This tag includes the FTL v6.6.2 release which imports six upstream dnsmasq security fixes, covering all publicly disclosed CVEs against the dnsmasq 2.92/2.93 line. Patches are taken verbatim from https://thekelleys.org.uk/dnsmasq/CVE/
Details here: https://github.com/pi-hole/FTL/releases/tag/v6.6.2
Upgrade impact
All six fixes are minimal, self-contained changes to the embedded dnsmasq sources. No FTL-side configuration or API changes; users should see no observable behavior change beyond the closed vulnerabilities.
Fix dnsmasq CVE publications by @DL6ER in pi-hole/FTL#2888
This furthermore indirectly fixes #2871 due to pi-hole/docker-base-images#158
Full Changelog: pi-hole/FTL@v6.6.1...v6.6.2
What's Changed (Docker Specific)
New Contributors
Full Changelog: 2026.04.0...2026.05.0