Releases: FreshTomato-Project/freshtomato-arm
Releases · FreshTomato-Project/freshtomato-arm
2026.1
Note
- Many CVE fixes and improvements, updating is strongly recommended!
- Warning: due to changes in the naming of some nvram variables, you should:
- clear nvram during the update or
- use this script: https://gist.github.com/pedro0311/674f2e19691106417a989a43bf27b0a4 before update - read the inside HOWTO first!
What's Changed
- wireguard: fix regression in 2025.5 when using "External - VPN Provider" type of VPN you couldn't set "Redirect Internet Traffic" to "All" if you wanted all traffic to be routed through wg, but instead had to use "Routing Policy" and "To Destination IP" set to "0.0.0.0/0"
- stubby: fix DNSSEC trust anchor bootstrapping by using static root trust anchors instead of Zero-config DNSSEC
- GUI: Status: Device List: fix sort by Lease Time (close #165)
- GUI: Bandwidth/IP Traffic: fix calculation on real-time chart (close #27)
- GUI: Bandwidth/IP Traffic: add interactive range selection to bandwidth charts (close #17)
- GUI: Bandwidth: Real-Time: prevent bandwidth spikes on interface counter resets
- GUI: IP Traffic: Real-Time: prevent bandwidth spikes on interface counter resets
- apcupsd: only install apcupsd with other files if TCONFIG_UPS is selected (close #202)
- wireguard: add delay on startup with user-defined value (close #204)
- DDNS: mdu.c: get_address(): add IPv6 support, refactor (close #215)
- DDNS: mdu.c: enhance _http_req() with full IPv6 support and safety fixes
- DDNS: mdu.c: update_cloudflare(): fix memory leak and improve Cloudflare DNS record handling
- mwwatchdog: cktracert(): fix rx_bytes overflow in traffic detection (busybox int32 limit) (close #181)
- build: embed firmware filename into image
- Update defaults.c disable telnet enable at startup
- WireGuard: separate the VPN tunnel check from the normal watchdog, as the former does not work with all configurations
- OpenVPN Client: separate the VPN tunnel check from the normal watchdog, as the former does not work with all configurations
- openssl-1.1: add fix for: CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795 and CVE-2026-22796
- httpd: usb.c: fix critical bugs in asp_usbdevices()
- porthealth: add port health service
- nginx: delay on startup with user-defined delay
... and much more
New Contributors
Full Changelog: 2025.5...2026.1
Contributors
gorucci
Assets 2
2025.5
What's Changed
- GUI: status-overview.asp - Only displaying unsecured WiFi warning in AP mode by @wellloaded in #158
- shared: misc.c: increase ifnames buffer size by @lancethepants in #162
- Arm master freshtomato updates by @MarsTomato in #163
- others: mwwatchdog: fix operator precedence bug that could add cron j… by @lancethepants in #166
- www: advanced-mac.asp fixed typo LLA vs. LAA button and notes by @xixix-ft in #168
- Add Bridge Gateway Isolation + UI (IPv4 only atm), IPv6 bridge isolation, and IPv6-aware advanced-access.asp by @lancethepants in #171
- Improved IPv6 support by @lancethepants in #173
- www: basic-ipv6.asp: adjust/extend Commit b49bf16 (Improved IPv6 supp… by @MarsTomato in #177
Full Changelog: 2025.4...2025.5
Contributors
lancethepants, wellloaded, and 2 other contributors
Assets 2
2025.4
Downloads: https://freshtomato.org/downloads/freshtomato-arm/2025/2025.4/
What's Changed
- Tenda AC15: adjust command (use 0x9F only) for reading manufacturer/ … by @MarsTomato in #114
- SDK6/SDK7/SDK714: help wireless vif mac addr issues by @MarsTomato in #115
- GUI: Correction to menu references by @wellloaded in #119
- Arm master freshtomato updates by @MarsTomato in #124
- GUI: Advanced: VLAN: fix link in Notes (close #81) by @HommeOursPorc in #127
- www: advanced-dhcpdns.asp: Adjust String.trim() usage by @lancethepants in #128
- Update admin-access.asp by @forlotto in #131
- httpd: misc.c: iterate over BRIDGE_COUNT for ether-wake by @lancethepants in #133
- rc: firewall.c: iterate over BRIDGE_COUNT in filter6_input(void) by @lancethepants in #134
- Arm master freshtomato updates by @MarsTomato in #135
- www:vpn-wireguard asp update 'to' to 'with' in notes by @forlotto in #140
- Update targets.mak: dir868lwg: remove: by @txnative777 in #142
- www: ipt-[daily|monthly].asp: iterate over MAX_BRIDGE_ID in redraw() by @lancethepants in #143
- tomato.css - improved to print and printscreen in dark-mode by @wellloaded in #144
- Arm master freshtomato updates by @MarsTomato in #145
New Contributors
- @HommeOursPorc made their first contribution in #127
- @forlotto made their first contribution in #131
- @txnative777 made their first contribution in #142
Full Changelog: 2025.3...2025.4
Contributors
lancethepants, scoobasteve83, and 4 other contributors
Assets 2
2025.3
Downloads: https://freshtomato.org/downloads/freshtomato-arm/2025/2025.3/
What's Changed
- httpd: iptraffic.c: printf for unsgined int should use %u by @lancethepants in #78
- GUI: advanced-vlan.asp - Header correction by @wellloaded in #84
- GUI: basic-time.asp - NTP Client added 4th placeholder field for Custom upstream server. by @xixix-ft in #87
- www: status-devices.asp: Add option to hide WAN devices by @lancethepants in #89
- httpd: misc.c: Issue with CPU Usage NaN% in Status Overview page by @xixix-ft in #91
- www: bwlimit.asp: iterate over MAX_BRIDGE_ID to create bridge classes by @lancethepants in #94
- Netgear EX7000: Enable ethernet switch (finally!) by @MarsTomato in #98
- GUI: Status-devices - SVG icons by @wellloaded in #101
- Arm master freshtomato updates by @MarsTomato in #105
- www: fix qr-code svg by @lancethepants in #107
- Netgear R7900 / R8000: help wireless vif mac addr issues by @MarsTomato in #110
New Contributors
- @xixix-ft made their first contribution in #87
- @MarsTomato made their first contribution in #98
Full Changelog: 2025.2...2025.3
Contributors
lancethepants, wellloaded, and 2 other contributors