What's new in 7.23.3 (2026-Jul-30 14:17):

*) certificate - added "ISRG Root X2", "Root YE" and "Root YR" to SMIPS built-in root certificate authorities store;
*) certificate - added "Root YE" and "Root YR" to built-in root certificate authorities store;
*) defconf - added virtual "iot-wifi" to MLO supporting devices;
*) dhcpv4-server - fixed "expires-after" field for disabled static lease (introduced in v7.23);
*) fastpath - properly fall back to SlowPath when FastPath is not possible due to fragmentation;
*) ipsec - fixed identity lookup to skip past disabled and certificate-matched identities when scanning for an exact ID match;
*) ipsec,ike2 - improved logging when remote ID is specified;
*) ipsec,ike2 - use peer certificates also when identity has one set for peer matching;
*) ipv6,ra - show warning about paused automatic RA on upgraded routers;
*) ospf - fixed "duplicate config" issue when using ptp-unnumbered interface type;
*) ptp - fixed a race condition when reading transmit timestamps, which could cause unstable clock offset under background traffic;
*) ptp - fixed PTPv1 traffic forwarding when a PTPv2 profile is enabled on bridge ports;
*) snmp - improved SNMPv3 request processing logic;
*) system - added microSD card support for hAP be3 Media;
*) system - improved handling of data re-sending on authorization requests (introduced in v7.22);
*) system - improved stability;
*) system - updated certificate for Windows executable signing;
*) tftp - limit maximum simultaneous session count to 100;