pi-hole/FTL v6.6

on GitHub

What's Changed

• Fix possible resolver issue on armv5tel by @DL6ER in #2781
• Introduce CMake options for optional dependencies by @aeolio in #2795
• Fix build without mbedtls [v2] by @aeolio in #2796
• Fix overTime data when database.DBimport = false by @DL6ER in #2788
• Fix cross-compilation issues w/ custom toolchain by @aeolio in #2797
• Add new option for controling name resolution via MAC address by @DL6ER in #2790
• Fix obtaining client groups by name by @DL6ER in #2791
• Ensure API sessions are restored before starting the HTTP server by @DL6ER in #2803
• Add form-action 'self' to Content-Security-Policy by @yubiuser in #2804
• Add query_frequency to /padd endpoint by @yubiuser in #2806
• Guard query-count counters against unsigned underflow by @DL6ER in #2815
• Add universal crash backtrace via _Unwind_Backtrace by @DL6ER in #2811
• config: show totp_secret presence in CLI output by @DL6ER in #2813
• Fix client count inflation for rate-limited queries by @DL6ER in #2814
• Fix stack buffer overflow in get_process_name() by @DL6ER in #2821
• Do not restart FTL while pihole -g is still ongoing by @DL6ER in #2419

Security Advisories

• GHSA-r7g8-3fj7-m5qq - Authorization bypass: CLI API sessions can import Teleporter archives and modify configuration reported by @mzalzahrani
• Remote Code Execution (RCE) via Newline Injection in Multiple Configuration Parameters reported by @T0X1Cx
  • pi-hole/FTL/security/advisories/GHSA-vfmq-jrx3-wv3c
  • pi-hole/FTL/security/advisories/GHSA-wxhv-w77q-6qwp
  • pi-hole/FTL/security/advisories/GHSA-28g5-gg88-wh5m
  • pi-hole/FTL/security/advisories/GHSA-fqv2-qhfh-ghcj
  • pi-hole/FTL/security/advisories/GHSA-23w8-7333-p9fj

New Contributors

• @aeolio made their first contribution in #2795

Full Changelog: v6.5...v6.6