OpenWrt 21.02.7 seventh service release

Hauke Mehrtens hauke at
Mon May 1 14:45:46 PDT 2023


The OpenWrt community is proud to announce the newest stable release of 
the OpenWrt 21.02 stable version series. It fixes security issues and 
brings a bug fix.

Download firmware images using the OpenWrt Firmware Selector:
Download firmware images directly from our download servers:

The OpenWrt 21.02 stable series is now end of life following the OpenWrt 
Security support guidelines. We encourage all users of the OpenWrt 21.02 
stable series to upgrade to OpenWrt 22.03. We will not fix any security 
problems, even severe ones in the OpenWrt 21.02 release branch any more.

Main changes between OpenWrt 21.02.6 and OpenWrt 21.02.7:

Security fixes

   * CVE-2023-0464: openssl: Excessive Resource Usage Verifying X.509
     Policy Constraints
   * CVE-2023-0465: openssl: Invalid certificate policies in leaf
     certificates are silently ignored

Device support

   * None

Various fixes and improvements

   * Fix UBI (Unsorted Block Images) bug which prevented some devices from

Core components

   * Update uclient from 2021-05-14 to 2023-04-13


Full release notes and upgrade instructions are available at

In particular, make sure to read the regressions and known issues before 

For a detailed list of all changes since 21.02.6, refer to

To download the 21.02.7 images, navigate to:
Use OpenWrt Firmware Selector to download:

As always, a big thank you goes to all our active package maintainers,
testers, documenters and supporters.

Have fun!

The OpenWrt Community


To stay informed of new OpenWrt releases and security advisories, there
are new channels available:

   * a low-volume mailing list for important announcements:

   * a dedicated "announcements" section in the forum:

   * other announcement channels (such as RSS feeds) might be added in the
     future, they will be listed at

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x93DD20630910B515.asc
Type: application/pgp-keys
Size: 15497 bytes
Desc: OpenPGP public key
URL: <>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <>

More information about the openwrt-devel mailing list