPv6 has been resolved. [DAL-11220]

  19. An issue with the SIM2 detection on the EX50 platform has been resolved. [DAL-11316]