_______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 22.03.5, r20134-5f15225c1e
 -----------------------------------------------------

The OpenWrt community is proud to announce the newest stable release of the OpenWrt 22.03 stable version series. It fixes security issues, improves device support, and brings a few bug fixes.

Download firmware images via the Firmware Selector or directly from our download servers:

• Download firmware image for your device (firmware selector)
• Download firmware images directly from OpenWrt download servers

An upgrade from OpenWrt 21.02 or 22.03 to OpenWrt 22.03.5 is supported in many cases with the help of the sysupgrade utility which will also attempt to preserve the configuration. A configuration backup is advised nonetheless when upgrading to OpenWrt 22.03. (see “Upgrading” below).

Only the main changes are listed below. See changelog-22.03.5 for the full changelog.

Security fixes

• CVE-2023-0464: openssl: Excessive Resource Usage Verifying X.509 Policy Constraints
• CVE-2023-0465: openssl: Invalid certificate policies in leaf certificates are silently ignored

Device support

• Archer AX23 / MR70X: Reduce SPI-frequency
• Aruba AP-105: Create APBoot compatible image
• Buffalo WSR-600DHP: Fix boot loop

Various fixes and improvements

• Fix UBI (Unsorted Block Images) bug which prevented some devices from booting
• Fix ccache compile with GCC 13

Core components update

• Update uclient from 2021-05-14 to 2023-04-13

Upgrading to 22.03.5

Sysupgrade can be used to upgrade a device from OpenWrt 21.02 or 22.03 to 22.03.5 and configuration will be preserved in most cases.

Warning Sysupgrade from 19.07 to 22.03.x is not supported.

Warning There is no migration path for targets that switched from swconfig to DSA. In that case, sysupgrade will refuse to proceed with an appropriate error message: Image version mismatch. image 1.1 device 1.0 Please wipe config during upgrade (force required) or reinstall. Config cannot be migrated from swconfig to DSA Image check failed

Known issues

See reporting bugs if you encounter issues with this release.

Broken MV88E6176 switch

Devices featuring the MV88E6176 integrated switch are currently broken in 22.03: the switch behaves as a hub, meaning network packets will be sent to all ports. This bug is documented in (FS#11077). This problem is only seen with kernel 5.10. OpenWrt 21.02 and OpenWrt master are not affected.