OpenWrt 22.03.5 - Service Release - 1 May 2023

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 22.03.5, r20134-5f15225c1e
 -----------------------------------------------------

The OpenWrt community is proud to announce the newest stable release of the OpenWrt 22.03 stable version series. It fixes security issues, improves device support, and brings a few bug fixes.

Download firmware images via the Firmware Selector or directly from our download servers:

• Download firmware image for your device (firmware selector)
• Download firmware images directly from OpenWrt download servers

An upgrade from OpenWrt 21.02 or 22.03 to OpenWrt 22.03.5 is supported in many cases with the help of the sysupgrade utility which will also attempt to preserve the configuration. A configuration backup is advised nonetheless when upgrading to OpenWrt 22.03. (see “Upgrading” below).

The OpenWrt Project is a Linux operating system targeting embedded devices. It is a complete replacement for the vendor-supplied firmware of a wide range of wireless routers and non-network devices. See the Table of Hardware for supported devices. For more information about OpenWrt project organization, see the About OpenWrt pages.

Do you want to be informed about important changes such as new releases and security fixes?

We have a new mailing list for this, as well as RSS options: see Important changes and announcements.

Only the main changes are listed below. See changelog-22.03.5 for the full changelog.

• CVE-2023-0464: openssl: Excessive Resource Usage Verifying X.509 Policy Constraints
• CVE-2023-0465: openssl: Invalid certificate policies in leaf certificates are silently ignored

• Archer AX23 / MR70X: Reduce SPI-frequency
• Aruba AP-105: Create APBoot compatible image
• Buffalo WSR-600DHP: Fix boot loop

• Fix UBI (Unsorted Block Images) bug which prevented some devices from booting
• Fix ccache compile with GCC 13

• Update uclient from 2021-05-14 to 2023-04-13

Sysupgrade can be used to upgrade a device from OpenWrt 21.02 or 22.03 to 22.03.5 and configuration will be preserved in most cases.

Sysupgrade from 19.07 to 22.03 is not supported.

There is no migration path for targets that switched from swconfig to DSA. In that case, sysupgrade will refuse to proceed with an appropriate error message:
Image version mismatch. image 1.1 device 1.0 Please wipe config during upgrade (force required) or reinstall. Config cannot be migrated from swconfig to DSA Image check failed

See reporting bugs if you encounter issues with this release.

Devices featuring the MV88E6176 integrated switch are currently broken in 22.03: the switch behaves as a hub, meaning network packets will be sent to all ports. This bug is documented in (FS#11077). This problem is only seen with kernel 5.10. OpenWrt 21.02 and OpenWrt master are not affected.