Home

Software-update: Pi-hole Core 6.4.3 / Web 6.6 / FTL 6.7

Versie 6.4.3 van Pi-hole Core is uitgekomen. Ook zijn Pi-hole Web 6.6 en Pi-hole FTL 6.7 verschenen. Pi-hole is een advertising-aware dns- en webserver bedoeld om te draaien op een Raspberry Pi in het netwerk. Als op de router naar Pi-hole wordt verwezen voor dns-afhandelingen, zullen alle apparaten binnen het netwerk er automatisch gebruik van maken zonder dat er instellingen hoeven te worden aangepast. Vervolgens worden advertenties niet meer opgehaald, waardoor pagina's sneller laden. In potentie kan er ook malware mee buiten de deur worden gehouden. Voor meer informatie verwijzen we jullie door naar de uitleg en video's op deze pagina, deze handleiding van tweaker jpgview, of dit topic op ons forum. De releasenotes voor deze uitgave kunnen hieronder worden gevonden.

Pi-hole FTL v6.7, Web v6.6 and Core v6.4.3 Released!As always, please read through the changelogs before updating with pihole -up

Pi-hole FTL v6.7, Web v6.6 and Core v6.4.3 Released!

Don’t forget, you can use Teleporter to export your configuration. It can be found under the settings menu of the web interface or on the command line with pihole-FTL --teleporter

Docker has been tagged as 2026.07.0

Highlights SecurityThis release closes out six advisories across Core and FTL. We’d like to thank all of the researchers who took the time to responsibly disclose these issues — several are related to work covered in previous releases, and we’re grateful for the continued scrutiny.

Highlights Security

Thank you to supperhellokitty20, rrobgill, T0X1Cx and SakusenSec for responsibly disclosing these issues. Full details for all advisories can be found at the following links:

  • pi-hole/pi-hole/security/advisories/GHSA-h8w9-qx2v-wrww — Local privilege escalation from pihole user to root via /etc/pihole/logrotate (High) reported by supperhellokitty20
    • supperhellokitty20
  • pi-hole/FTL/security/advisories/GHSA-q6fm-xwxf-37r5 — WebUI (& API) DoS via lack of rate limiting (High) reported by rrobgill
    • rrobgill
  • pi-hole/FTL/security/advisories/GHSA-w8cr-2cwg-92cg — Session expiration bypass (High) reported by T0X1Cx
    • T0X1Cx
  • pi-hole/FTL/security/advisories/GHSA-8j7w-m3cr-6q6x — Remote Code Execution via CivetWeb configuration injection (High) reported by SakusenSec
    • SakusenSec
  • pi-hole/FTL/security/advisories/GHSA-g7v8-8q8f-hprp — Log injection in the access-log writer chaining to RCE via Lua-server-page evaluation (Moderate)
  • pi-hole/FTL/security/advisories/GHSA-r5vh-5q82-jg7q — CRLF injection / HTTP header injection via group name (Low) reported by T0X1Cx
    • T0X1Cx

    Updated embedded componentsFTL now ships with an updated embedded dnsmasq v2.93 and SQLite3 v3.53.1, keeping the core resolver and database layer current. (FTL #2890, FTL #2891)

    Updated embedded componentsdnsmasq v2.93SQLite3 v3.53.1

    A brand new DHCP static leases editorManaging DHCP leases from the web interface has been one of the most frequently requested improvements since we released v6, and this release finally delivers it. The static leases interface has been completely reworked into a proper editor: adding, editing and removing reserved leases should now feel more intuitive. (Web #3766)

    A brand new DHCP static leases editor

    Thank you to everyone who’s asked for this over the years and to @rdwebdesign for making it happen.

    iCloud Private Relay and better MAC vendor resolutionA fix landed for iCloud Private Relay zones (FTL #2919), and MAC vendor lookups now resolve sub-allocated blocks (MA-M / MA-S) via longest-prefix match, so more devices are correctly identified (FTL #2907).

    iCloud Private Relay and better MAC vendor resolution

    Other web interface improvementsEditing reverse DNS servers (dns.revServers) now has a much friendlier interface, and the Lists page has clearer hints and help text. (Web #3769, Web #3798)

    Other web interface improvements

    Friendlier error messagesError messages across FTL have been made more human friendly, including a custom message for UNIQUE constraint errors, so it’s clearer what’s gone wrong when something does. (FTL #2878, FTL #2879)

    Friendlier error messages

    Source: Tweakers.net

    Previous

    Next