FreshTomato ARM 2026.4 — What's Changed
FreshTomato 2026.4 brings another round of security, stability and networking improvements, along with a significant modernization of the ARM build environment.
Highlights
-
New ARM toolchain — the ARM build environment has been upgraded, allowing us to build newer versions of software that could no longer be compiled with the previous toolchain.
-
Transmission updated to 4.1.3 — made possible by the new ARM toolchain. This is a major upgrade of the BitTorrent client and brings numerous upstream bug fixes, security improvements and compatibility updates.
-
OpenSSL security fixes — backported fixes for multiple vulnerabilities disclosed during 2026, keeping the OpenSSL 1.1 branch used by FreshTomato protected despite its age.
-
Web interface and system security hardening — numerous improvements were made to input validation, file handling and process execution. This also includes fixing a potential command injection issue in OpenVPN configuration handling.
-
DDNS reliability improvements — several fixes were made to the DDNS client, including improvements to Cloudflare support and a bug that could cause the DDNS process to crash.
-
Static DHCP fixes — corrected validation of static DHCP entries using two MAC addresses, which could previously cause valid configurations to be rejected.
-
MultiWAN, firewall and UPnP fixes — improved handling of individual WAN states and firewall rules, including correct UPnP filtering for active WAN connections.
-
Faster firewall startup — removed an unnecessary several-second delay caused by a locking issue during firewall initialization.
-
Transmission integration improvements — additional fixes and hardening around service startup and generation of
settings.json. -
Numerous additional stability and security fixes throughout the firmware, including improvements to network interface handling, configuration parsing, process management and other system components.
As usual, this list focuses on changes that are relevant to end users. The release also contains many internal code cleanups, build-system changes and maintenance work that are intentionally not listed here.
Full Changelog: 2026.3...2026.4