OpenWrt 23.05.6 - Service Release

[Hauke Mehrtens]

Hi,

The OpenWrt community is proud to announce the newest stable release of 
the OpenWrt 23.05 stable series. It improves device support and brings a 
few bug fixes including security fixes.

Download firmware images using the OpenWrt Firmware Selector:
  * https://firmware-selector.openwrt.org/?version=23.05.6

Download firmware images directly from our download servers:
  * https://downloads.openwrt.org/releases/23.05.6/targets/


OpenWrt 23.05 is EOL
===================+

The OpenWrt 23.05 series is end of life according to the OpenWrt 
security policy. The last release from the OpenWrt 23.05 series is 
23.05.6, after this date we will not provide any updates for OpenWrt 
23.05, not even for severe security problems. We encourage everyone to 
upgrade to OpenWrt 24.10 which will be supported till 2026.
https://openwrt.org/docs/guide-developer/security#support_status


Main changes between OpenWrt 23.05.5 and OpenWrt 23.05.6
========================================================

Device support
==============

   * Added devices:
     * ath79: Huawei AP6010DN
     * ath79: MikroTik RouterBOARD 750 r2 (hEX lite)
     * ath79: Sophos AP15C
     * ramips: netis N6
   * ath79: ZTE MF286: fix 5GHz on QCA9886
   * ath79: add extended AR9344 reset sequence
   * ipq40xx: Aruba AP-303H: Fix PSE GPIO pin
   * ipq40xx: Meraki MR33 and MR74: fix MAC address
   * mediatek: Xiaomi Router AX3000T: Add support for Winbond
     W25N01KV flash
   * ramips: TP-Link RE200 v1 and RE210 v1: Fix booting stuck issue
   * octeon: ubnt-edgerouter: fix sysupgrade config backup/restore

Various fixes and improvements
==============================

   * iptables: backport "nft: track each register individually" from 1.9
   * wifi-scripts: Fix parsing of Capabilities

Core components update
======================

   * Update Linux from 5.15.167 to 5.15.189
   * Update mac80211 from 6.1.110-1 to 6.1.145-1
   * Update wireless-regdb from 2024.07.04 to 2025.07.10
   * Update openssl from 3.0.15 to 3.0.16
   * Update mbedtls from 2.28.9 to 2.28.10
   * Update wolfssl from 5.7.2 to 5.7.6
   * Update ca-certificates from 20230311 to 20241223
   * Update jsonfilter from 2024-01-23 to 2025-04-18
   * Update libxml from 2.12.5 to 2.14.5


Upgrading to 23.05.6
====================

Sysupgrade can be used to upgrade a device from 22.03 to 23.05, and 
configuration will be preserved in most cases.

* Sysupgrade from 21.02 to 23.05 is not officially supported.
* ipq40xx EA6350v3, EA8300, MR8300 and WHW01 require tweak to the U-Boot
   environment on update from 22.03 to 23.05. Refer to the Device wiki or
   the instruction on sysupgrade on how to do this change. Config needs
   to be reset on sysupgrade.

Known issues
============

* lantiq/xrx200 target shows error messages in DSA switch configuration
   of the integrated GSWIP switch.
   (see: https://github.com/openwrt/openwrt/pull/13200)
* OpenWrt 23.05.6 was signed with the wrong signing keys. The keys from
   OpenWrt snapshot were used for OpenWrt 23.05.6, OpenWrt 23.05.5,
   OpenWrt 23.05.4, OpenWrt 23.05.3, OpenWrt 23.05.2, OpenWrt 23.05.0 and
   the release candidates. A later OpenWrt 23.05 service release will use
   a different key.

See up to date information here:
https://openwrt.org/releases/23.05/notes-23.05.6#known_issues


-----------------

Full release notes and upgrade instructions are available at
https://openwrt.org/releases/23.05/notes-23.05.6

In particular, make sure to read the regressions and known issues before 
upgrading:
https://openwrt.org/releases/23.05/notes-23.05.6#known_issues

For a detailed list of all changes since 23.05.5, refer to
https://openwrt.org/releases/23.05/changelog-23.05.6

To download the 23.05.6 images, navigate to:
https://downloads.openwrt.org/releases/23.05.6/targets/


Use OpenWrt Firmware Selector to download:
https://firmware-selector.openwrt.org/?version=23.05.6

As always, a big thank you goes to all our active package maintainers, 
testers, documenters and supporters.

Have fun!

The OpenWrt Community

---

To stay informed of new OpenWrt releases and security advisories, there 
are new channels available:

* a low-volume mailing list for important announcements:
   https://lists.openwrt.org/mailman/listinfo/openwrt-announce

* a dedicated "announcements" section in the forum:
   https://forum.openwrt.org/c/announcements/14

* other announcement channels (such as RSS feeds) might be added in the 
future, they will be listed at https://openwrt.org/contact