MikroTik RouterOS changelogs

7.21rc3 Testing 2025-Dec-22 (10 months ago)

Component	Change
bgp	fixed l2vpn-cisco decoding (introduced in v7.20);
bgp	fixed occasional corruption of MPLS labels in BGP VPN update messages;
fetch	fixed certificate trust store usage when executed by another RouterOS program (introduced in v7.21beta7);
file	improved error messages provided to GUI;
firewall	added support for TOS/mask matching for raw rules (additional fixes);
isis	improved system stability when changing passive flag;
lte	fixed LTE interface IPv6 address generation to use EUI-64 (introduced in v7.20);
lte	fixed missing IP assignment on non-passthrough LTE interface in multi-apn setup (introduced in v7.21beta2);
lte	fixed no re-connection after cellular network requested APN deactivation on Chateau 5G ax R17;
sfp	fixed link initialization issue with S-RJ01 modules on TILE architecture (introduced in v7.21beta2);
switch	fixed non-IP multicast packet receive on 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98CX8410 switches;
system	detect policy mismatch sooner if script is executed internally by some other service;
wifi-mediatek	added Superchannel regulatory profile;

7.21rc2 Testing 2025-Dec-15 (10 months ago)

Component	Change
bridge	fixed issue where use-ip-firewall was enabled due to running container (introduced in v7.21beta8);
certificate	added certificate "trust-store" parameter (additional fixes);
console	fixed empty output in route menus when using "print where gateway";
console	improved service stability and memory allocation when using "regexp" operator;
console	improved service stability when executing commands that can timeout;
hotspot	prevent service from starting unnecessarily in the background on export/print commands;
lte	ask for user confirmation before installing eSIM profile (additional fixes);
ovpn	improved system stability when using cipher=blowfish128;
socksify	listen on all addresses for incoming connections;
ups	fixed board hibernation shutdown;
usb	fixed cases where USB bus order could change on D53 devices;

7.20.6 Stable 2025-Dec-04 (11 months ago)

Component	Change
bgp	fixed missing VRF parameter in template configuration after upgrade;
console	improved service stability and memory allocation when using "regexp" operator;
console	improved service stability when executing commands that can timeout;
dhcp	execute "lease-script" with DHCP server creator user permissions;
pppoe-server	fixed client disconnects when multiple servers with different service names are active (introduced in v7.20);
routerboard	do not show "upgrade-firmware" if available installation is older than minimal supported one;
socksify	listen on all addresses for incoming connections;
system	updated PCI id names;

7.21rc1 Testing 2025-Dec-03 (11 months ago)

Component	Change
bgp	fixed missing VRF parameter in template configuration after upgrade;
certificate	added certificate "trust-store" parameter (additional fixes);
console	added fetch-changelog flag to check-for-updates command;
container	fixed web-top app configuration export (introduced in v7.21beta2);
dhcp	execute "lease-script" with DHCP server creator user permissions;
ethernet	improved system stability for RB912, RB911 devices;
lte	ask for user confirmation before installing eSIM profile (CLI and WinBox 4 only) (additional fixes);
ppp	added multi-APN support to ppp-client dialer;
pppoe-server	fixed client disconnects when multiple servers with different service names are active (introduced in v7.20);
routerboard	do not show "upgrade-firmware" if available installation is older than minimal supported one;
switch	fixed issue with VLAN configuration corruption for 98DX224S, 98DX226S, 98DX3236 switches (introduced in v7.21beta2);
system	updated PCI id names;

7.20.5 Stable 2025-Nov-27 (11 months ago)

Component	Change
bgp	fixed BGP origin attribute initial value;
bgp	properly apply link.local connection setting when it is used as an interface;
bgp-vpn	fixed prefix matching for filters "dst" matcher;
ospf	fixed wrong LS Ack warning;
pimsm	added comment for static-rp;
route	fixed gateway print when gateway is equal to BGP peers address;
route	fixed some routes installed in main routing table instead of specified VRF;
route	make discourse work with destinations from VRF;
routing-filter	fixed inline filters that process BGP communities;
system	improved incoming TCP connection responsiveness;
user	improved login service stability on busy system;
webfig	fixed broken WebFig after going to Quick Set (introduced in v7.20.4);
wifi	improved regulatory compliance for Bangladesh country profile;
winbox	group L3 and L4 fields under switch rules menu;