What's new in 7.24.6 (2026-10-30):

*) bridge - fix BPDUs leaking to the wrong dual-connected bond in MLAG (introduced in v7.24);
*) bridge - fix VLAN-tagged traffic being looped back in MLAG setups on CRS8xx series switches;
*) dude - fix the server not starting at boot when data-directory is on a USB disk;
*) ethernet - fix occasional packet loss on hAP be3 Media;
*) fetch - fix HTTP fetch getting stuck in a "bad HTTP response" state;
*) ipsec - fix IKEv2 EAP-TTLS client failing with invalid trust store (introduced in v7.21);
*) ipsec - fix IPsec tunnels failing after migration from the old QKD settings;
*) ipsec - fix IPsec tunnels not establishing when an address my-id is configured on the responder;
*) ptp - fix PTP support on CRS804-4DDQ;
*) quickset - fix the WAN interface being selected incorrectly;
*) route - improve static route handling performance;
*) routing-filter - fix any-regexp community matcher matching an empty community attribute;
*) routing-filter - fix community delete, filter and modify with regexp-only community lists;
*) routing-filter - fix host matching in address lists with more than 64 ranges;
*) sfp - fix DAC EEPROM corruption when disabling 400G ports on CRS804 and CRS812 switches;
*) system - improve stability (includes CVE-2026-98432);
*) system - stop the flash configuration store from growing on dynamic configuration changes;
*) wifi - reuse freed station association IDs;
*) wifi-mediatek - fix roaming between APs belonging to the same MLO group;
*) winbox - fix bridge filter window disabling valid fields for IPv6 rules;