What's new in 6.47.10 (2021-May-31 09:54):

MAJOR CHANGES IN v6.47.10:
----------------------
!) wireless - fixed all affecting 'FragAttacks' vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147);
----------------------

*) bonding - improved system stability when disabling/enabling bonding ports;
*) branding - added option to upload custom files (newly generated branding package required);
*) capsman - use proper units for "ap-tx-limit" and "client-tx-limit" parameters;
*) console - do not clear environment values if any global variable is set;
*) console - require "write+ftp" permissions for exporting configuration to file;
*) console - updated copyright notice;
*) crs3xx - added "/system swos" menu for CRS354 devices, should only be used after SwOS 2.13 release;
*) crs3xx - fixed interface LEDs for QSFP+ and SFP+ interfaces on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - improved 1Gbps Ethernet port group traffic forwarding for CRS354 devices;
*) crs3xx - improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) defconf - fixed default configuration loading on LHG R;
*) defconf - fixed default configuration loading on RBOmniTikPG-5HacD;
*) dhcp - fixed link state checking for DHCP client;
*) dude - fixed configuration menu presence on ARM64 devices;
*) ethernet - improved system stability when receiving large VLAN tagged packets on IPQ4018/IPQ4019 devices;
*) ipsec - fixed SA address parameter exporting;
*) lte - fixed "earfcn" to band translation for "cell-monitor";
*) ovpn - fixed route cache entry leak when establishing a new session;
*) poe - do not perform PoE firmware upgrade procedure on RB960 and OmniTik devices without PoE out;
*) ppp - do not fail "at-chat" command when issued on disabled PPP interface;
*) ptp - improved management service stability when receiving bogus packets;
*) quickset - prefer 5GHz interface for WiFi scan in CPE mode;
*) rb4011 - fixed SFP+ port MTU setting after link state change;
*) rb4011 - improved SFP+ port stability after boot-up;
*) route - improved stability when connected route is modified;
*) sfp - improved cable length monitoring as defined per SFF-8472 and SFF-8636;
*) supout - fixed "topic" column presence in "Log" section;
*) switch - improved system stability with 98PX1012 switch chip for CCR2004-1G-12S+2XS device;
*) system - improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN);
*) telnet - do not send options if connecting to non standard port;
*) telnet - fixed server when run on non standard port;
*) tile - fixed bridge performance degradation (introduced in v6.47);
*) tr069-client - improved management service stability when receiving bogus packets;
*) upgrade - improved "long-term" upgrade procedure on SMIPS devices;
*) webfig - allow to specify "prefix" parameter under "IPv6/ND/Prefixes" menu;
*) webfig - do not corrupt settings when starting "Wireless Sniffer";
*) webfig - do not move top right menu in opposite direction when scrolling horizontally;
*) webfig - show "network-mode" for LTE modems that support it;
*) winbox - do not show "network-mode" parameter for LTE interfaces that do not support it;
*) winbox - do not show empty "CPU Frequency" parameter under "System/Resources" menu;
*) winbox - fixed "reachable-time" value unit under "IPv6/ND" menu;
*) winbox - fixed QCA-8511 switch chip type reporting under "Switch/Settings" menu;
*) winbox - fixed health reporting on RB960, hEX and hEX S devices;
*) winbox - hide "Allow Roaming" parameter on LTE modems that do not support it;
*) winbox - increased "target" field limit to 128 under "Queues" menu;
*) winbox - show "LCD" only on boards that have LCD;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) winbox - show "activity" column by default under "IP/Kid Control/Devices" menu;
*) wireless - fixed issue with multicast traffic delivery to client devices using power-save;
*) wireless - improved iOS compatibility with HotSpot 2.0 networks;
*) www - added "X-Frame-Options" header information to disallow website embedding in other pages;

Changelog archive ×

What's new in 6.49beta46 (2021-May-18 07:56):

Changes in this release:

!) wireless - fixed all affecting 'FragAttacks' vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147);
*) crs3xx - fixed packet forwarding on 1Gbps Ethernet interfaces for CRS354 devices (introduced in v6.49beta44);
*) dns - fixed CNAME query when target record is not in cache;
*) winbox - fixed health reporting on RB960, hEX, hEX S and hAP ac3 devices;

Other changes since v6.48.2:

*) bridge - added IGMP and MLD querier monitoring (CLI only);
*) bridge - added IGMP snooping log when multicast table gets full;
*) bridge - added MAC and IP source addresses information for DHCP snooping log;
*) bridge - fixed "vlan-encap" setting for filter and NAT rules;
*) bridge - improved system stability when disabling IGMP/MLD querier port (introduced in v6.49beta22);
*) bridge - improved system stability when using IGMP snooping and changing bridge MAC address;
*) chr - fixed OS provisioning on Azure;
*) chr - improved stability when changing "flow-control" settings on interfaces with e1000 drivers;
*) conntrack - increased total connection tracking table size based on installed RAM size;
*) console - require "write+ftp" permissions for executing script to file;
*) console - require "write+ftp" permissions for printing to file;
*) crs3xx - correctly filter packets by L2MTU on 1Gbps Ethernet interfaces for CRS354 devices;
*) crs3xx - fixed Ethernet LEDs after reboot for CRS354 devices;
*) crs3xx - fixed LEDs for QSFP+ interface on CRS326-24S+2Q+ device;
*) crs3xx - fixed SFP and SFP+ link rate reporting (introduced in v6.48beta11);
*) crs3xx - fixed VLAN priority removal for CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed interface flow control;
*) crs3xx - fixed port-isolation on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - improved LACP linking between CRS3xx series switches;
*) crs3xx - improved QSFP+ linking and mode changing for CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - improved packet transmit on SFP+ interfaces;
*) crs3xx - improved switch resource allocation for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) defconf - fixed default configuration loading on RBOmniTikPG-5HacD;
*) defconf - fixed minor typo in configuration description;
*) defconf - removed overlapping IPv6 firewall rules;
*) defconf - use router as DNS server for DHCP hosts;
*) dhcpv6-server - check if pool name has changed from RADIUS on renew;
*) dhcpv6-server - improved dynamic server entry update;
*) dot1x - fixed "reject-vlan-id" for MAC authentication (introduced in v6.48);
*) dot1x - fixed MAC authentication fallback (introduced in v6.48);
*) firewall - fixed "ingress-priority" matcher;
*) firewall - fixed GRE protocol packets considered invalid when PPTP helper is disabled;
*) health - added "phy-temperature" sensor monitoring for CRS312 device;
*) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests;
*) ike2 - added support for ASN.1 DN "my-id" value setting for initiators;
*) ike2 - fixed initiator packet retransmit with DDOS cookie;
*) ipsec - fixed SA address parameter exporting;
*) ipsec - improved system stability on CHR;
*) ipsec - improved system stability on MMIPS devices;
*) lte - fixed "earfcn" to band translation for "cell-monitor";
*) m33g - removed 12..16 pins from "/system gpio" menu;
*) mipsbe - improved booting speed on non-NAND devices ("/system routerboard upgrade" required);
*) netinstall - fixed lock file persistence after reinstall;
*) netinstall - improved bootp packet handling on Linux netinstall-cli version when multiple NIC's are present;
*) ntp - use correct IPv6 multicast group for SNTP client;
*) package - always allow to uninstall package even if there is no free disk space left;
*) poe - fixed PoE out functionality on CRS354 (introduced in v6.49beta22);
*) ppp - improved stability when receiving bogus response on modem channel;
*) rb4011 - fixed SFP+ port MTU setting after link state change;
*) rb4011 - improved SFP+ port stability after boot-up;
*) rb922 - fixed miniPCI-e card detection (introduced in v6.49beta11);
*) route - improved stability when connected route is modified;
*) sfp - added "sfp-rate-select" setting (CLI only);
*) sfp - fixed GPON module linking (introduced in v6.47);
*) sfp - improved cable length monitoring as defined per SFF-8472 and SFF-8636;
*) sfp - improved link stability for 10G, 25G and 40G modules on CRS309, CRS312, CRS326-24S+2Q+ CRS354 and CCR2004 devices;
*) ssh - return proper error code from executed command;
*) supout - print detailed list of active user sessions;
*) switch - fixed (R/M)STP port blocking right before switching them in HW bridge (fixes possible packet loop when changing bridge settings);
*) switch - improved packet transmit between CPU and 98PX1012 for CCR2004-1G-12S+2XS device;
*) swos - fixed "static-ip-address" parameter;
*) system - improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN);
*) tile - fixed bridge performance degradation (introduced in v6.47);
*) tr069-client - added "X_MIKROTIK_LinkDowns" parameter for interface "link-downs" value reporting;
*) upgrade - fixed free space checking on flash type memories when installing new packages;
*) w60g - improved stability in low temperature environments;
*) webfig - do not show value units twice;
*) webfig - fixed "PortMapping" button (introduced in v6.48.2);
*) webfig - fixed "Wireless/CAP" menu opening;
*) webfig - fixed interface sorting by name;
*) webfig - show only "Close" button under "Wireless/Wireless Sniffer/Sniffed Packets" menu;
*) winbox - added "interface-speed-100G" LED type to "System/LEDs" menu;
*) winbox - fixed support for "Delegated-IPv6-Prefix" for PPP services;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) wireless - do not send packet back to station-bridge it was received from;
*) wireless - fixed issue with multicast traffic delivery to client devices using power-save;
*) wireless - fixed minor typo in debug logging messages;
*) wireless - improve WMM priority assignment for packets with internal priority greater than 7;
*) wireless - improve regulatory compliance with DFS requirements;
*) wireless - improve signaling of QCA9984 interface capabilities when using 160/80+80MHz channel width;
*) wireless - improved system stability on several 802.11ac devices (introduced in v6.49beta36);
*) wireless - renamed "secondary-channel" to "secondary-frequency";
*) wireless - updated "united kingdom" regulatory domain information;
*) www - added "X-Frame-Options" header information to disallow website embedding in other pages;

Changelog archive ×

What's new in 6.48.3 (2021-May-25 06:09):

MAJOR CHANGES IN v6.48.3:
----------------------
!) wireless - fixed all affecting 'FragAttacks' vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147);
----------------------

*) branding - added option to upload custom files (newly generated branding package required);
*) console - do not clear environment values if any global variable is set;
*) crs3xx - fixed Ethernet LEDs after reboot for CRS354 devices;
*) crs3xx - fixed VLAN priority removal for CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed port-isolation on bonding interfaces for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - improved LACP linking between CRS3xx series switches;
*) crs3xx - improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) defconf - fixed default configuration loading on RBOmniTikPG-5HacD;
*) dot1x - fixed "reject-vlan-id" for MAC authentication (introduced in v6.48);
*) dot1x - fixed MAC authentication fallback (introduced in v6.48);
*) ipsec - fixed SA address parameter exporting;
*) lte - fixed "earfcn" to band translation for "cell-monitor";
*) package - added new "iot" package with Bluetooth (KNOT only) and MQTT publisher support;
*) rb4011 - fixed SFP+ port MTU setting after link state change;
*) rb4011 - improved SFP+ port stability after boot-up;
*) route - improved stability when connected route is modified;
*) sfp - improved cable length monitoring as defined per SFF-8472 and SFF-8636;
*) ssh - return proper error code from executed command;
*) system - improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN);
*) tile - fixed bridge performance degradation (introduced in v6.47);
*) webfig - fixed "PortMapping" button (introduced in v6.48.2);
*) winbox - fixed health reporting on RB960, hEX and hEX S devices;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) wireless - fixed issue with multicast traffic delivery to client devices using power-save;
*) wireless - improved iOS compatibility with HotSpot 2.0 networks;
*) www - added "X-Frame-Options" header information to disallow website embedding in other pages;


Changelog archive ×

What's new in 7.1beta6 (2021-May-18 14:49):

!) added support for Let's Encrypt certificate generation;
!) added L3 HW support for all CRS3xx devices;
!) added MLAG support for CRS3xx devices (CLI only);
!) ported features and fixes introduced in v6.49;
*) other minor fixes and improvements;

Changelog archive ×