Gearlinx firmware release - 25.12.34.0

The latest Gearlinux release is available across all products. It is a fairly vanilla update. The interesting aspects of this release are summarized below.

New features

NR44XX platforms now boast configurable time series logging of all aspects of the Gearlinux system, including all customer configured functionality.  Full Grafana access is provided for customizing visual representations and a comprehensive default dashboard for general use. 

Additional network status information on all networking devices.

Bug fixes

Improved WebUI scaling/rendering for 4k and higher resolution displays.

Security

The following security updates in sensitive packages are included in this release.

• Linux 6.17
  Gearlinux updates to current linux kernels four times a year. This roughly correlates with linux release frequencies. This commitment to keeping software fresh is important when you consider there were over 1000 vulnerabilities addressed within the linux kernel alone. Products that lock in a kernel version cannot provide a convincing security position.
• OpenSSL 3.6.0
  CVE-2025-9230 Out-of-bounds read & write in RFC 3211 KEK Unwrap
  CVE-2025-9231 Timing side-channel in SM2 algorithm on 64 bit ARM
  CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling
• Openssh 10.2
  Minor bug fix changes
• OpenVPN 2.6.17 (OEM platforms)
  CVE-2025-2704 fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2