Question Regarding Security Updates and CRA Compliance
-
Hi everyone especially @Zheng-Han ,
I have a question regarding security updates for the Omega2S.
Currently, the device is being shipped with OpenWrt 23.05.x. As far as I understand, this branch has reached end-of-life upstream and no longer receives ongoing security updates from the OpenWrt project.
Since Onion Corporation is selling products into the EU market, I would like to ask how this aligns with the requirements of the Cyber Resilience Act, which requires manufacturers of products with digital elements to provide security updates for a defined support period.Specifically:
Are there plans to provide ongoing security patches for the Omega2S firmware?
Will there be an upgrade to a currently supported OpenWrt release?
Is there an official security support timeline for the Omega2S?I’m asking purely from a security and compliance perspective, as long-term patch availability is becoming increasingly important for commercial deployments within the EU.
Thank you for any clarification.