Version: 7.23rc4
Testing30 changelog entries across 22 component(s)
2026-May-22 (4 weeks ago)
| Component | Change |
|---|---|
| app | added "network-outgoing-access=yes/no" setting to prevent containers from initiating outbound traffic; |
| bridge | fixed dynamic VLAN update for WiFi interfaces; |
| bridge | improved MAC synchronization for MLAG (additional fixes); |
| certificate | improved ACME logging (additional fixes); |
| certificate | improved ACME status reporting (additional fixes); |
| cloud | cloud backup file management now requires "policy" policy; |
| container | updated /dev/net/tun permission; |
| crypto | fixed stability issue; |
| dhcpv4-server | added "add-dns-entries" and "add-dns-entries-suffix" properties for creating local DNS entries (additional fixes); |
| discovery | added "add-dns-entries" and "add-dns-entries-suffix" properties for creating local DNS entries (additional fixes); |
| firewall | added "action=drop" to mangle; |
| firewall | matcher "in-bridge-port" does not require "use-ip-firewall=yes"; |
| ike2 | fixed child SA cleanup during flush operation; |
| ike2 | fixed pending responder connection cleanup after peer removal; |
| ike2 | fixed SA delete handling on initiator during rekey; |
| ike2 | improved HMAC size validation checks; |
| iot | fixed LoRa lockpack preventing lock from applying; |
| ipv6,ra | improved service stability (additional fixes); |
| isis | allow to configure metric-type; |
| leds | fixed power LED turning off while LTE interface is inactive (introduced in v7.22); |
| lte | fixed rare cases where the Tx queue could stop and never wake up on multi-core CPU devices; |
| switch | fixed issue with MAC table for RB2011 (introduced in v7.21); |
| switch | fixed missing ethernet counters for non-running interfaces on CRS8xx switches (introduced in v7.22); |
| system | improved switching to HTTP/1 if HTTP/2 is not supported by remote host (additional fixes); |
| timezone | updated timezone information from "tzdata2026b" release; |
| vrrp | fixed stability issue when using VRRP with a hardware-offloaded bridge (additional fixes); |
| vxlan | fixed fast-path when using "checksum=no" (introduced in v7.20); |
| wifi | improved on-capsman traffic processing; |
| www | improved REST API user cache processing; |
| www | properly respond with custom HTTP response code instead of replying always with 200 (introduced in v7.23rc1); |