Firmware release notes 5.0.1

This article is a stub. Main article: Firmware release notes 5.0.x.

Release 5.0.1

Release name: "Zinalrothorn" 5.0.1. Release date: October 29^th, 2026.

Applies to HMP400/W, iBX410/W, iBX440, HMP350, HMP300, DiVA, and third-party DSOS players.
Firmware version number: 5.0.1-1.0.0-7ff2fbc7

Local Network Access checks from Web Page layers are now disabled; they had been enabled in DSOS 4.10.0 with the update to CEF / Chromium 144 but cause compatibility problems due to an incomplete implementation in CEF.
The Recovery Console is updated to version 2.33.0.

Fixed spurious error messages in the boot log when applying IPv6 settings to ignore routes through disconnected network links. The configuration was applied successfully despite the reported errors.

Applies to all DSOS players, except for HMP350, HMP300, and DiVA.

Fixed an issue that could cause players to crash when loading Web Page layers with secure context enabled and that access the local network; this was a regression introduced in DSOS 4.10.0 with the enabling of Local Network Access checks.

Updated the following base libraries and components, fixing several security vulnerabilities:

apache2: updated from 2.4.68 to 2.4.69, addressing CVE-2026-42528, CVE-2026-93546, CVE-2026-42356, CVE-2026-48005, CVE-2026-56154, CVE-2026-58415, CVE-2026-59797, CVE-2026-73636 and CVE-2026-73637, all of which could affect DSOS, and CVE-2026-57941, CVE-2026-59685, CVE-2026-63292, CVE-2026-46729, CVE-2026-47360, CVE-2026-56153, CVE-2026-56449, CVE-2026-63045, CVE-2026-63686, CVE-2026-63718 and CVE-2026-79768, none of which affected DSOS.
ca-certificates: updated from version 20260223 to 20260816 and removed the "emSign ECC Root CA - G3" root certificate to effectively remove trust in compromised eMudhra certificate authorities, enhancing the security of SSL connections.