Hello,
I got a little paranoid when reading the following article:
I do not think I use that specific package (Attended Sysupgrade ([ASU])...I have an R7800 running [OpenWrt 23.05.3 r23809-234f1a2efa] with nothing other than adblock and Wireshark.
I started to manually upgrade each of my packages through the LUCI interface, but then wondered what the best approach to ensuring that my firmware/router/packages were up-to-date.
I see several posts on this forum indicating that its not ideal to upgrade everything...either manually or all at once via ssh.
Should I just plan on upgrading the firmware when new releases come out?
If I use the sysupgrade will it preserve my wireshark settings and profiles?
This CVE does not apply to you, then. In fact, while it was a serious potential vulnerability, it's mostly academic in that it is believed that nobody would have actually been affected.
do not do this...
Upgrading packages (via the CLI opkg upgrade command or the LuCI Upgrade... button) can result in major problems. It is generally highly discouraged, unless you know what you are doing or if there is specific instruction to do so.
I don't think I have been hacked or anything...thought I did notice that some devices on my network were having issues connecting and resolving DNS. I will need to do a fresh install then, since I have manually upgraded under a dozen of the packages via LUCI.
Question:
Is there a way to save my settings (and wireshark) but not the package upgrades I have just pushed?
No, the backups only contain the configurations/settings. That's why I specifically mentioned that you'll install any necessary packages after resetting to defaults.