2026.2

Note

• Many fixes and improvements (for ex.: mwwatchdog), updating is strongly recommended!

What's Changed

• GUI: Random Password improvement
• mwwatchdog: rewrite findHost, remove timeout(), add IPv6 support
• mwwatchdog/OpenVPN/wireguard: avoid adding temporary routes from mwwatchdog used for WAN checking to OpenVPN/wireguard in PBR mode
• mwwatchdog: fix DNS filtering, timeout behaviour and cktracert RESULT variable
• OpenVPN: disable compression in builds
• rc: add NVRAM variable migration for renamed OpenVPN settings on firmware upgrade
• www: VLAN/ethernet: add ethernet-icon.js, update to advanced-vlan.asp and status-overview.asp
• www: vpn-server.asp: fix broken "Generate DH Params", "Generate client config", and "Generate static key" buttons
• www: tools-survey.asp - upgrade to v2.01

... and much more

Full Changelog: 2026.1...2026.2

2026.1

Note

• Many CVE fixes and improvements, updating is strongly recommended!
• Warning: due to naming changes for some nvram variables in release 2026.1 (in subsequent releases, thanks to @lancethepants this is no longer necessary), OpenVPN users should:
  1. clear nvram during the update or
  2. use this script: https://gist.github.com/pedro0311/674f2e19691106417a989a43bf27b0a4 before update - read the inside HOWTO first!

What's Changed

• stubby: fix DNSSEC trust anchor bootstrapping by using static root trust anchors instead of Zero-config DNSSEC
• GUI: Status: Device List: fix sort by Lease Time (close #165)
• GUI: Bandwidth/IP Traffic: fix calculation on real-time chart (close #27)
• GUI: Bandwidth/IP Traffic: add interactive range selection to bandwidth charts (close #17)
• GUI: Bandwidth: Real-Time: prevent bandwidth spikes on interface counter resets
• GUI: IP Traffic: Real-Time: prevent bandwidth spikes on interface counter resets
• apcupsd: only install apcupsd with other files if TCONFIG_UPS is selected (close #202)
• DDNS: mdu.c: get_address(): add IPv6 support, refactor (close #215)
• DDNS: mdu.c: enhance _http_req() with full IPv6 support and safety fixes
• DDNS: mdu.c: update_cloudflare(): fix memory leak and improve Cloudflare DNS record handling
• mwwatchdog: cktracert(): fix rx_bytes overflow in traffic detection (busybox int32 limit) (close #181)
• build: embed firmware filename into image
• Update defaults.c disable telnet enable at startup
• OpenVPN Client: separate the VPN tunnel check from the normal watchdog, as the former does not work with all configurations
• openssl-1.1: add fix for: CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795 and CVE-2026-22796
• httpd: usb.c: fix critical bugs in asp_usbdevices()
• porthealth: add port health service
• nginx: delay on startup with user-defined delay

... and much more

Full Changelog: 2025.5...2026.1

2025.5

What's Changed

• Add autoconf-archive to installation command by @chrismuller in #38

New Contributors

• @chrismuller made their first contribution in #38

Full Changelog: 2025.4...2025.5

2025.4

Downloads: https://freshtomato.org/downloads/freshtomato-mips/2025/2025.4/

What's Changed

• Update admin-access.asp by @forlotto in #16
• build: remove no more needed (and icomplete implemented) TCONFIG_SSH by @MarsTomato in #17

New Contributors

• @forlotto made their first contribution in #16
• @MarsTomato made their first contribution in #17

Full Changelog: 2025.3...2025.4

2025.3

Downloads: https://freshtomato.org/downloads/freshtomato-mips/2025/2025.3/

What's Changed

• docker: fix '/usr/share/aclocal/ltdl.m4' does not exist error by @eisaev in #10

New Contributors

• @eisaev made their first contribution in #10

Full Changelog: 2025.2...2025.3