OpenWrt 23.05.2 - Service Release - 15. November 2023

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 23.05.2, r23630-842932a63d
 -----------------------------------------------------

The OpenWrt community is proud to announce the newest stable release of the OpenWrt 23.05 stable series.

Download firmware images via the Firmware Selector or directly from our download servers:

• Download firmware image for your device (firmware selector)
• Download firmware images directly from OpenWrt download servers

An upgrade from OpenWrt 22.03 to OpenWrt 23.05 is supported in many cases with the help of the sysupgrade utility which will also attempt to preserve the configuration. A configuration backup is advised nonetheless when upgrading to OpenWrt 23.05. (see “Upgrading” below).

The OpenWrt Project is a Linux operating system targeting embedded devices. It is a complete replacement for the vendor-supplied firmware of a wide range of wireless routers and non-network devices. See the Table of Hardware for supported devices. For more information about OpenWrt project organization, see the About OpenWrt pages.

Do you want to be informed about important changes such as new releases and security fixes?

We have a new mailing list for this, as well as RSS options: see Important changes and announcements.

23.05.1 was tagged, but not official release because we found a severe bug between tagging and announcing the release. Only the main changes are listed below. See changelog-23.05.2 for the full changelog.

• Support for the following devices was added:
  • bcm53xx: ASUS RT-AC3100
  • mediatek: CMCC RAX3000M
  • mediatek: MT7981 RFB
  • ramips: ComFast CF-E390AX
  • ramips: ComFast CF-EW72 V2
  • ramips: MeiG SLT866 4G CPE
  • realtek: HPE 1920-8g-poe+ (65W)
• apm821xx: Netgear WNDR4700: Fix broken sysupgrade, factory images
• armsr: Preserve configuration during sysupgrade
• ath79: Compex wpj563: Enable 2nd USB controller
• ath79: TP-Link Archer C7 v2: Fix wifi shutdown and “irq 23: nobody cared” error
• bcm53xx: Make Linux use correct switch ports again
• bcm53xx: Linksys EA9200: nvram and 02_network fixes
• ipq40xx: Switch to performance governor by default
• lantiq: xrx200: Build target again
• mediatek: Xiaomi Redmi Router AX6000: Fix Ethernet in U-Boot
• realtek: HPE 1920-8g-poe: Rename to match hardware
• ramips: HiWiFi HC5861: Fix Gigabit Ethernet port
• ramips: ZyXEL NR7101: Fix bricking typo

• Fix assignment of default MAC addresses on some targets
• build: Hide kmod-zram config unless enabled
• build: Fix lto build
• build: Fix glibc build
• build: Fix pkg-config detection when inside of a nix-shell
• build: Add CycloneDX SBOM JSON support
• hostapd: Do not trim trailing whitespace, except for newline
• hostapd: Fix OWE association with mbedtls
• hostapd: Fix broken WPS on broadcom-wl and ath11k
• hostapd: Fix broken noscan option
• wifi: Fix applying mesh parameters when wpa_supplicant is in use
• iptables: backport patch fixing bug with string module
• mbedtls: Activate secp521r1 curve by default
• px5g-mbedtls: Fix permission of private key
• px5g-wolfssl: Fix permission of private key
• netifd: Fixed race condition in default gateway configuration

• Update mbedtls from 2.28.4 to 2.28.5
• Update openssl from 3.0.11 to 3.0.12
• Update wolfssl from 5.6.3 to 5.6.4
• Update Linux from 5.15.134 to 5.15.137
• Update ipq-wifi from 2023-06-03 to 2023-11-10
• Update uqmi from 2022-05-04 to 2022-10-20
• Update umdns from 2023-01-16 to 2023-10-19
• Update urngd from 2023-07-25 to 2023-11-01
• Update ucode from 2023-06-06 to 2023-11-07
• Update firewall4 from 2023-03-23 to 2023-09-01
• Update odhcpd from 2023-06-24 to 2023-10-24
• Update netifd from 2023-10-20 to 2023-11-10

Sysupgrade can be used to upgrade a device from 22.03 to 23.05, and configuration will be preserved in most cases.

Sysupgrade from 21.02 to 23.05 is not officially supported.

• ipq40xx EA6350v3, EA8300 and MR8300 require tweak to the U-Boot environment on update from 22.03 to 23.05. Refer to the Device wiki or the instruction on sysupgrade on how to do this change. Config needs to be reset on sysupgrade.

• lantiq/xrx200 target shows error messages in DSA switch configuration of the integrated GSWIP switch. (see: https://github.com/openwrt/openwrt/pull/13200)
• OpenWrt 23.05.2 was signed with the wrong signing keys. The keys from OpenWrt snapshot were used for OpenWrt 23.05.2, OpenWrt 23.05.0 and the release candidates. A later OpenWrt 23.05 service release will use a different key.

As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.

Have fun!

The OpenWrt Community