AdguardTeam/AdGuardHome v0.108.0-b.67

AdGuard Home v0.108.0-b.67

on GitHub

Changes compared to the previous beta, v0.108.0-b.66. See CHANGELOG.md for all changes.

Acknowledgements

A special thanks to Xiang Li for reporting the vulnerability, our community moderators team, as well as to everyone who filed and inspected issues, added translations, and helped us test this release!

Full changelog

Security

• Any simultaneous requests that are considered duplicates will now only result in a single request to upstreams, reducing the chance of a cache poisoning attack succeeding. This is controlled by the new configuration object pending_requests, which has a single enabled property, set to true by default.

  NOTE: It's strongly recommended to leave it enabled, otherwise AdGuard Home will be vulnerable to untrusted clients.

Changed

• Alpine Linux version in Dockerfile has been updated to 3.21 (#7588).

Fixed

• Incorrect label on login page (#7729).