*) ssl - fixed memory leak on ssl connect/disconnect (fetch, ovpn, etc.);
*) supout - erase panic data properly on Netinstall;
*) switch - fixed switch compact export;
*) timezone - updated timezone information from tzdata2016e release;
*) traffic-flow - added ipfix support (RFC5101 and RFC5102);
*) trafficflow - allow to filter with interface lists;
*) tunnel - added option to auto detect tunnel local-address;
*) upnp - fixed firewall rules not being dynamic;
*) upnp - fixed nat rule dst-port by making it visible again;
*) usb - I-tec U3GLAN3HUB usb hub/ethernet dongle now shows up correctly as ethernet interface;
*) usb - implement possibility to recognize usb hubs/ethernet-dongles (if usb hubs/ethernet-dongles are not recognized with this version - send supout.rif file);
*) userman - fixed crash on database upload;
*) userman - use ipnpb.paypal.com for payment verification;
*) wap-ac - fixed performance problems with 2.4GHz wireless (additional reboot after upgrade required);
*) webfig - reduced refresh time for wireless registration table to 1 second;
*) winbox - added arp-timeout setting to all ethernet like interfaces;
*) winbox - added domain name support for IPv6 address list;
*) winbox - do not allow to specify vlan-mode=no-tag in capsman datapath config;
*) winbox - do not show mode setting for WDS interfaces;
*) winbox - fixed crash when using ctrl+d;
*) winbox - make local-address optional for eoipv6, 6to4, ipip, ipipv6 & grev6;
*) winbox - renamed IPv6 "Raw rules" section to "Raw";
*) winbox - report correctly dude users in active users list;
*) winbox - set default sa-learning value to "yes" for CRS Ingress VLAN Translation rules;
*) wireless - fixed multiple wireless packages enabled at the same time after upgrade;
*) wireless - wireless-fp is discontinued, it needs to be uninstalled/disabled before upgrade;
*) wireless-rep - added initial API support for snooper;
*) wireless-rep - fixed crash on nv2 reconnect;
*) wireless-rep - fixed scan-list unset;
*) wireless-rep - treat missing SSID element as hidden SSID;
What's new in 6.35.4 (2016-Jun-09 12:02):
*) address-list - make "dynamic=yes" as read-only option;
*) bonding - fixed 802.3ad load balancing mode over tunnels ;
*) bonding - fixed bonding primary slave assignment for ovpn interfaces after startup;
*) bonding - fixed crash on RoMON traffic transmit;
*) dhcpv6 client - fixed ia lifetime validation when it is set by dhcpv6 client;
*) disk - added support for Plextor PX-G128M6e(A) SSD on CCR1072;
*) ethernet - fixed memory leak when setting interface without changing configuration;
*) firewall - do not show disabled=no in export;
*) health - fixed broken factory voltage calibration data for some hAP ac boards;
*) health - fixed incorrect voltage after reboot on RB2011UAS;
*) ipsec - fixed mode-config export;
*) ipsec - fixed route cache overflow when using ipsec with route cache disabled;
*) lte - use only creg result codes as network status indications;
*) ovpn - enable perfect forwarding secrecy support by default;
*) rb3011 - fixed port flapping on ether6-ether10;
*) rb3011 - fixed reset button functionality;
*) rb3011 - improved performance on high cpu usage;
What's new in 6.35.3 (2016-Jun-01 7:55):
(factory only release)
What's new in 6.35.2 (2016-May-02 10:09):
*) discovery - fixed identity discovery (introduced in 6.35.1);
*) firewall - fixed policy routing configurations (introduced in 6.35rc38);
*) log - fixed time zone adjustment (introduced in 6.35.1);
*) queue - fixed interface queue type for ovpn tunnels;
*) snmp - fixed snmp timeout (introduced in 6.35.1);
*) vrrp - fixed missing vrrp interfaces after upgrade (introduced in 6.35.1).