KerOS firmware v5.12.0 (November 2025)

Changes from v5.11.0

Fix various security vulnerabilities
- CVE-2024-32384
- CVE-2024-39148
- CVE-2024-32388
- Remove LNS credentials from debug logs

IPSec is not yet supported
Some issues with the Wi-Fi interface (instabilities, no fallback…) on Wirnet iFemtoCell
When upgrading from KerOS firmware 4.x, all trustzone secrets are lost
When upgrading from KerOS FW 4.3.3, a hardware reset is necessary for FW 5.x burner to correctly detect USB
Update status for an update from KerOS FW 5.1.x, FW 5.2.x or FW 5.3.x is in error, but the update is working fine
No more support of GSM dongles (please contact Kerlink if you plan to use one)
When iZepto-E is powered by a computer, it cannot benefit from the connection of a gateway in router mode
The activation/deactivation of the GSM from the local web interface takes some time to execute, so previous activation status remains displayed for a while. A page refresh after a delay of 15-20s after the action shows the right status
TAI clock offset can not be set on iStation with NEO-M9N. Class B does not work.

Compatible with Wirnet™ i-series gateways (Wirnet iBTS, Wirnet iFemtoCell, Wirnet iStation, Wirnet iFemtoCell-evolution, Wirnet iZeptoCell Ethernet, Wirnet iZeptoCell Cellular).

Compatible with Wirnet™ i-series gateways secured with Kerlink Production fuses or without any fuses flashed.
Regular update (keros.ipk) is incompatible with firmware older than v5.x

To upgrade the system from KerOS version 4.3.3 to KerOS version 5.x the use of a liveburner is MANDATORY. Two possibilities are available:
Upgrade with a custom liveburner. It allows to keep some elements like gateway configuration. To use a custom liveburner, please refer to the dedicated page: Major version upgrade with a custom liveburner.
Upgrade with a regular liveburner (erasing the whole partition to reinstall the firmware)

The firmware is released in two formats: KerOS and Liveburner.

KerOS : Update the Firmware
To update the firmware from v5.x, the regular update procedure can be used. See system upgrade page.

Liveburner : Reset the Firmware of the product

If you are using SSH keys, you must complete the following step before running the upgrade to make sure your keys are preserved. Run this command:

echo "/home/root/.ssh" > /etc/sysupgrade.d/ssh.conf

This ensures that your SSH keys are retained during the upgrade process.

KerOS IPK 5.12.0:keros_5.12.0_klkgw-signed.ipk md5: 0f890bd1dde1d43e8ea1b2e1961257ec
Liveburner IPK 5.12.0: liveburner_5.12.0_klkgw-signed.ipk md5: ef534a01d5eb4ad44533d557ef98a00a
Liveburner IPK 4.3.3-2: liveburner_4.3.3-2_klkgw-signed.ipk md5: 12CFEFB8D4630A34AA90C77E6C73A193
Custom liveburner IPK 5.12.0: custom-liveburner_5.12.0_klkgw-signed.ipk md5: d425f32b3d92f8fff4eb762a92c66a85
Update liveburner package: update_liveburner_package-v5.12.0.tar.gz md5: 46588b0de902679e048f171eafe02002
64-bit toolchain: poky-glibc-x86_64-keros-toolchain-klkgw-5.12.0.sh md5: dfeb4c04b2a3855241a8f17c2ecfe0df
Hotfix for KerOS6 installation through KerOS 5 WebUI
Lorad 2.5.2 package: lorad-hotfix_2.5.2_klkgw.ipk; md5: 112e54f4740f2aa614d578c936783a00