On Sat, 2021-12-25 at 03:15 -0800, Jonathan Ryshpan wrote:
On a whim I opened up the:
Legal Disclaimer Open Source Licenses
in the management page for my fiber modem (ATT installed 2021/03/30) and discovered that the kernel is rather old:

Since this seems to have produced a modest amount of interest, I'm posting a little more of this license file; the whole file is about 0.5 Mbytes, which seems a little long.

The modem was provided to me by ATT when they installed fiber service; I haven't checked but I suspect that it's the only device that ATT supports and very likely the only one that works on the ATT network. This very long list of open source software very likely contains more vulnerabilities.

----------------------------------------- ATT License File Starts  ----------------------------------------- 

# BGW320 version 1.0 OPEN SOURCE SOFTWARE INFORMATION

For instructions on how to obtain a copy of any open source code being made publicly available by AT&T;
related to open source software used in the BGW320 gateway, you may send your request in writing to:

AVP, RG Software
Open Source Request
AT&T;
2230 E Imperial HWY
El Segundo CA 90245

This document contains additional information regarding open source software licenses, acknowledgments
and required copyright notices for open source packages used in the BGW320 device.

radvd - Version 2.18
libssl - Version 1.1.1k
motopia - ssl_api.c
openssl - Version 1.1.1k
dropbear - Version 2013.62
portmap - Version 6.0
tcp_wrappers - Version 7.6
libtecla - Version 1.6.2
pcre - Version 8.32
dhrystone - Version 2.2
flex - Version 2.5.4
aiccu - Version 20070115
motopia - list.h
mcproxy - mcp_util.c
miniupnpd
voip resolver - resolverapi.h
voip resolver - resolverapi.c
portmap - Version 5beta
SpryAssets
lua - Version 5.4.0
expat - Version 2.1.0
public include - pcp.h
cms_util - pcp.c
dhcp-isc - Version 4.1-ESV-R8
dhcpcd
motopia - md5.h
motopia - list.c
motopia - md5.c
muhttpd - Version 1.1.5
smartdb system - broadcom.c
voip SIP - sha1.c
voip SIP - sha1.h
dhcp - Version 4.1-ESV-R3
mini_httpd - Version 1.19
dhcpcd - ifaddrs.c
ez-ipupdate - md5.c
libmnl - Version 1.0.3
dhcpv6
dhcpv6 - ifaddrs.c
public include - cms_lzw.h
cms_util - base64decode.c
cms_util - base64encode.c
cms_util - lzw_decode.c
voip resolver - resolverprivate.c
widedhcpv6 - Version 20080615
widedhcpv6 - ifaddrs.c
uClibc - Version 0.9.28.3
arptables - Version 0.0.3-4
inetd - inetd.c
kernel - include
motopia-arm
netfilter
zl880 - arris_lt.c
bcmdriver include - adsldrv.h
bcmdriver include - AdslMibDef.h
bcmdriver include - atmapidrv.h
bcmdriver include - bcmadsl.h
bcmdriver include - bcmatmapi.h
bcmdriver include - bcmxdsl.h
bcmdriver include - DiagDef.h
bcmdriver include - VdslInfoDef.h
bdmf
dpi
pcmshim
rdpa_drv
rdpa_gpl
rdpa_mw
opensource include - bcmspucfg.h
opensource include - bcmspudrv.h
opensource include - bcmtypes.h
opensource include - board.h
bcmdrivers - enet
bcmdrivers - wfd
bcmdrivers - xtmrt
linux kernel - Version 3.4.11
bridge-utils - Version 1.2
busybox - Version 1.30.1
conntrack-tools - Version 1.4.1
dnsmasq - Version 2.85
dproxy-nexgen - Version 0.5
ebtables
ez-ipupdate - Version 3.0.11b7
ftpd - Version 1.0.24
haserl - Version 0.9.35
iproute2
iptables - Version 1.4.16.3
mtd-util - flash_eraseall.c
mtd - Version 1.5.0
ntfs-3g - Version 2014.3.15
ntpclient - Version 2010_356
rp-pppoe - Version 3.11
sysstat - Version 9.0.3
urlfilterd - Version 1.0.1
libnetfilter_conntrack - Version 1.0.3
libnetfilter_cthelper - Version 1.0.0
libnetfilter_cttimeout - Version 1.0.0
libnetfilter_queue - Version 1.0.2
libnfnetlink - Version 1.0.1
bcm_boot_launcher.c
bdmf_shell
memaccess.c
ppp - Version 2.3.11
psictl.c
scratchpadctl.c
send_cms_msg.c
simcard
public - include
cms_boardctl
cms_msg
cms_util
motopia
portmirror
prioritytag
udev - Version 136
bridge-utils - Version 1.0.6
iproute2 - Version 2.6.35
mtd - Version 20050122.orig
ntpclient - Version 2010_365
wireless_tools - Version 29
wpa_supplicant - Version 1.1
hostapd
compat.h
bootcfg.ko
pm_interval.ko
emaclib.ko
wlan.ko
wlan_ccmp.ko
wlan_scan_ap.ko
wlan_scan_sta.ko
wlan_tkip.ko
wlan_xauth.ko
xt_mark.ko
queue.h
linux kernel - Version 2.6.35.12
U-Boot - Version 2009.06
PHP - Version 5.0.5
zlib - Version 1.2.11
zlib - Version 1.2.3
dhcpcd - ifaddrs.h
dhcpv6 - ifaddrs.h
radvd - ifaddrs.h
mocana - parseasn1.c
smartdb system - etc53xx.h
widedhcpv6 - ifaddrs.h - Version 1.1.1.1
popt - Version 1.16
Process Control Daemon (PCD) - Version 1.1.6
syslog-ng - Version 3.8.1
eventlog - Version 0.2.12
glib - Version 2.40.0
logrotate - Version 3.11.0
libffi - Version 3.2.1
libuuid - Version 1.0.3
md5.js - Version 2.2
safeclib - Version 10052013
Argon2 - Version 1.3
curl - Version 7.70.0
ncurses - Version 6.1
mtr - Version 0.93
dbus - Version 1.10.8
systemd - Version 243
libfuse - Version 3.10.2
libattr - Version 2.4.48
util-linux - Version 2.36

-----------------------------------------  ATT License File Ends ----------------------------------------- 

-- 
Sincerely Jonathan Ryshpan <jonrysh@pacbell.net>

	Fiat justitia, ruant coelis!