OpenWrt 23.05.2 - Service Release

[Hauke Mehrtens]

Hi,

The OpenWrt community is proud to announce the newest stable release of 
the OpenWrt 23.05 stable series. It improves device support and brings a 
few bug fixes.

Download firmware images using the OpenWrt Firmware Selector:
   * https://firmware-selector.openwrt.org/?version=23.05.2
Download firmware images directly from our download servers:
   * https://downloads.openwrt.org/releases/23.05.2/targets/

Main changes between OpenWrt 23.05.0 and OpenWrt 23.05.2
========================================================

23.05.1 was tagged, but not official release because we found a severe 
bug between tagging and announcing the release.

Device support
==============

   * Support for the following devices was added:
     * bcm53xx: ASUS RT-AC3100
     * mediatek: CMCC RAX3000M
     * mediatek: MT7981 RFB
     * ramips: ComFast CF-E390AX
     * ramips: ComFast CF-EW72 V2
     * ramips: MeiG SLT866 4G CPE
     * realtek: HPE 1920-8g-poe+ (65W)
   * apm821xx: Netgear WNDR4700: Fix broken sysupgrade, factory images
   * armsr: Preserve configuration during sysupgrade
   * ath79: Compex wpj563: Enable 2nd USB controller
   * ath79: TP-Link Archer C7 v2: Fix wifi shutdown and "irq 23: nobody
     cared" error
   * bcm53xx: Make Linux use correct switch ports again
   * bcm53xx: Linksys EA9200: nvram and 02_network fixes
   * ipq40xx: Switch to performance governor by default
   * lantiq: xrx200: Build target again
   * mediatek: Xiaomi Redmi Router AX6000: Fix Ethernet in U-Boot
   * realtek: HPE 1920-8g-poe: Rename to match hardware
   * ramips: HiWiFi HC5861: Fix Gigabit Ethernet port
   * ramips: ZyXEL NR7101: Fix bricking typo


Various fixes and improvements
==============================

   * Fix assignment of default MAC addresses on some targets
   * build: Hide kmod-zram config unless enabled
   * build: Fix lto build
   * build: Fix glibc build
   * build: Fix pkg-config detection when inside of a nix-shell
   * build: Add CycloneDX SBOM JSON support
   * hostapd: Do not trim trailing whitespace, except for newline
   * hostapd: Fix OWE association with mbedtls
   * hostapd: Fix broken WPS on broadcom-wl and ath11k
   * hostapd: Fix broken noscan option
   * wifi: Fix applying mesh parameters when wpa_supplicant is in use
   * iptables: backport patch fixing bug with string module
   * mbedtls: Activate secp521r1 curve by default
   * px5g-mbedtls: Fix permission of private key
   * px5g-wolfssl: Fix permission of private key
   * netifd: Fixed race condition in default gateway configuration

Core components update
======================

   * Update mbedtls from 2.28.4 to 2.28.5
   * Update openssl from 3.0.11 to 3.0.12
   * Update wolfssl from 5.6.3 to 5.6.4
   * Update Linux from 5.15.134 to 5.15.137
   * Update ipq-wifi from 2023-06-03 to 2023-11-10
   * Update uqmi from 2022-05-04 to 2022-10-20
   * Update umdns from 2023-01-16 to 2023-10-19
   * Update urngd from 2023-07-25 to 2023-11-01
   * Update ucode from 2023-06-06 to 2023-11-07
   * Update firewall4 from 2023-03-23 to 2023-09-01
   * Update odhcpd from 2023-06-24 to 2023-10-24
   * Update netifd from 2023-10-20 to 2023-11-10


Upgrading to 23.05.2
====================

Sysupgrade can be used to upgrade a device from 22.03 to 23.05, and 
configuration will be preserved in most cases.

  * Sysupgrade from 21.02 to 23.05 is not officially supported.
  * ipq40xx EA6350v3, EA8300, MR8300 and WHW01 require tweak to the
    U-Boot environment on update from 22.03 to 23.05. Refer to the Device
    wiki or the instruction on sysupgrade on how to do this change.
    Config needs to be reset on sysupgrade.


Known issues
============

   * lantiq/xrx200 target shows error messages in DSA switch
     configuration of the integrated GSWIP switch. (see:
     https://github.com/openwrt/openwrt/pull/13200)
   * OpenWrt 23.05.2 was signed with the wrong signing keys. The keys
     from OpenWrt snapshot were used for OpenWrt 23.05.2 including the
     release candidates. A later OpenWrt 23.05 service release will use a
     different key.

See up to date information here:
https://openwrt.org/releases/23.05/notes-23.05.2#known_issues


-----------------

Full release notes and upgrade instructions are available at
https://openwrt.org/releases/23.05/notes-23.05.2

In particular, make sure to read the regressions and known issues before 
upgrading:
https://openwrt.org/releases/23.05/notes-23.05.2#known_issues

For a detailed list of all changes since 23.05.0, refer to
https://openwrt.org/releases/23.05/changelog-23.05.2

To download the 23.05.2 images, navigate to:
https://downloads.openwrt.org/releases/23.05.2/targets/
Use OpenWrt Firmware Selector to download:
https://firmware-selector.openwrt.org/?version=23.05.2

As always, a big thank you goes to all our active package maintainers, 
testers, documenters and supporters.

Have fun!

The OpenWrt Community

---

To stay informed of new OpenWrt releases and security advisories, there 
are new channels available:

   * a low-volume mailing list for important announcements:
https://lists.openwrt.org/mailman/listinfo/openwrt-announce

   * a dedicated "announcements" section in the forum:
https://forum.openwrt.org/c/announcements/14

   * other announcement channels (such as RSS feeds) might be added in 
the future, they will be listed at https://openwrt.org/contact