The OpenWrt community is proud to announce the third service release of OpenWrt 21.02. It fixes security issues, improves device support, and brings a few bug fixes.

We recently moved our bugs to GitHub, please report issues over there (after checking that nobody else posted the same issue before).https://github.com/openwrt/openwrt/issues/

Download firmware images via the Firmware Selector or directly from our download servers:
• https://firmware-selector.openwrt.org
• https://downloads.openwrt.org/releases/21.02.3/

Main changes from OpenWrt 21.02.2:

Security fixes
==============

* wolfssl: Fix multiple security problems (CVE-2022-25638, CVE-2022-25640)
* openssl: Fix security problem (CVE-2022-0778)
* zlib: Backport security fix for a reproducible crash in compressor

Device support
==============

* Support for the following devices was added:
* Yuncore XD3200
* Yuncore A930
* MikroTik RouterBOARD mAPL-2nD (mAP lite)
* ramips: Make memory detection more reliable
* ramips: Fix reboot for remaining 32 MB boards
* x86: Add pata_sis driver
* ipTIME mt7620 devices: Fix flash detection
* Turris Omnia: Improve detection of u-boot environment with U-boot 2021.09
* Ubiquiti UniFi: Fix label MAC address
* mvebu: udpu: Fix initramfs booting
* a20-olinuxino-lime2: Fix Ethernet link detection on
* TP-Link TL-WR1043ND v4: Fix TPLINK_HWREV field
* OCEDO Raccoon: Fix link for long cables
* Ubiquiti UniFi AP Outdoor+: Fix label MAC address
* TP-Link WPA8630Pv2: Move to ath79-tiny target
* Improve support for some GPON SFP modules

Various fixes and improvements
==============================

* Fix SSL certificate validation with some sites especially sites using Let’s Encrypt certificates
* hostapd fixes and improvemnts:
* fix radius problem due to invalid attributes
* Expose more data over ubus
* base-files: Call “sync” after initial setup
* imagebuilder: Fix broken image generation with external targets

Core components
===============

* Update Linux kernel from 5.4.179 to 5.4.188
* Update openssl from 1.1.1m to 1.1.1n
* Update cypress-firmware from 5.4.18-2020_0402 to 5.4.18-2021_0812
* Update mac80211 from 5.10.85 to 5.10.110
* Update wolfssl from 5.1.1 to 5.2.0


Known issues
============

* Some IPv6 packets are dropped when software flow offloading is used: https://bugs.openwrt.org/index.php?do=d ... sk_id=3373
* As a workaround, do not activate software flow offloading, it is deactivate by default.

Full release notes and upgrade instructions are available at https://openwrt.org/releases/21.02/notes-21.02.3

In particular, make sure to read the regressions and known issues before upgrading: https://openwrt.org/releases/21.02/note ... egressions

For a detailed list of all changes since 21.02.2, refer to https://openwrt.org/releases/21.02/changelog-21.02.3

To download the 21.02.3 images, navigate to: https://downloads.openwrt.org/releases/21.02.3/

As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters.

Have fun!

The OpenWrt Community