Skip to content

Commit 4f44f59

Browse files
pedro0311pedro0311
committed
Update CHANGELOG to 2026.1
1 parent 7d30749 commit 4f44f59

File tree

1 file changed

+105
-0
lines changed

1 file changed

+105
-0
lines changed

‎CHANGELOG‎

Lines changed: 105 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,111 @@ FreshTomato-ARM Changelog
55

66

77

8+
2026.1 2026.02.15
9+
---------------------------
10+
11+
- Note: Many CVE fixes and improvements, updating is strongly recommended!
12+
- Warning: due to changes in the naming of some nvram variables, users of OpenVPN should:
13+
1. clear nvram during the update or
14+
2. use this script: https://gist.github.com/pedro0311/674f2e19691106417a989a43bf27b0a4 - read the inside HOWTO first!
15+
16+
- snmp: update to 5.9.5.2
17+
- ebtables: updates from upstream
18+
- libcurl: update to 8.18.0
19+
- gettext-tiny: update to 0.3.3
20+
- php: update to 8.3.30
21+
- libsodium: update to 1.0.21
22+
- irqbalance: update to 1.9.5
23+
- libsodium: update to latest 1.0.21-stable
24+
- sqlite: update to 3.51.2
25+
- dnsmasq: update to v2.93test4
26+
- openssl: update to 3.0.19
27+
- meson: update to 1.10.1
28+
- libcap-ng: update to 0.9
29+
- libpng: update to 1.6.54
30+
- busybox: updates from upstream
31+
- usb-modeswitch: update to 2.6.2
32+
- usb-modeswitch: update data package to 20251207
33+
- uqmi: update to 7914da43 (2025-07-29) snapshot
34+
- libubox: update to 7928f17 (2025-12-08) snapshot
35+
- tor: update to 0.4.8.22
36+
- expat: update to 2.7.4
37+
- GUI: basic-ipv6.asp - Add option to enable/disable rapid-commit (Case: DHCPv6 PD)
38+
- GUI: Status: Device List: fix sort by Lease Time (close #165)
39+
- GUI: Bandwidth: Real-Time: prevent bandwidth spikes on interface counter resets
40+
- GUI: IP Traffic: Real-Time: prevent bandwidth spikes on interface counter resets
41+
- GUI: Administration: Upgrade: display current filename used to flash the router
42+
- GUI: USB and NAS: File Sharing: use drop-down list for 'Samba protocol version' instead of check boxes
43+
- build: embed firmware filename into image
44+
- build: OpenVPN: rename nvram variables to free up some space there - the reduction in nvram usage is 1140 bytes (for ARM)
45+
- avahi/mDNS: fix start of avahi-daemon because of stupid typo in Makefile (close #187)
46+
- avahi/mDNS: fix problems with avahi-daemon once more (on ARM only)
47+
- apcupsd: only install apcupsd with other files if TCONFIG_UPS is selected (close #202)
48+
- stubby: fix DNSSEC trust anchor bootstrapping by using static root trust anchors instead of Zero-config DNSSEC
49+
- snmpd: save pid to file
50+
- snmp: also stop snmpd during upgrade
51+
- wireguard: fix regression in 2025.5 when using "External - VPN Provider" type of VPN you couldn't set "Redirect Internet Traffic" to "All" if you wanted all traffic to be routed through wg, but instead had to use "Routing Policy" and "To Destination IP" set to "0.0.0.0/0"
52+
- wireguard: add delay on startup with user-defined value (close #204)
53+
- ntpd: increase limits (Max Memory & Max Processes)
54+
- DDNS: mdu.c: get_address(): add IPv6 support, refactor (close #215)
55+
- DDNS: mdu.c: enhance _http_req() with full IPv6 support and safety fixes
56+
- DDNS: mdu.c: update_cloudflare(): fix memory leak and improve Cloudflare DNS record handling
57+
- Bandwidth/IP Traffic: fix calculation on real-time chart (close #27)
58+
- Bandwidth/IP Traffic: add interactive range selection to bandwidth charts (close #17)
59+
- Update defaults.c disable telnet enable at startup
60+
- mwwatchdog: improve script robustness
61+
- mwwatchdog: cktracert(): fix rx_bytes overflow in traffic detection (busybox int32 limit) (close #181)
62+
- WireGuard: separate the VPN tunnel check from the normal watchdog, as the former does not work with all configurations
63+
- OpenVPN Client: separate the VPN tunnel check from the normal watchdog, as the former does not work with all configurations
64+
- openssl-1.1: add fix for: CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795 and CVE-2026-22796
65+
- IPv6 (DHCPv6 with PD): add option to adjust Identity Association for Non-temporary Addresses ID and Identity Association for Prefix Delegation ID
66+
- IPv6 (DHCPv6-PD): add default route ::/ with gateway if provided by the user (Metric 8192)
67+
- Use snprintf for buffer safety in connect_pppol2tp
68+
- httpd: bwm.c: use uint64_t for tx/rx in asp_iptmon(); cosmetic
69+
- httpd: usb.c: fix critical bugs in asp_usbdevices()
70+
- porthealth: add port health service
71+
- nginx: delay on startup with user-defined delay
72+
- cstats: refactor: replace string literals with path constants
73+
- cstats: improve buffer validation (snprintf)
74+
- cstats: use safe/proper daemonization
75+
- cstats: use direct compression to .gz file
76+
- cstats: introduce MAX_NODES for memory protection and add free_all_nodes() to clean up tree memory on --new and shutdown
77+
- cstats: improve buffer handling (strlcpy/strlcat)
78+
- cstats: use zlib if available
79+
- rstats: fix memory management issue - free only on successful allocation
80+
- rstats: refactor: replace string literals with path constants
81+
- rstats: improve buffer validation (snprintf); cosmetic
82+
- rstats: use memcpy instead of for loop
83+
- rstats: use memmove instead of memcpy
84+
- rstats: use zlib if available
85+
- rstats: prepare for 64 bit counters
86+
- rstats: user safe/proper daemonization
87+
- rstats: improve buffer handling (strlcpy/strlcat)
88+
- rstats: add 24-hour history persistence to custom paths
89+
- rc: ddns.c: fix typo in update() function
90+
- rc: ppp.c: function ipup_main() - use safe_getenv()
91+
- rc: dhcp.c: function dhcpc_event_main() - check ifname before using it (NULL)
92+
- rc: dhcp.c: function dhcpc_event_main() and bound() - speed up (again) if the correct prefix (ifname) is found
93+
- rc: interface.c: function route_manip() - check pointer before using it (NULL)
94+
- rc: snmp.c: use serialize_restart() to start/stop daemon, always remove pid file on stop
95+
- rc: nginx.c: always remove child pid on nginx stop; cosmetic
96+
- rc: wireguard.c: fix concurrency issues
97+
- rc: mysql.c: use _exit() instead of exit() to terminate the child
98+
- rc: nginx.c: use _exit() instead of exit() to terminate the child
99+
- rc: transmission.c: use _exit() instead of exit() to terminate the child
100+
- shared: misc.c: refactor connect_timeout()
101+
- shared: files.c: increase file path buffer size in f_write_procsysnet()
102+
- www: vpn-[client|wireguard].asp: fix note about Kill Switch
103+
- www: status-devices.asp: fix javascript error when image is built without Network Discovery
104+
- www: tomato.js: anon_update(): use target="_blank" instead of class="new_window" because on some pages eventHandler() is not added in init()
105+
- www: admin-[bwm|iptraffic].asp: avoid reloading the page while saving
106+
- www: nas-usb.asp: avoid reloading the page while saving; cosmetic
107+
- www: tomato.js: wikiLink(): add title to links
108+
- www: advanced-adblock-v2.asp: initialize variables before use, reset them when they are no longer needed, do not allow re-query when the previous one is still active
109+
- www: add grid backup and restore functionality to selected pages
110+
- www: tomato.js - allows for placeholder to work on password fields
111+
112+
8113
2025.5 2025.12.21
9114
---------------------------
10115

0 commit comments

Comments
 (0)