What's new in 6.47.10 (2021-May-31 09:54):

MAJOR CHANGES IN v6.47.10:
----------------------
!) wireless - fixed all affecting 'FragAttacks' vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147);
----------------------

*) bonding - improved system stability when disabling/enabling bonding ports;
*) branding - added option to upload custom files (newly generated branding package required);
*) capsman - use proper units for "ap-tx-limit" and "client-tx-limit" parameters;
*) console - do not clear environment values if any global variable is set;
*) console - require "write+ftp" permissions for exporting configuration to file;
*) console - updated copyright notice;
*) crs3xx - added "/system swos" menu for CRS354 devices, should only be used after SwOS 2.13 release;
*) crs3xx - fixed interface LEDs for QSFP+ and SFP+ interfaces on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - improved 1Gbps Ethernet port group traffic forwarding for CRS354 devices;
*) crs3xx - improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) defconf - fixed default configuration loading on LHG R;
*) defconf - fixed default configuration loading on RBOmniTikPG-5HacD;
*) dhcp - fixed link state checking for DHCP client;
*) dude - fixed configuration menu presence on ARM64 devices;
*) ethernet - improved system stability when receiving large VLAN tagged packets on IPQ4018/IPQ4019 devices;
*) ipsec - fixed SA address parameter exporting;
*) lte - fixed "earfcn" to band translation for "cell-monitor";
*) ovpn - fixed route cache entry leak when establishing a new session;
*) poe - do not perform PoE firmware upgrade procedure on RB960 and OmniTik devices without PoE out;
*) ppp - do not fail "at-chat" command when issued on disabled PPP interface;
*) ptp - improved management service stability when receiving bogus packets;
*) quickset - prefer 5GHz interface for WiFi scan in CPE mode;
*) rb4011 - fixed SFP+ port MTU setting after link state change;
*) rb4011 - improved SFP+ port stability after boot-up;
*) route - improved stability when connected route is modified;
*) sfp - improved cable length monitoring as defined per SFF-8472 and SFF-8636;
*) supout - fixed "topic" column presence in "Log" section;
*) switch - improved system stability with 98PX1012 switch chip for CCR2004-1G-12S+2XS device;
*) system - improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN);
*) telnet - do not send options if connecting to non standard port;
*) telnet - fixed server when run on non standard port;
*) tile - fixed bridge performance degradation (introduced in v6.47);
*) tr069-client - improved management service stability when receiving bogus packets;
*) upgrade - improved "long-term" upgrade procedure on SMIPS devices;
*) webfig - allow to specify "prefix" parameter under "IPv6/ND/Prefixes" menu;
*) webfig - do not corrupt settings when starting "Wireless Sniffer";
*) webfig - do not move top right menu in opposite direction when scrolling horizontally;
*) webfig - show "network-mode" for LTE modems that support it;
*) winbox - do not show "network-mode" parameter for LTE interfaces that do not support it;
*) winbox - do not show empty "CPU Frequency" parameter under "System/Resources" menu;
*) winbox - fixed "reachable-time" value unit under "IPv6/ND" menu;
*) winbox - fixed QCA-8511 switch chip type reporting under "Switch/Settings" menu;
*) winbox - fixed health reporting on RB960, hEX and hEX S devices;
*) winbox - hide "Allow Roaming" parameter on LTE modems that do not support it;
*) winbox - increased "target" field limit to 128 under "Queues" menu;
*) winbox - show "LCD" only on boards that have LCD;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) winbox - show "activity" column by default under "IP/Kid Control/Devices" menu;
*) wireless - fixed issue with multicast traffic delivery to client devices using power-save;
*) wireless - improved iOS compatibility with HotSpot 2.0 networks;
*) www - added "X-Frame-Options" header information to disallow website embedding in other pages;

Changelog archive ×

What's new in 6.48.4 (2021-Aug-18 06:43):

*) branding - fixed missing branding skins if "skins" folder does not exist;
*) bridge - added MAC and IP source addresses information for DHCP snooping log;
*) bridge - fixed "vlan-encap" setting for filter and NAT rules;
*) bridge - improved system stability when using IGMP snooping and changing bridge MAC address;
*) capsman - use Bits instead of Bytes for "ap-tx-limit" and "client-tx-limit" parameters;
*) crs3xx - fixed unknown multicast flood to CPU when IGMP snooping is used;
*) crs3xx - improved system stability when increasing interface L2MTU for CRS318 devices;
*) defconf - fixed default configuration loading on LHG R;
*) defconf - fixed minor typo in configuration description;
*) dhcpv6-server - fixed false missing IPv6 Pool warning for dynamic bindings;
*) dns - fixed CNAME query when target record is not in cache;
*) dns - fixed cache memory leak when resolving CNAME domains;
*) health - fixed voltage monitor on BaseBox5 devices;
*) health - improved temperature reporting;
*) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests;
*) leds - fixed "/system leds" menu on RBLHG-2nD;
*) lora - added additional predefined network servers;
*) lte - added support for Sharp 809SH;
*) routerboard - fixed "reset-button" on hAP ac;
*) system - improved stability when receiving bogus packets;
*) telnet - fixed "routing-table" parameter usage;
*) w60g - improved stability in low temperature environments;
*) webfig - do not show "units" twice in multi list entries;
*) winbox - added "Cloud Backup" options under "Files" menu;
*) winbox - added "interworking-profile" parameter under "Wireless" menu;
*) winbox - added support for PTP;
*) winbox - do not show "Functionality" field for LTE interface if it is not provided;
*) winbox - fixed "Switch" menu on RBwAPG;
*) winbox - fixed "vid" parameter under "Bridge/Hosts" menu;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac^3;
*) wireless - added U-NII-2 support for US and Canada country profiles for hap ac, hAP ac^3 LTE6, Audience and Audience LTE6;
*) wireless - updated "israel" regulatory domain information;

Changelog archive ×

What's new in 6.49beta54 (2021-Jul-05 06:48):

Changes in this release:

*) bridge - fixed external flag in the host table for wireless clients;
*) capsman - use Bits instead of Bytes for "ap-tx-limit" and "client-tx-limit" parameters;
*) crs3xx - fixed jumbo frame forwarding for CRS354 devices (introduced in v6.49beta36);
*) crs3xx - fixed unknown multicast flood to CPU when IGMP snooping is used;
*) crs3xx - improved system stability when increasing interface L2MTU for CRS318 devices;
*) defconf - apply default configuration from branding package when performing reset with button;
*) defconf - fixed default configuration loading on LHG R;
*) health - fixed voltage monitor on BaseBox5 devices;
*) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests;
*) ike2 - added support for ASN.1 DN "my-id" value setting for initiators;
*) ike2 - check if TS is still valid after obtaining SPI;
*) ipsec - improved SA update by SPI;
*) leds - fixed "/system leds" menu on RBLHG-2nD;
*) lora - added channel plan "il-917" for Israel;
*) lte - added support for Sharp 809SH;
*) m33g - improved support for "/system gpio" menu ("/system routerboard upgrade" required);
*) sfp - improved 25Gbps optical module stability and linking;
*) snmp - added "engine-id" OID support;
*) snmp - fixed "ipNetToMediaType" OID for incomplete entries;
*) ssh - fixed "undo" functionality;
*) system - improved stability when receiving bogus packets;
*) telnet - fixed "routing-table" parameter usage;
*) tr069-client - added support for Ethernet link speed reporting;
*) tr069-client - added support for interface comment reporting and editing;
*) tr069-client - added support for supout file upload;
*) tr069-client - improved stability for download/upload diagnostics;
*) ups - added battery info for APC Back-UPS BX750MI;
*) w60g - general stability and performance improvements;
*) webfig - added support for logo image from branding package;
*) winbox - added "Cloud Backup" options under "Files" menu;
*) winbox - added "interworking-profile" parameter under "Wireless" menu;
*) winbox - added "name" and "file-name" parameter when importing and exporting certificates;
*) winbox - added "sfp-shutdown-temperature" setting to SFP interfaces;
*) winbox - added SSH settings under "IP/SSH" menu;
*) winbox - added TFTP settings under "IP/TFTP/Settings" menu;
*) winbox - allow setting MCS (24-31) to 4x4 Wireless interfaces;
*) winbox - do not allow to set empty "init-string" field under "System/GPS" menu;
*) winbox - do not show "Functionality" field for LTE interface if it is not provided;
*) winbox - do not show "GPS antenna" selection for devices without selection support;
*) winbox - fixed "Secondary Frequency" parameter setting under "CAPsMAN/Channel" menu;
*) winbox - fixed "Switch" menu on RBwAPG;
*) winbox - fixed DNS "cache-size" parameter setting;
*) winbox - fixed order of weekdays under "IP/Firewall" menu;
*) winbox - match "MAC Protocol-Num" predefined values under "Bridge/Filters" menu;
*) winbox - properly show "CRL Signature" field under "System/Certificate" menu;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) winbox - show IPv6 address in separate field under "IP/Cloud" menu;
*) wireless - added override for multicast-to-unicast translation of DHCP traffic;
*) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac^3;

Other changes since v6.48.3:

*) bridge - added IGMP and MLD querier monitoring (CLI only);
*) bridge - added IGMP snooping log when multicast table gets full;
*) bridge - added MAC and IP source addresses information for DHCP snooping log;
*) bridge - fixed "vlan-encap" setting for filter and NAT rules;
*) bridge - improved system stability when disabling IGMP/MLD querier port (introduced in v6.49beta22);
*) bridge - improved system stability when using IGMP snooping and changing bridge MAC address;
*) chr - fixed OS provisioning on Azure;
*) chr - improved stability when changing "flow-control" settings on interfaces with e1000 drivers;
*) conntrack - increased total connection tracking table size based on installed RAM size;
*) console - require "write+ftp" permissions for executing script to file;
*) console - require "write+ftp" permissions for printing to file;
*) crs3xx - correctly filter packets by L2MTU on 1Gbps Ethernet interfaces for CRS354 devices;
*) crs3xx - fixed LEDs for QSFP+ interface on CRS326-24S+2Q+ device;
*) crs3xx - fixed SFP and SFP+ link rate reporting (introduced in v6.48beta11);
*) crs3xx - fixed interface flow control;
*) crs3xx - fixed packet forwarding on 1Gbps Ethernet interfaces for CRS354 devices (introduced in v6.49beta44);
*) crs3xx - improved QSFP+ linking and mode changing for CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - improved packet transmit on SFP+ interfaces;
*) crs3xx - improved switch resource allocation for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) defconf - fixed minor typo in configuration description;
*) defconf - removed overlapping IPv6 firewall rules;
*) defconf - use router as DNS server for DHCP hosts;
*) dhcpv6-server - check if pool name has changed from RADIUS on renew;
*) dhcpv6-server - improved dynamic server entry update;
*) dns - fixed CNAME query when target record is not in cache;
*) firewall - fixed "ingress-priority" matcher;
*) firewall - fixed GRE protocol packets considered invalid when PPTP helper is disabled;
*) health - added "phy-temperature" sensor monitoring for CRS312 device;
*) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests;
*) ike2 - added support for ASN.1 DN "my-id" value setting for initiators;
*) ike2 - fixed initiator packet retransmit with DDOS cookie;
*) ipsec - improved system stability on CHR;
*) ipsec - improved system stability on MMIPS devices;
*) m33g - removed 12..16 pins from "/system gpio" menu;
*) mipsbe - improved booting speed on non-NAND devices ("/system routerboard upgrade" required);
*) netinstall - fixed lock file persistence after reinstall;
*) netinstall - improved bootp packet handling on Linux netinstall-cli version when multiple NIC's are present;
*) ntp - use correct IPv6 multicast group for SNTP client;
*) package - always allow to uninstall package even if there is no free disk space left;
*) poe - fixed PoE out functionality on CRS354 (introduced in v6.49beta22);
*) ppp - improved stability when receiving bogus response on modem channel;
*) rb922 - fixed miniPCI-e card detection (introduced in v6.49beta11);
*) sfp - added "sfp-rate-select" setting (CLI only);
*) sfp - fixed GPON module linking (introduced in v6.47);
*) sfp - improved link stability for 10G, 25G and 40G modules on CRS309, CRS312, CRS326-24S+2Q+ CRS354 and CCR2004 devices;
*) supout - print detailed list of active user sessions;
*) switch - fixed (R/M)STP port blocking right before switching them in HW bridge (fixes possible packet loop when changing bridge settings);
*) switch - improved packet transmit between CPU and 98PX1012 for CCR2004-1G-12S+2XS device;
*) swos - fixed "static-ip-address" parameter;
*) tr069-client - added "X_MIKROTIK_LinkDowns" parameter for interface "link-downs" value reporting;
*) upgrade - fixed free space checking on flash type memories when installing new packages;
*) w60g - improved stability in low temperature environments;
*) webfig - do not show value units twice;
*) webfig - fixed "Wireless/CAP" menu opening;
*) webfig - fixed interface sorting by name;
*) webfig - show only "Close" button under "Wireless/Wireless Sniffer/Sniffed Packets" menu;
*) winbox - added "interface-speed-100G" LED type to "System/LEDs" menu;
*) winbox - fixed health reporting on RB960, hEX, hEX S and hAP ac3 devices;
*) winbox - fixed support for "Delegated-IPv6-Prefix" for PPP services;
*) wireless - do not send packet back to station-bridge it was received from;
*) wireless - fixed minor typo in debug logging messages;
*) wireless - improve WMM priority assignment for packets with internal priority greater than 7;
*) wireless - improve regulatory compliance with DFS requirements;
*) wireless - improve signaling of QCA9984 interface capabilities when using 160/80+80MHz channel width;
*) wireless - improved system stability on several 802.11ac devices (introduced in v6.49beta36);
*) wireless - renamed "secondary-channel" to "secondary-frequency";
*) wireless - updated "united kingdom" regulatory domain information;

Changelog archive ×

What's new in 7.1rc4 (2021-Sep-20 13:18):

*) improved filesystem and configuration storage stability;
*) show "expired password" prompt for users with blank password;
*) other fixes and improvements;

Changelog archive ×