Download Firmware FreshTomato 2022.7

FreshTomato version 2022.4 has been released. FreshTomato is Tomato-derived firmware for various Arm or MIPS-based routers from Asus, D-Link, Huawei, Linksys, Netgear, Tenda, and Xiaomi. It can be seen as the continuation of ‘Tomato by Shibby’ since this developer, Michał Rupental, wants to spend his time on other projects. The FreshTomato firmware adds several additional options compared to the original manufacturer’s firmware, such as a real-time bandwidth monitor and extensive setting options. The firmware is available for routers with a Arm– or MIPS-cpu.

FreshTomato-Arm 2022.7 Changelog

• kernel (all): updates/fixes from the upstream
• SDK7: small update for pcie and adjust commit 286447b244974a3beb40b37e
• busybox: update to 1.35.0
• dropbear: update to 2022.83
• tor: update to 0.4.7.11
• zlib: updated to 1.2.13
• xl2tpd: update to 1.3.18
• sqlite: updated to 3.40.0
• libpng: update to 1.6.38
• nano: updated to 7.0
• minidlna: update to 1.3.2; refresh patches, remove no more needed
• dnsmasq: updated to v2.88
• build: Makefile: fix compilation in case if minidlna is built as static
• build: kernel (all): enable compilation of ch341 usb driver
• GUI: Status: Overview: fix Signal Quality icon in wireless client mode when RSSI is equal zero
• GUI: Basic: Time: add option to serve also NTP on the WAN (resolves #234)
• GUI: VPN Tunneling: Tinc Daemon: better format Tinc output in Advanced themes
• GUI: Administration: TomatoAnon: grammar fix (resolves #260)
• GUI: Status: Device List: add frequency to Moise Floor interfaces list
• busybox: awk: fix use after free (CVE-2022-30065)
• dropbear: disable DSS key support
• dropbear: use Os flag for Libtommath and smallest targets
• e2fsprogs: add two patches from openwrt
• httpd/mssl: add support of elliptic curves in mssl_cert_key_match (resolves #250)
• httpd: switch self-signed certificate from RSA to ECC
• rc: adjust start/stop or miniupnpd
• rc: adjust/add stop for miniupnp in case of single-wan
• rc: firewall: move ftpd FW rules (remote access/ftplimit) to ftpd.c script
• rc: interface.c: log errors only on failed interface addition
• rc: nocat.c: only run start_wan() if nocat was really started
• rc: openvpn.c: check first if firewall script is executable
• rc: openvpn.c: workaround for problems when adding iptables rules
• rc: rc.c: run_del_firewall_script(): correct temp file permissions
• rc: services.c: start_igmp_proxy(): drop privileges after startup
• rc: services.c: improve buffer handling
• rc: services.c: exec_service: do not reuse buffer
• rc: services.c: do_service(): increase waiting time (from 15 to 20 secs), because almost all services are now serialized when started/stopped; more verbose logging
• rc: services: move ftpd support to outer file
• rc: wan.c: restarting httpd service here is completely redundant
• rc: telssh.c: avoid problems while starting/stopping in the GUI (and also in other cases)
• stubby: add Mullvad DNS to the list (resolves #233)
• router: shared: cache the model detection result for safe multiple use
• Netgear R7900 / R8000: help arm issue #258
• Netgear ARM Router Family: set cal data for wl radios and improve wl performance (get infos at board_data –> router specifc)

FreshTomato-Mips 2022.7 Changelog

• busybox: update to 1.35.0
• dropbear: update to 2022.83
• tor: update to 0.4.7.11
• zlib: updated to 1.2.13
• xl2tpd: update to 1.3.18
• sqlite: update to 3.40.0
• libpng: update to 1.6.38
• nano: updated to 7.0
• minidlna: update to 1.3.2; refresh patches, remove no more needed
• dnsmasq: updated to v2.88
• build: Makefile: fix compilation in case if minidlna is built as static
• GUI: Status: Overview: fix Signal Quality icon in wireless client mode when RSSI is equal zero
• GUI: Basic: Time: add option to serve also NTP on the WAN
• GUI: VPN Tunneling: Tinc Daemon: better format Tinc output in Advanced themes
• GUI: Administration: TomatoAnon: grammar fix
• GUI: Status: Device List: add frequency to Moise Floor interfaces list
• busybox: awk: fix use after free (CVE-2022-30065)
• dropbear: disable DSS key support
• dropbear: use Os flag for Libtommath and smallest targets
• e2fsprogs: add two patches from openwrt
• httpd/mssl: add support of elliptic curves in mssl_cert_key_match
• httpd: switch self-signed certificate from RSA to ECC
• rc: adjust start/stop or miniupnpd
• rc: adjust/add stop for miniupnp in case of single-wan
• rc: firewall: move ftpd FW rules (remote access/ftplimit) to ftpd.c script
• rc: interface.c: log errors only on failed interface addition
• rc: nocat.c: only run start_wan() if nocat was really started
• rc: openvpn.c: check first if firewall script is executable
• rc: openvpn.c: workaround for problems when adding iptables rules
• rc: rc.c: run_del_firewall_script(): correct temp file permissions
• rc: services.c: start_igmp_proxy(): drop privileges after startup
• rc: services.c: improve buffer handling
• rc: services.c: exec_service: do not reuse buffer
• rc: services.c: do_service(): increase waiting time (from 15 to 20 secs), because almost all services are now serialized when started/stopped; more verbose logging
• rc: services: move ftpd support to outer file
• rc: wan.c: restarting httpd service here is completely redundant
• rc: telssh.c: avoid problems while starting/stopping in the GUI (and also in other cases)
• stubby: add Mullvad DNS to the list
• router: shared: cache the model detection result for safe multiple use
• Wireless Ethernet Bridge: fix Boot-Loop for MIPS RT-AC branch router/images