v5.2.0 (2015-06-09)
* First released version

v5.2.1 (2015-07-17)
* Enabled support of USB/RS232 converters PL2303
* Enabled support of VRRP protocol
* Prohibited processing DNS TCP request from WAN
* Fixed issue with VRRP MAC address entry in ALE table
* Fixed changing APN in LTE modules
* Fixed rebinding DHCP lease after carrier loss
* Fixed termination of OpenVPN tunnel
* Fixed stopping VRRP daemon when multiple instances are running
* Downgraded program dhcpcd to version 6.4.7
* Upgraded program dnsmasq to version 2.73
* Upgraded program hostapd to version 2.4
* Upgraded program wpa_supplicant to version 2.4
* Upgraded library OpenSSL to version 1.0.1p

v5.3.0 (2015-10-13)
* Added support of 5 GHz band for WiFi
* Added support of power board PoE PSE
* Added support of 4 OpenVPN tunnels
* Added support of DHCP server on all LAN ports
* Added support of bridge in backup routes
* Added support of multiuser access
* Added CSRF attack protection
* Added passing variables SERVER_ADDR  and SCRIPT_NAME to executed CGI scripts
* Deactivated second unconnected WiFi antenna
* Updated list of USB/RS-232 converters with chip CP210x
* Changed ARP behaviour (arp_ignore=1, arp_announce=2)
* Changed default APN for PLMN 23420 to "3ireland.ie"
* Changed default APN for PLMN 27202 to "internet"
* Modified router login page
* Modified firmware update page
* Fixed switching backup routers between mobile connection and PPPoE
* Fixed cpdma rx descriptor leak on down interface
* Fixed regression in command "killall"
* Fixed dysfunction of the third Ethernet after electrostatic discharge
* Fixed starting IPsec tunnels under heavy load
* Upgraded program OpenSSH to version 7.1p1
* Upgraded program OpenVPN to version 2.3.8
* Upgraded program Openswan to version 2.6.43.1
* Upgraded program Net-SNMP to version 5.7.3

v5.3.1 (2015-10-26)
* Changed absolute URLs to relative in HTTP redirects
* Fixed order of selectable backup routes in backward compatible mode
* Fixed restoring configuration from partial backup
* Fixed initialization of power board PoE PD

v5.3.2 (2015-12-10)
* Added target "CONNMARK" and match extension "connmark" to iptables
* Fixed regression in command "mount"
* Fixed missing CSRF token check
* Fixed redirect back to "LAN Configuration" page after applying changes
* Fixed reading SMS that contains "greater than" sign via AT-SMS protocol
* Fixed connecting to LTE network with username and password
* Fixed IFF_ALLMULTI flag processing in CPSW Ethernet driver
* Fixed switching to low power mode when IN1 is active

v5.3.3 (2016-02-12)
* Increased watchdog timeout
* Modified support of expansion board XC3-DUST to reflect hardware changes
* Changed mode for receiving and sending SMS to PDU
* Fixed JFFS2 corruption after read or write failure
* Fixed receiving packets with MTU smaller than 1500 bytes
* Upgraded program dhcp-isc to version 4.1-ESV-R12-P1
* Upgraded program OpenSSH to version 7.1p2
* Upgraded library OpenSSL to version 1.0.1r

v5.3.4 (2016-03-10)
* Modified firmware name check before update
* Replaced "ext3" filesystem driver with "ext4" driver
* Fixed redirect after login
* Fixed unpacking tar archives with long filenames
* Upgraded library glibc to version 2.23
* Upgraded library OpenSSL to version 1.0.1s

v5.3.5 (2016-05-03)
* Improved throughput of USB
* Improved throughput of the third Ethernet
* Optimized firmware update
* Changed default APN for PLMN 310410 to "phone"
* Changed parameters for generating HTTPS certificates (V3, SHA2, RSA-2048)
* Disabled weak cipher RC4 in HTTPS server
* Fixed potential vulnerability in HTTP(S) server
* Fixed login to router from R-WebDog system
* Fixed decoding phone number in alphanumeric format
* Fixed reading 20-digit ICCID from SIM card
* Fixed initialization of 4th IPsec tunnel
* Fixed CVE-2014-0100 in Linux kernel
* Fixed CVE-2014-0131 in Linux kernel
* Fixed CVE-2014-8160 in Linux kernel
* Fixed CVE-2014-8709 in Linux kernel
* Fixed CVE-2015-1465 in Linux kernel
* Fixed CVE-2015-5364 in Linux kernel
* Fixed CVE-2015-5366 in Linux kernel
* Fixed CVE-2016-0821 in Linux kernel
* Fixed CVE-2014-2706 in Linux kernel
* Upgraded program dhcp-isc to version 4.1-ESV-R13
* Upgraded program OpenSSH to version 7.2p2
* Upgraded library OpenSSL to version 1.0.1t

v5.3.6 (2016-05-31)
* Updated WiFi regulatory database
* Removed support of WiFi channels 12-14 and   setting Country Code
* Fixed support of WiFi DFS for 5 GHz band
* Fixed processing of long response from DynDNS server
* Fixed setting community for 2nd SNMP user after firmware upgrade
* Upgraded program OpenVPN to version 2.3.11
* Upgraded library OpenSSL to version 1.0.2h

v6.0.0 (2016-06-29)
* Added support of IPv6
* Added support of client isolation on WiFi
* Added support of client authentication on WiFi
* Added support of controlling RS485 from Linux kernel
* Added support of Multiple WAN
* Removed support of "Extra Options" from IPsec configuration
* Removed program setkey
* Reworked configuration of switching SIM cards
* Reworked configuration and starting VPN tunnels
* Upgraded program iptables to version 1.4.21

v6.0.1 (2016-09-07)
* Added filtering out all forwarded invalid RST and FIN packets
* Reworked firmware update progress indicator
* Increased maximum value of Data Limit to 2 TB
* Increased size of ICMP packets for checking connection
* Fixed switching SIM card via SMS
* Fixed conversion of Mobile WAN configuration
* Fixed reconnection mechanism for Verizon network
* Fixed setting prefered technology
* Fixed checking of IPv6 backup routes in Multiple WANs mode
* Fixed removing IPv6 addresses from bridged interfaces
* Fixed accepting routes from RA with enabled DHCP
* Fixed setting Media Type on third Ethernet
* Fixed handling premature disconnection of HTTP client
* Fixed reading statistics via SNMP protocol
* Fixed CVE-2016-5696 in Linux kernel
* Upgraded program OpenSSH to version 7.3p1
* Upgraded program curl to version 7.50.1

v6.0.2 (2016-10-21)
* Added license information
* Added showing error message for unsupported WiFi channels
* Added logging disconnect reason
* Added detection of Verizon SIM cards based on IMSI
* Fixed selecting bridged interface with dynamic IP address as backup route
* Fixed priorities for selecting backup route
* Fixed wrong source IP address in DNS response if VRRP is enabled
* Fixed using wrong IP addresses for checking connection
* Fixed multiple issues occurring during WiFi AP restart
* Fixed multiple issues in USB driver
* Fixed multiple issues in DMA driver
* Fixed CVE-2016-7117 in Linux kernel
* Upgraded program conntrack-tools to version 1.0.1
* Upgraded library libnetfilter_conntrack to version 1.0.1
* Upgraded library libnfnetlink  to version 1.0.1
* Upgraded library glibc to version 2.24
* Upgraded library OpenSSL to version 1.0.2j

v6.0.3 (2016-12-08)
* Added support of manual carrier selection
* Improved IPsec throughput
* Increased size of ICMPv6 packets for checking connection
* Fixed APN provisioning
* Upgraded program curl to version 7.51.0
* Upgraded program dnsmasq to version 2.76

v6.1.0 (2016-12-15)
* Added support of IKEv2 for IPSec VPN
* Added support of authentication on Ethernet
* Added support of forcing NAT Traversal
* Added support of EAP-TLS authentication on WiFi
* Added support of SCP protocol
* Added support of HTTP protocol
* Added support of HTTP server configuration
* Added support of SSH server configuration
* Added support of unblocking SIM card
* Added program "stty"
* Added target "NFQUEUE" to iptables
* Fixed memory exhaustion in SSH server
* Fixed termination of SSL connection in HTTP server
* Fixed receiving IPv6 packets from cellular module

v6.1.1 (2017-03-09)
* Added support of carrier Rogers Wireless
* Added support of static routes
* Added support of backing up and restoring of user accounts
* Added support of L2TP in Linux kernel
* Added match extension "string" to iptables
* Improved security of cookies that are sent over HTTPS connection
* Modified storing content of text areas
* Modified selection of preferred operator
* Fixed automatic update of firmware
* Fixed setting of IDs in IPsec when distinguished name is used
* Fixed wrong source IPv6 address in DNS response if VRRP is enabled
* Fixed redirecting services to non-defaults ports
* Fixed buffer overflow in program "status"
* Fixed terminating of "ndppd" daemon
* Fixed CVE-2017-5970 in Linux kernel
* Fixed CVE-2017-6214 in Linux kernel
* Upgraded program tcpdump to version 4.9.0
* Upgraded program OpenSSH to version 7.4p1
* Upgraded library OpenSSL to version 1.0.2k
* Upgraded library glibc to version 2.25

v6.1.2 (2017-06-12)
* Added support of generic CDC-ECM devices
* Added automatic hiding of absent Ethernet interfaces
* Added target "TCPMSS" and match extension "tcpmss" to iptables
* Added programs "cmp", "head" and "wc"
* Added filtering of uploaded files by extension
* Added safer cellular module shutdown
* Changed default APN for PLMN 26201 to "internet.telekom"
* Changed IKEv1 payload order due to better interoperability
* Removed mechanism that causes reboots in case of no mobile connectivity
* Fixed switching back to default SIM card
* Fixed sending warning SMS after exceeding the data limit
* Fixed terminating of L2TP tunnel
* Fixed terminating of program "nc"
* Fixed CVE-2016-10229 in Linux kernel
* Fixed CVE-2017-5897 in Linux kernel
* Upgraded program OpenVPN to version 2.3.15
* Upgraded program strongSwan to version 5.5.3
* Upgraded program iw to version 3.5
* Upgraded library zlib to version 1.2.11

v6.1.3 (2017-08-10)
* Added protection against Clickjacking and XSS attacks
* Added wait for firmware update finish to program "reboot"
* Added match extension "statistic" to iptables
* Enabled support of user binaries with Thumb instructions
* Disabled renegotiation of SSL connection
* Fixed registration to unavailable mobile network
* Fixed reset of mobile statistics at time shift
* Fixed occasional freezing of backup routing daemon
* Fixed GRE tunnel initialization
* Fixed IPsec tunnel termination
* Fixed DNS64 translation on interfaces without IPv6 address
* Upgraded program OpenVPN to version 2.3.17
* Upgraded program tcpdump to version 4.9.1

v6.1.4 (2017-09-27)
* Added missing 5 GHz WiFi bands
* Added timestamps to the kernel log
* Added list of installed user modules to report file
* Added program "top"
* Enabled resizing of "vi" editor window
* Fixed filtering of DNS requests
* Fixed IPsec tunnel termination
* Fixed IPsec tunnel checking mechanism
* Fixed routing IPv6 packets over IPv4 IPsec tunnel
* Fixed removing iptables rules after IPsec termination
* Fixed routing of the second subnet over IPsec tunnel
* Fixed default configuration of OpenVPN  tunnels
* Fixed restarting of SSH server
* Fixed multiple issues in USB driver
* Fixed calculation of connection uptime
* Upgraded program OpenVPN to version 2.3.18
* Upgraded program tcpdump to version 4.9.2

v6.1.5 (2017-12-19)
* Added protocols GRE and ESP to firewall configuration
* Added emergency reboot in case of unrecoverable kernel failure
* Improved speed of SIM card switching
* Improved compatibility of IKEv2 protocol
* Hidden sensitive information in web interface
* Allowed entering empty DHCP lease time
* Fixed WPA2 vulnerabilities
* Fixed calculation of connection uptime
* Fixed multiple issues in the third Ethernet driver
* Fixed multiple issues in WiFi driver
* Upgraded firmware in WiFi module to version 8.9.0.0.76
* Upgraded library OpenSSL to version 1.0.2n
* Upgraded program OpenSSH to version 7.6p1
* Upgraded program curl to version 7.57.0
* Upgraded program dnsmasq to version 2.78
* Upgraded program hostapd to version 2.6
* Upgraded program wpa_supplicant to version 2.6

v6.1.6 (2018-03-11)
* Added support of GCM ciphers to IPsec
* Added support of ECP DH groups to IPsec
* Added support of XAUTH to IPsec
* Added support of PubKey to IPsec
* Added support of IKEv2 reauthentication IPsec
* Added program "split"
* Added list of opened TCP and UDP sockets to the report file
* Added information from installed user modules to the report file
* Allowed using special characters in password for new user account
* Changed default APN for PLMN 23201 to "a1.net"
* Improved emergency reboot in case of unrecoverable kernel failure
* Fixed multiple issues in the third Ethernet driver
* Fixed multiple issues in I2C driver
* Fixed connection to LTE networks
* Fixed MAC address in SNMP in case of active VRRP
* Fixed static routes via PPPoE and bridged interfaces
* Fixed CVE-2017-18017 in Linux kernel
* Upgraded program curl to version 7.58.0
* Upgraded program dhcp-isc to version 4.1-ESV-R15-P1

v6.1.7 (2018-07-25)
* Added match extension "policy" to iptables
* Added displaying of RTC battery status
* Added new options to program "led"
* Added possibility to enable FTP and Telnet services
* Added support of DNS configuration to PPPoE
* Modified authorization of SMS command "REBOOT"
* Modified texts of informational SMS
* Modified SIM cards statistics and connection log
* Modified threshold of good and bad signal level
* Modified validation of netmask
* Modified selection of local IP address for IPsec tunnels
* Fixed counting of transferred data
* Fixed check of IPv6 connection
* Fixed the first DNS64 translation
* Fixed selection of SNMP trap agent-addr
* Fixed overwriting of parameter PORT_MODE during import of partial configuration
* Fixed check of unsupported WiFi channel
* Fixed several bugs in USB driver
* Upgraded library OpenSSL to version 1.0.2o
* Upgraded program curl to version 7.61.0

v6.1.8 (2018-11-08)
* Added command "sync"
* Added logging of user actions
* Added configuration of syslog service
* Added support of uploading HTTPS certificate
* Added support of mirroring network traffic
* Added information about product type into program "status"
* Added information about expected range of values to web interface
* Fixed selection of PSK for IKEv1 Main Mode
* Fixed update of DynDNS record
* Fixed crashing of DHCP client
* Fixed reading A/D converter values under heavy load
* Fixed CVE-2018-14526 in program wpa_supplicant
* Fixed CVE-2018-5391 in Linux kernel
* Upgraded library OpenSSL to version 1.0.2p
* Upgraded program BusyBox to version 1.29.3
* Upgraded program Net-SNMP to version 5.8
* Upgraded program OpenSSH to version 7.9p1
* Upgraded program curl to version 7.62.0

v6.1.9 (2019-04-23)
* Added program "nohup"
* Added program "report"
* Added program "umupdate"
* Added support of Quectel EC25-AF modules
* Added possibility to set timeout for checking connection
* Added possibility to set port range to Firewall and NAT configuration
* Added information about additional interfaces into SNMP
* Modified comparison of firmware versions
* Modified switching to another SIM card after modem hangup
* Modified reconnection mechanism for AT&T network
* Modified reading out ICCID from SIM card
* Increased WiFi throughput
* Increased buffer size for USB bulk transfers
* Fixed check of IPv6 connection
* Fixed IPv6 prefix delegation
* Fixed switching to lower power mode while binary input is already active
* Fixed JavaScript on page SMTP Configuration
* Fixed JavaScript on page SMS Configuration
* Upgraded library OpenSSL to version 1.0.2r
* Upgraded program OpenSSH to version 8.0p1
* Upgraded program curl to version 7.64.1
* Upgraded program dnsmasq to version 2.80
* Upgraded program hostapd to version 2.8
* Upgraded program wpa_supplicant to version 2.8

v6.1.10 (2019-07-02)
* Added protection against brute force attacks
* Added filtering out of sensitive data from the report
* Added support of backup and restore of encrypted configuration
* Added support of dynamic starting time of automatic update
* Added dropping SYN packets with suspicious MSS value
* Extended compatibility check of uploaded user modules
* Enabled OpenVPN management interface
* Fixed route selection in Multi WAN mode
* Fixed setting preferred technology
* Fixed sending and receiving SMS from Quectel EC25-AF modules
* Fixed activation of ODIS/DHIR in Quectel EC25-AF modules
* Fixed CVE-2019-11477 in Linux kernel
* Fixed CVE-2019-11478 in Linux kernel

v6.2.0 (2019-08-16)
* Added support of WiFi multi-role
* Added support of load balancing
* Added support of interface selection to PPPoE client
* Added support of IEEE 802.1Q to PPPoE client
* Added support of PAM RADIUS authentication
* Added support of hardware flow control
* Added support of loading certificates in PEM format
* Added support of loading certificates in PKCS#12 format
* Added support of VRRPv3 and the second instance
* Changed look of the web interface
* Applied toolchain hardening
* Fixed netmask validation
* Upgraded Linux kernel to version 4.14.138
* Upgraded library glibc to version 2.30
* Upgraded program OpenVPN to version 2.4.7
* Upgraded program curl to version 7.65.3
* Upgraded program sudo to version 1.8.22
* Upgraded program iproute2 to version 4.14.1
* Upgraded program iw to version 4.14
* Upgraded program hostapd to version 2.9
* Upgraded program wpa_supplicant to version 2.9

v6.2.1 (2019-10-16)
* Added support of inotify for monitoring filesystem events
* Added support of 64-bit traffic counters
* Fixed counting transferred data over mobile connection
* Fixed processing of non-standard responses to AT commands
* Fixed processing of corrupted bootloader configuration
* Fixed access to FTP/PPTP server behind NAT
* Fixed crashing of PPTP client
* Fixed crashing of Linux kernel during WiFi restart
* Fixed setting of Ethernet PHY
* Fixed RS485 direction control during reception
* Fixed CVE-2019-16746 in Linux kernel
* Fixed CVE-2019-17133 in Linux kernel
* Upgraded firmware in WiFi module to version 8.9.0.0.79
* Upgraded library OpenSSL to version 1.0.2t
* Upgraded library libpcap to version 1.9.1
* Upgraded program tcpdump to version 4.9.3

v6.2.2 (2019-12-16)
* Added programs "snmpget" and "snmpset"
* Added support of PAM TACACS+ authentication
* Added taking over of server users during RADIUS/TACACS+ authentication
* Changed default APN for AT&T SIM cards to "broadband"
* Changed default APN for FirstNet SIM cards to "firstnet-broadband"
* Changed format of transferred data in output of "status -v" command
* Increased maximum number of pending TCP connections in HTTP server
* Fixed support of Texas Instrument WL1807 modules in multi-role mode
* Fixed routing packets over IPsec with overlapping subnets
* Fixed establishing of L2TP tunnel
* Fixed CVE-2019-16275 in program hostapd
* Upgraded program curl to version 7.67.0

v6.2.3 (2020-02-11)
* Added checking of DPD delay and DPD timeout in IPsec configuration
* Reworked restarting WiFi so AP and STA are started independently
* Disabled reverse IP lookup in PAM RADIUS plugin
* Disabled reverse IP lookup in FTP server
* Fixed occasional WiFi malfunctions due to wrong IRQ configuration
* Fixed several bugs in VRRP
* Fixed restoring default configuration when RST button is pressed during boot sequence
* Fixed processing of very long AT command response

v6.2.4 (2020-04-25)
* Added support of SHA384 to IPsec
* Added configuration of restraints for FTP and Telnet
* Added configuration of minimum TLS protocol version
* Added information about misaligned memory access to the report file
* Changed default APN for PLMN 45435 to "wbdata"
* Fixed performance issues in the third Ethernet driver
* Fixed creating VLANs with ID 1 and 2
* Fixed unlocking and unblocking SIM card
* Fixed information about flags of bridges interfaces
* Fixed CVE-2019-5108 in Linux kernel
* Fixed CVE-2019-18282 in Linux kernel
* Fixed CVE-2020-8597 in program pppd
* Fixed CVE-2018-5388 in program strongSwan
* Fixed CVE-2018-10811 in program strongSwan
* Upgraded program OpenVPN to version 2.4.9
* Upgraded program dhcpcd to version 7.2.5
* Upgraded program dnsmasq to version 2.81
* Upgraded program ftpd to version 1.9.4
* Upgraded program sudo to version 1.8.31

v6.2.5 (2020-06-13)
* Added support for 802.1X authentication via Ethernet interfaces
* Changed password encryption method from MD5 to SHA256
* Increased maximum number of parameters in a configuration file to 1000
* Disabled autocomplete of password fields
* Hidden sensitive information in web interface
* Fixed detection of MRAM during startup
* Fixed CVE-2019-19447 in Linux kernel
* Upgraded program strongSwan to version 5.8.4

v6.2.6 (2020-09-11)
* Added description field for each FW and NAT rule
* Enabled support of VRF Lite in Linux kernel
* Enabled support of UNIX98 pseudoterminals
* Changed default APN for PLMN 24007 to "4g.tele2.se"
* Changed default APN for PLMN 45403 to "mobile.three.com.hk"
* Changed default APN for PLMN 42501 and MSIN 9320xxxxxx to "wbdata"
* Fixed rare issue when restarting SNMP service
* Upgraded program dnsmasq to version 2.82

v6.2.7 (2020-12-17)
* Added support of Short GI to WiFi AP configuration
* Added support of Hardware UUID
* Added programs "port1" and "port2" for controlling expansion ports
* Added logging of user authentication failure when accessing the web interface
* Improved identification of router type in the web interface
* Improved permission checking when executing commands like "status"
* Enabled support of POSIX message queues in Linux kernel
* Fixed importing encrypted key from file
* Fixed CVE-2020-25705 in Linux kernel
* Upgraded library OpenSSL to version 1.1.1i
* Upgraded program OpenVPN to version 2.4.10
* Upgraded pam_tacplus plugin to version 1.6.1

v6.2.8 (2021-02-19)
* Added support of tls-crypt mode to OpenVPN configuration
* Added support of setting local IP address to GRE configuration
* Added ability to restrict HTTPS to TLS 1.3
* Added program ebtables
* Added program doas as a replacement for program sudo
* Enabled automatic reboot when all memory is exhausted
* Enabled authoritative mode of DHCP server for WiFi clients
* Fixed resolving of IP address in OpenVPN
* Fixed possible reflected XSS attack
* Upgraded library OpenSSL to version 1.1.1j
* Upgraded program curl to version 7.74.0
* Upgraded program dnsmasq to version 2.84

v6.2.9 (2021-04-07)
* Added detailed information about the signal to mobile network status
* Added information about frequency band to mobile network status
* Added programs "basename", "cut", "dirname", "printf", "readlink" and "realpath"
* Added JavaScript validation of string inputs
* Changed default APN for PLMN 22603 to "broadband"
* Changed default APN for PLMN 22610 to "net"
* Upgraded library OpenSSL to version 1.1.1k
* Upgraded program curl to version 7.76.0
* Upgraded program ftpd to version 2.0

v6.3.0 (2021-05-07)
* Added support of Multi SSID
* Added support of route-based VPN to IPsec
* Added support of certificate-chain validation in IPsec
* Added support of certificate revocation check to IPsec
* Change output of "status" command to show TAC in case of LTE networks
* Changed module shutdown sequence to prevent "call throttled" errors
* Changed remote syslog to use standard RFC 3164 format
* Fixed RS232 hardware flow control
* Upgraded program OpenSSH to version 8.5p1
* Upgraded program OpenVPN to version 2.4.11
* Upgraded program dnsmasq to version 2.85
* Upgraded program strongSwan to version 5.9.2

v6.3.1 (2021-07-21)
* Added support of the second binary input to SMS configuration
* Added support of setting MTU and MRU to PPTP configuration
* Added support of setting MTU and MRU to L2TP configuration
* Increased number of firewall rules from 8 to 16
* Fixed checking IPsec SA for multiple tunnels with same IDs
* Fixed WiFi interface statistics
* Fixed CVE-2020-24586 in Linux kernel
* Fixed CVE-2020-24587 in Linux kernel
* Fixed CVE-2020-24588 in Linux kernel
* Fixed CVE-2020-26139 in Linux kernel
* Fixed CVE-2020-26147 in Linux kernel
* Upgraded firmware in WL1807 WiFi modules to version 8.9.0.0.86
* Upgraded program dhcp-isc to version 4.1-ESV-R16-P1
* Upgraded program curl to version 7.78.0
* Upgraded program strongSwan to version 5.9.3

v6.3.2 (2021-09-30)
* Added support of WPA3 security
* Added support of SSID isolation
* Added support of Docker
* Added program "shred"
* Added program "sysctl"
* Added match extension "mark" to ebtables
* Added match extension "addrtype" to iptables
* Added common CA certificates
* Added information about frequency band and signal to SNMP
* Added information about RAM and CPU usage to SNMP
* Enabled SFTP file access logging
* Enabled protection against TCP TIME-WAIT Assassination
* Disabled compression and deprecated ciphers in OpenSSL library
* Improved security of Linux kernel and userspace
* Improved security of HTTP(S)
* Improved security of cookies
* Improved security and interoperability of IPsec
* Switched Telit LE910-NA1 and Quectel EC25-AF modules to "data centric" mode
* Fixed setting of Perfect Forward Secrecy in IPsec
* Upgraded library OpenSSL to version 1.1.1l
* Upgraded program curl to version 7.79.1

v6.3.3 (2021-12-13)
* Added support of WireGuard VPN
* Added support of Cisco FlexVPN to IPsec
* Added SINR to mobile network status and SNMP mobile subtree
* Added waiting for RESET button release before resetting
* Renamed menu item "LAN" to "Ethernet" in web interface
* Enabled permanent displaying Location and Name in web interface
* Enabled automatic decrease of MTU value according to mobile network
* Changed default TTL for GRE packets to 64
* Fixed remote access issue when using route-based IPsec
* Fixed possible reflected XSS attack
* Fixed exit code of program "snmptrap"
* Fixed compatibility of external kernel modules
* Fixed several issues in USB and DMA drivers
* Upgraded firmware in WL1807 WiFi modules to version 8.9.0.0.88
* Upgraded program BusyBox to version 1.34.1
* Upgraded program OpenSSH to version 8.8p1
* Upgraded program strongSwan to version 5.9.4

v6.3.4 (2022-02-09)
* Added support of two-factor authentication
* Added support of second remote IP address to IPsec configuration
* Added support of second remote IP address to OpenVPN configuration
* Added support of user-defined up/down scripts to IPsec configuration
* Added support of user-defined up/down scripts to OpenVPN configuration
* Added support of passphrase to OpenVPN configuration
* Added support of username and password in OpenVPN X.509 multiclient mode
* Added support of setting MTU to IPsec configuration
* Added support of setting MTU on Ethernet interfaces
* Added support of regenerating SSH key
* Added support of automatic redirect to a welcome page
* Added support of resolving "localhost"
* Added invalidation of other active sessions after password change
* Fixed IPsec malfunction when ID does not match certificate subject
* Fixed backup of IPv6 up/down scripts during firmware update
* Fixed CVE-2021-20322 in Linux kernel
* Fixed CVE-2021-45485 in Linux kernel
* Fixed CVE-2021-45486 in Linux kernel
* Upgraded library libnl to version 3.2.25
* Upgraded program hostapd to version 2.10
* Upgraded program ppp to version 2.4.9
* Upgraded program strongSwan to version 5.9.5
* Upgraded program wpa_supplicant to version 2.10

v6.3.5 (2022-04-20)
* Added support of TAP interface to OpenVPN configuration
* Added support of changing device ID for remote logging
* Added USB/IP EVEUSB driver to Linux kernel
* Added program "dd" for copying files
* Renamed User Modules to Router Apps
* Fixed connection to a mobile network in IPv6 mode
* Upgraded library zlib to version 1.2.12
* Upgraded library OpenSSL to version 1.1.1n
* Upgraded program OpenVPN to version 2.4.12

v6.3.6 (2022-06-16)
* Added support of asymmetric PSK to IPsec configuration
* Added match extension "u32" to iptables
* Improved DHCP server status in web interface
* Fixed sending ICMPv6 ping over PPPoE interface
* Fixed resolving IPv6 addresses to MAC addresses
* Fixed VLAN/VRF ID listing in program "ip"
* Fixed WireGuard service status in the report file
* Fixed issue with Node-RED login
* Upgraded library OpenSSL to version 1.1.1o
* Upgraded program curl to version 7.83.1
* Upgraded program net-snmp to version 5.9.1
* Upgraded program strongSwan to version 5.9.6

v6.3.7 (2022-09-27)
* Added support of login banner to SSH server configuration
* Added support of login banner to HTTP server configuration
* Added support of displaying live data in the web interface
* Added package versions to the license list in the web interface
* Added support of license lists in User Modules
* Added possibility to set timeout for command "gsmat"
* Improved security by running several services in unprivileged mode
* Improved security by generating position-independent code
* Enabled HSTS policy mechanism in case that HTTP access is disabled
* Disabled TLS 1.0 and TLS 1.1 in default configuration
* Removed limitations of configuration parameter length
* Fixed occasional crashing of VRRP daemon
* Fixed calling  IPsec and OpenVPN up/down scripts in alternative profiles
* Fixed CVE-2022-1012 in Linux kernel
* Fixed CVE-2022-20368 in Linux kernel
* Fixed CVE-2022-32296 in Linux kernel
* Fixed CVE-2022-36946 in Linux kernel
* Fixed CVE-2022-37434 in library zlib
* Fixed CVE-2022-28391 in program BusyBox
* Replaced package inetutils with pure-ftpd
* Replaced program ndppd with program ndp-proxy
* Upgraded library OpenSSL to version 1.1.1q
* Upgraded library glibc to version 2.35
* Upgraded program Net-SNMP to version 5.9.3
* Upgraded program curl to version 7.85.0

v6.3.8 (2022-12-02)
* Added support of WiFi interfaces to SNMP
* Added support of product revision to web interface and SNMP
* Added password validation to CGI scripts
* Improved security by running several services in unprivileged mode
* Increased timeout for sending SMS to 20 seconds
* Increased timeout for network registration for Webbing SIM cards to 5 minutes
* Disabled weak ciphers MD4 and RC4 in OpenSSL library
* Fixed occasional Ethernet malfunction
* Fixed mobile connection check when setting "enabled + bind"
* Fixed minor issue with 802.1X authentication over Ethernet
* Upgraded library zlib to version 1.2.13
* Upgraded program curl to version 7.86.0
* Upgraded program dnsmasq to version 2.87
* Upgraded program dhcp-isc to version 4.1-ESV-R16-P2
* Upgraded program iptables to version 1.8.8
* Upgraded program keepalived to version 2.2.7
* Upgraded program strongSwan to version 5.9.8
* Upgraded program tcpdump to version 4.99.1
* Upgraded utilities e2fsprogs to version 1.45.7
