Version: 7.23.3

Stable

18 changelog entries across 12 component(s)

2026-Jul-30 (1 week ago)

Component	Change
certificate	added "ISRG Root X2", "Root YE" and "Root YR" to SMIPS built-in root certificate authorities store;
certificate	added "Root YE" and "Root YR" to built-in root certificate authorities store;
defconf	added virtual "iot-wifi" to MLO supporting devices;
dhcpv4-server	fixed "expires-after" field for disabled static lease (introduced in v7.23);
fastpath	properly fall back to SlowPath when FastPath is not possible due to fragmentation;
ipsec	fixed identity lookup to skip past disabled and certificate-matched identities when scanning for an exact ID match;
ipsec,ike2	improved logging when remote ID is specified;
ipsec,ike2	use peer certificates also when identity has one set for peer matching;
ipv6,ra	show warning about paused automatic RA on upgraded routers;
ospf	fixed "duplicate config" issue when using ptp-unnumbered interface type;
ptp	fixed a race condition when reading transmit timestamps, which could cause unstable clock offset under background traffic;
ptp	fixed PTPv1 traffic forwarding when a PTPv2 profile is enabled on bridge ports;
snmp	improved SNMPv3 request processing logic;
system	added microSD card support for hAP be3 Media;
system	improved handling of data re-sending on authorization requests (introduced in v7.22);
system	improved stability;
system	updated certificate for Windows executable signing;
tftp	limit maximum simultaneous session count to 100;