OpenWrt 23.05

OpenWrt 23.05.6 — Service Release · 20. August 2025

OpenWrt 23.05 is EOL

⚠️ The OpenWrt 23.05 series is end of life according to the OpenWrt security policy. The last release from the OpenWrt 23.05 series is 23.05.6, after this date we will not provide any updates for OpenWrt 23.05, not even for severe security problems. We encourage everyone to upgrade to OpenWrt 24.10 which will be supported till 2026.

Main changes between OpenWrt 23.05.5 and OpenWrt 23.05.6

Only the main changes are listed below. See https://openwrt.org/releases/23.05/changelog-23.05.6 for the full changelog.

Device support

• Added devices:
  • ath79: Huawei AP6010DN
  • ath79: MikroTik RouterBOARD 750 r2 (hEX lite)
  • ath79: Sophos AP15C
  • ramips: netis N6
• ath79: ZTE MF286: fix 5GHz on QCA9886
• ath79: add extended AR9344 reset sequence
• ipq40xx: Aruba AP-303H: Fix PSE GPIO pin
• ipq40xx: Meraki MR33 and MR74: fix MAC address
• mediatek: Xiaomi Router AX3000T: Add support for Winbond W25N01KV flash
• ramips: TP-Link RE200 v1 and RE210 v1: Fix booting stuck issue
• octeon: ubnt-edgerouter: fix sysupgrade config backup/restore

Various fixes and improvements

• iptables: backport “nft: track each register individually” from 1.9
• wifi-scripts: Fix parsing of Capabilities

Core components update

• Update Linux from 5.15.167 to 5.15.189
• Update mac80211 from 6.1.110-1 to 6.1.145-1
• Update wireless-regdb from 2024.07.04 to 2025.07.10
• Update openssl from 3.0.15 to 3.0.16
• Update mbedtls from 2.28.9 to 2.28.10
• Update wolfssl from 5.7.2 to 5.7.6
• Update ca-certificates from 20230311 to 20241223
• Update jsonfilter from 2024-01-23 to 2025-04-18
• Update libxml from 2.12.5 to 2.14.5

OpenWrt 23.05.5 — Service Release · 25. September 2024

Main changes between OpenWrt 23.05.4 and OpenWrt 23.05.5

Only the main changes are listed below. See https://openwrt.org/releases/23.05/changelog-23.05.5 for the full changelog.

Device support

• ath25: fix PHY MII settings
• ath79: fix PHY MII settings
• ath79: GL-AR750: fix I2C pins
• ipq40xx: fix PHY MII settings
• ipq40xx: Aruba AP-303H: add PoE passthrough GPIO
• ipq40xx: Aruba boards: define config-names, fix compatibility with newer apboot revs
• ipq40xx: FritzBox 4040: re-add label MAC address
• mediatek: CMCC RAX3000M (emmc): improve bootup stability
• mediatek: CMCC RAX3000M: fix lan/wan macaddr
• mediatek: JDCloud RE-CP-03: improve PHY reset stability
• mediatek: UniFi U6 series: fixup models names
• mediatek: Zyxel EX5700: add missing 2.5G PHY LEDs configuration
• octeon: ubnt-edgerouter: disable PCIe to improve bootup stability
• ramips: fix PHY MII settings
• ramips: Sercomm NA502s: use lzma-loader
• ramips: TP-Link EAP613: bump EAP610-V3 compat_level
• realtek: backport VLAN fix

Various fixes and improvements

• mac80211: fix wifi throughput regression
• Add kmod-r8101, kmod-r8168, kmod-r8125 and kmod-r8126 driver
• hostapd: fix SAE H2E security vulnerability
• hostapd: fix anqp_3gpp_cell_net list delimiter
• lldpd: many improvements

Core components update

• Update Linux from 5.15.162 to 5.15.167
• Update mac80211 from 6.1.97-1 to 6.1.110-1
• Update openssl from 3.0.14 to 3.0.15
• Update mbedtls from 2.28.8 to 2.28.9

OpenWrt 23.05.4 — Service Release · 20. July 2024

Main changes between OpenWrt 23.05.3 and OpenWrt 23.05.4

Only the main changes are listed below. See https://openwrt.org/releases/23.05/changelog-23.05.4 for the full changelog.

Device support

• Support for the following devices was added:
• ath79: Huawei AP5030DN
• mediatek: Unielec U7981-01
• mediatek: Xiaomi AX3000T
• mediatek: Cudy TR3000 v1
• mediatek: Zbtlink ZBT-Z8103AX
• mediatek: Adtran SmartRG Bonanza Peak series
• mediatek: YunCore AX835
• mediatek: Comfast CF-E393AX
• mediatek: D-Link EAGLE PRO AI R32
• mediatek: JDCloud RE-CP-03
• mediatek: Netcore N60
• mediatek: D-Link AQUILA PRO AI M30
• mediatek: Cudy M3000 v1
• mpc85xx: Hewlett Packard MSM460
• ramips: D-Link DIR-806A B1
• ramips: Netgear EAX12 series
• ramips: Edimax BR-6208AC V2
• ramips: Cudy TR1200 v1
• armsr: enable framebuffer emulation for virtio-gpu/drm displays used by Hetzner console
• armsr: add Realtek and smsc Ethernet phy drivers to the default image
• armsr: Renesas: RZ: Ethernet module and ttySC0
• ipq40xx: Linksys WHW03 v2: enable additional 5 GHz channels
• ipq40xx: Engenius EAP1300: Enable device
• ipq40xx: NETGEAR EX6150v2: fix broken image generation
• ipq806x: Meraki MR52: swap LAN LEDs
• mediatek: backport multiple Ethernet fixes from master
• mediatek: filogic: fix failsafe mode on devices with no lan1
• mediatek: Xiaomi WR30U: drop device with NMBM layout
• mediatek: Xiaomi WR30U: fix sysupgrade error
• mpc85xx: Enterasys WS-AP3710i: fix boot
• mpc85xx: Enterasys WS-AP3710i: fix eth mac-address
• rockchip: improve stability and fix console
• realtek: D-Link DGS-1210-16: Fix reboot hang
• realtek: Trap LLDP packets to the CPU and do not forward
• ramips: limit max spi clock frequency to 50 MHz

Various fixes and improvements

• Added missing and fixed license information for multiple packages
• Added CPE IDs to multiple packages
• Fix communication with tethered iOS devices in CDC NCM mode
• base-files: fix uid/gid auto-enumeration to avoid 16-bit limit
• wifi-scripts: fix creation of IBSS in legacy (non-HT) mode
• hostapd: don’t ignore probe-requests with invalid DSSS params
• mac80211: backport many (security) fixes
• mac80211: add missing config for third 160MHz width for 5GHz radio
• kernel: Add missing dependencies for kmod-fs-btrfs
• kernel: allow installing kmod-ipt-tee and kmod-nft-dup-inet at the same time.
• config: Enable ext4 journaling by default.
• linux-firmware: package Intel AX201 firmware

Core components update

• Update Linux from 5.15.150 to 5.15.162
• Update mac80211 from 6.1.24 to 6.1.97-1
• Update mt76 from 2023-09-11 to 2024-04-03
• Update wireless-regdb from 2024.01.23 to 2024.07.04
• Update libxml2 from 2.11.4 to 2.12.5
• Update mbedtls from 2.28.7 to 2.28.8
• Update OpenSSL from 3.0.13 to 3.0.14
• Update wolfssl from 5.6.4 to 5.7.2
• Update unetd from 2023-05-31 to 2024-03-31
• Update ucode from 2023-11-07 to 2024-07-11
• Update intel-microcode from 20240312 to 20240531

OpenWrt 23.05.3 — Service Release · 25. March 2024

Main changes between OpenWrt 23.05.2 and OpenWrt 23.05.3

Only the main changes are listed below. See https://openwrt.org/releases/23.05/changelog-23.05.3 for the full changelog.

Security fixes

• CVE-2023-36328: dropbear: Integer Overflow vulnerability in mp_grow in libtommath
• CVE-2023-48795: dropbear: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted
• CVE-2023-50868: dnsmasq: The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack

Device support

• Support for the following devices was added:
• ath79: UniFi UK-Ultra
• mediatek: Acelink EW-7886CAX
• mediatek: ASUS RT-AX59U
• mediatek: ASUS TUF AX6000
• mediatek: Buffalo WSR-3200AX4S
• mediatek: Cetron CT3003
• mediatek: Confiabits MT7981
• mediatek: Cudy RE3000 v1
• mediatek: D-Link EAGLE PRO AI M32
• mediatek: GL.iNet GL-MT6000
• mediatek: JCG Q30 PRO
• mediatek: Routerich AX3000
• mediatek: TP-Link EAP225v5
• mediatek: Ubiquiti UniFi 6 Plus
• mediatek: Zbtlink ZBT-Z8102AX
• mediatek: ZyXEL EX5700 (Telenor)
• ramips: Cudy WR1300 v3
• ramips: D-Link COVR-X1860 A1
• ramips: Rostelecom RT-FE-1A
• ramips: Rostelecom RT-FL-1 (Serсomm RT-FL-1)
• ramips: Rostelecom S1010 (Serсomm S1010.RT)
• ramips: TP-Link EX220 v1
• ramips: YunCore G720
• ramips: Z-ROUTER ZR-2660
• ath79: Nanostation Loco M5 XW: Fix read only jffs2 partition
• ath79: TP-Link TL-WDR3600 and TL-WDR4300: Fix spurious reboot hangs
• ath79: ubnt-bullet-m-xw: fix Ethernet PHY traffic
• ipq807x: edgecore EAP102: fix lan/wan
• kirkwood: Ctera C200 V1: fix ubi part name
• lantiq: xway: disable SMP: fix boot on some Danube boards and NAT performance
• mediatek: MT7981/MT7986: fix Ethernet rx hang issue
• meidatek: Mercusys MR90X v1: fix eeprom loading
• mpc85xx: Extreme Networks WS-AP3825i: increase available RAM
• mvebu: IEI-World Puzzle M90x: fix RTC
• ramips: improve mtk_eth_soc resets
• ramips: rt305x: Use default uart in lzma-loader
• ramips: Sercomm NA502: Fix bootup problem
• ramips: Unielec u7621-01: Correct the PCIe port number
• realtek: d-link dgs-1210-10p: improve sfp support
• realtek: Netgear GS110TPP: fix OEM install
• rockchip: Orange Pi R1 Plus LTS: improve Ethernet stability

Various fixes and improvements

• mt76: Add mt7922 firmware
• mwlwifi: Add support for WPA3
• dropbear: Increase scp transfer speed
• kernel: fix bridge proxyarp issue with some broken DHCP clients
• mac80211: fix min_tx_power setting
• kernel: add Aquantia PHY firmware loader patches
• hostapd: fix FILS AKM selection with EAP-192
• hostapd: fix 11r defaults when using SAE
• hostapd: fix 11r defaults when using WPA
• hostapd: ACS: Fix typo in bw_40 frequency array on channel 118

Core components update

• Update Linux from 5.15.137 to 5.15.150
• Update mwlwifi from 2023-04-29 to 2023-11-20
• Update mt76 from 2023-08-14 to 2023-09-11
• Update netifd from 2023-11-10 to 2024-01-04
• Update jsonfilter from 2018-02-04 to 2024-01-23
• Update bcm27xx-gpu-fw from 2022-05-16 to 2024-01-11
• Update mbedtls from 2.28.5 to 2.28.7
• Update openssl from 3.0.12 to 3.0.13
• Update wireless-regdb from 2023.09.01 to 2024.01.23
• Update intel-microcode from 20230808 to 20240312
• Update dnsmasq from 2.89 to 2.90

OpenWrt 23.05.2 — Service Release · 15. November 2023

Main changes between OpenWrt 23.05.0 and OpenWrt 23.05.2

23.05.1 was tagged, but not official release because we found a severe bug between tagging and announcing the release. Only the main changes are listed below. See https://openwrt.org/releases/23.05/changelog-23.05.2 for the full changelog.

Device support

• Support for the following devices was added:
• bcm53xx: ASUS RT-AC3100
• mediatek: CMCC RAX3000M
• mediatek: MT7981 RFB
• ramips: ComFast CF-E390AX
• ramips: ComFast CF-EW72 V2
• ramips: MeiG SLT866 4G CPE
• realtek: HPE 1920-8g-poe+ (65W)
• apm821xx: Netgear WNDR4700: Fix broken sysupgrade, factory images
• armsr: Preserve configuration during sysupgrade
• ath79: Compex wpj563: Enable 2nd USB controller
• ath79: TP-Link Archer C7 v2: Fix wifi shutdown and “irq 23: nobody cared” error
• bcm53xx: Make Linux use correct switch ports again
• bcm53xx: Linksys EA9200: nvram and 02_network fixes
• ipq40xx: Switch to performance governor by default
• lantiq: xrx200: Build target again
• mediatek: Xiaomi Redmi Router AX6000: Fix Ethernet in U-Boot
• realtek: HPE 1920-8g-poe: Rename to match hardware
• ramips: HiWiFi HC5861: Fix Gigabit Ethernet port
• ramips: ZyXEL NR7101: Fix bricking typo

Various fixes and improvements

• Fix assignment of default MAC addresses on some targets
• build: Hide kmod-zram config unless enabled
• build: Fix lto build
• build: Fix glibc build
• build: Fix pkg-config detection when inside of a nix-shell
• build: Add CycloneDX SBOM JSON support
• hostapd: Do not trim trailing whitespace, except for newline
• hostapd: Fix OWE association with mbedtls
• hostapd: Fix broken WPS on broadcom-wl and ath11k
• hostapd: Fix broken noscan option
• wifi: Fix applying mesh parameters when wpa_supplicant is in use
• iptables: backport patch fixing bug with string module
• mbedtls: Activate secp521r1 curve by default
• px5g-mbedtls: Fix permission of private key
• px5g-wolfssl: Fix permission of private key
• netifd: Fixed race condition in default gateway configuration

Core components update

• Update mbedtls from 2.28.4 to 2.28.5
• Update openssl from 3.0.11 to 3.0.12
• Update wolfssl from 5.6.3 to 5.6.4
• Update Linux from 5.15.134 to 5.15.137
• Update ipq-wifi from 2023-06-03 to 2023-11-10
• Update uqmi from 2022-05-04 to 2022-10-20
• Update umdns from 2023-01-16 to 2023-10-19
• Update urngd from 2023-07-25 to 2023-11-01
• Update ucode from 2023-06-06 to 2023-11-07
• Update firewall4 from 2023-03-23 to 2023-09-01
• Update odhcpd from 2023-06-24 to 2023-10-24
• Update netifd from 2023-10-20 to 2023-11-10

*

OpenWrt 23.05.0 — First Stable Release · 13 October 2023

Highlights in OpenWrt 23.05.0

OpenWrt 23.05.0 incorporates over 4300 commits since branching the previous OpenWrt 22.03 release and has been under development for over one year.

Only the main changes are listed below. See https://openwrt.org/releases/23.05/changelog-23.05.0 for the full changelog.

Many new devices added

OpenWrt 23.05 supports over 1790 devices. Support for over 200 new devices was added in addition to the device support by OpenWrt 22.03.

• The https://openwrt.org/docs/techref/targets/ipq807x target for the Qualcomm IPQ807x Wifi 6 SoCs was added
• The mediatek/filogic subtarget for the Mediatek Filogic 830 and 630 SoCs was added
• The https://openwrt.org/docs/techref/targets/sifiveu target for the HiFive RISC-V Unleashed and Unmatched boards

Highlights of device support

• Switched ipq40xx target to DSA
• VDSL support on AVM FRITZ!Box 7530
• Support for devices with 2.5G PHYs
  • Acer Predator W6 (MT7986A), Mercusys MR90X v1 (MT7986BLA), Netgear WAX206 (MT7622), Netgear WAX220 (MT7986), ZyXEL NWA50AX Pro (MT7981), Asus (TUF Gaming) AX4200 (MT7986A), Netgear WAX218 (IPQ8074), Xiaomi AX9000 (IPQ8074), Dynalink DL-WRX36 (IPQ8074), GL.iNet GL-MT6000 (MT7986A), ZyXEL EX5700 (MT7986)
• Support for Wifi 6E (6GHz)
  • Acer Predator W6 (MT7986A), ZyXEL EX5700 (MT7986)
• 2 Gbps WAN/LAN NAT Routing on ramips MT7621 devices (See OpenWrt forum)
• Improved DSL statistics on ubus and in LuCI
• Added Arm SystemReady (EFI) compliant target armsr replacing the armvirt target

Switch from wolfssl to mbedtls as default

OpenWrt has transitioned its default cryptographic library from wolfssl to mbedtls. This shift brings several changes and implications:

• Size Efficiency: mbedtls is considerably smaller, making it an optimal choice for systems where storage space is paramount.
• LTS and ABI Stability: mbedtls consistently provides updates via its Long Term Support (LTS) branch, ensuring both security and a stable application binary interface (ABI). In contrast, wolfssl does not offer an LTS release, and its stable ABI is limited to a specific set of functions.
• TLS 1.3 Support: Users should be aware that mbedtls 2.28 no longer supports TLS 1.3.

While mbedtls is now the default, users who have specific needs or preferences can still manually switch back to wolfssl or choose openssl.

Rust Package Support

This release introduces the ability to include rust-written programs into the OpenWrt package infrastructure. Examples are: bottom, maturin, aardvark-dns and ripgrep.

Core components update

Core components have the following versions in 23.05.0:

• Updated toolchain:
  • musl libc 1.2.4
  • glibc 2.37
  • gcc 12.3.0
  • binutils 2.40
• Updated Linux kernel
  • 5.15.134 for all targets
• Network:
  • hostapd master snapshot from September 2023, dnsmasq 2.89, dropbear 2022.82
  • cfg80211/mac80211 from kernel 6.1.24
• System userland:
  • busybox 1.36.1

In addition to the listed applications, many others were also updated.

OpenWrt 23.05.0-rc4 — Fourth Release Candidate · 3 October 2023

Changes between OpenWrt 23.05.0-rc3 and 23.05.0-rc4

For a detailed list of changes since OpenWrt 23.05.0-rc3 see the 23.05.0-rc4 changelog.

Changes in this release candidate since the previous 23.05.0-rc3 release candidate are:

Device support

• New devices
  • ipq4019: ZTE MF287 Pro aka DreiNeo Pro
  • mediatek: Ubiquiti UniFi 6 LR v3
  • ramips: ALFA Network AX1800RM
• Updated components:
  • kernel: Update from 5.15.127 to 5.15.132
  • mt76: Updated from 2023-07-26 to 2023-08-14
  • hostapd: Update from 2023-06-22 to 2023-09-08
  • ucode: Update from 2023-04-03 to 2023-06-06
  • ubus: Update from 2022-06-15 to 2023-06-05
  • netifd: Update from 2023-06-04 to 2023-09-19
  • wireless-regdb: update from 2023.05.03 to 2023.09.01
  • openssl: Update from 3.0.10 to 3.0.11
• mediatek: lots of backports from master
• ipq806x: Fix traffic speed regression
• mac80211: rework MT7620 PA/LNA RF calibration
• kernel: enable vfio and vfio-pci for armsr-armv8
• ath11k: Revert back ath11k firmware to fix IPv6 multicast problems
• kernel: allow adding devices without hw offload to a hw flowtable
• kernel: backport support for renaming netdevs while up
• hostapd: backport from master, including ucode based reload support
• packages: Add many PKG_CPE_ID attributes

Many other changes in all parts of OpenWrt, see Changelog for details.

OpenWrt 23.05.0-rc3 — Third Release Candidate · 22 August 2023

Changes between OpenWrt 23.05.0-rc2 and 23.05.0-rc3

For a detailed list of changes since OpenWrt 23.05.0-rc2 see the 23.05.0-rc3 changelog.

Changes in this release candidate since the previous 23.05.0-rc2 release candidate are:

Device support

• New devices
  • ath79: MikroTik RB951G-2HnD
  • ipq40xx: Teltonika RUTX50
  • ipq40xx: ZTE MF287+ aka DreiNeo
  • layerscape: Traverse Ten64 NAND variant
  • mediatek: Acer Predator W6
  • mediatek: H3C Magic NX30 Pro
  • mediatek: Mercusys MR90X v1
  • mediatek: Netgear EX6250v2 series (no wifi support)
  • mediatek: Xiaomi WR30U
  • mediatek: ZyXEL NWA50AX Pro
  • ramips: Sercomm S1500 devices
  • ramips: TP-Link EAP613 v1
  • realtek: HPE 1920-8g-poe+
• Updated components:
  • hostapd: update to 2023-06-22
  • mt76: update to 2023-07-26
  • ath11k-firmware: update to stable WLAN.HK.2.9.0.1-01837
  • openssl: update to 3.0.10
  • mbedtls: Update to 2.28.4
  • wolfssl: update to 5.6.3
  • intel-microcode: update to 20230808
  • linux-firmware: update to 20230804
  • kernel: bump 5.15 to 5.15.127
• ramips: mt7621: disable the cpufreq driver (performance increase)
• ramips: mt7621: disable highmem support and remove highmem offset patch (performance increase)
• uqmi: support split-APN IPv4 and IPv6 dual-stack
• iwinfo/rpcd: update byte counter to 64bit
• x86: Activate CONFIG_PCIEASPM
• x86: Add virtualization time sync support
• armsr: activate many new configuration options
• kernel: modules: add xdp-sockets-diag support
• ipq40xx: meraki: define DTB load address
• ath79: move ubnt-xm 64M RAM boards back to generic
• lua: fix integer overflow in LNUM patch

Many other changes in all parts of OpenWrt, see Chnagelog for details.

OpenWrt 23.05.0-rc2 — Second Release Candidate · 28 June 2023

Changes between OpenWrt 23.05.0-rc1 and 23.05.0-rc2

For a detailed list of changes since OpenWrt 23.05.0-rc1 see the 23.05.0-rc2 changelog.

Changes in this release candidate since the previous 23.05.0-rc1 release candidate are:

Device support

• New devices
  • ath79: Aruba AP-115
  • bmips: Observa VH4032N
  • bmips: Netgear DGND3700 v1
  • bmips: Netgear DGND3800B
  • bmips: Netgear EVG2000
  • bmips: Comtrend VR-3025un
  • bmips: Comtrend WAP-5813n
  • bmips: Comtrend AR-5381u
  • bmips: Actiontec R1000H
  • bmips: Sercomm AD1018
  • bmips: Comtrend VG-8050
  • bmips: NuCom R5010UNv2
  • bmips: Arcadyan AR7516
  • filogic: Netgear WAX220
  • ipq40xx: Buffalo WTR-M2133HP (converted to DSA)
  • ipq807x: prpl Foundation Haze board
  • ramips: mt7621: Zbtlink ZBT-WG1608 (32M)
  • ramips: Beeline SmartBox TURBO+
  • rockchip: Orange Pi R1 Plus
  • rockchip: Orange Pi R1 Plus LTS
• Fix lzma-loader for
  • ramips: ASIARF boards
• ramips: TP-Link MR600v2: fix image generation for sysupgrade image
• mvebu: Fix random crashes in mvneta
• armvirt: Added EFI support and renamed to armsr
• Add RISC-V support
  • Added sifiveu target for HiFive Unleashed and Unmatched boards

Many other changes in all parts of OpenWrt, see Chnagelog for details.

OpenWrt 23.05.0-rc1 — First Release Candidate · 9 June 2023