FTLDNS Files

What's Changed

• Fix possible resolver issue on armv5tel by @DL6ER in https://github.com/pi-hole/FTL/pull/2781
• Introduce CMake options for optional dependencies by @aeolio in https://github.com/pi-hole/FTL/pull/2795
• Fix build without mbedtls [v2] by @aeolio in https://github.com/pi-hole/FTL/pull/2796
• Fix overTime data when database.DBimport = false by @DL6ER in https://github.com/pi-hole/FTL/pull/2788
• Fix cross-compilation issues w/ custom toolchain by @aeolio in https://github.com/pi-hole/FTL/pull/2797
• Add new option for controling name resolution via MAC address by @DL6ER in https://github.com/pi-hole/FTL/pull/2790
• Fix obtaining client groups by name by @DL6ER in https://github.com/pi-hole/FTL/pull/2791
• Ensure API sessions are restored before starting the HTTP server by @DL6ER in https://github.com/pi-hole/FTL/pull/2803
• Add form-action 'self' to Content-Security-Policy by @yubiuser in https://github.com/pi-hole/FTL/pull/2804
• Add query_frequency to /padd endpoint by @yubiuser in https://github.com/pi-hole/FTL/pull/2806
• Guard query-count counters against unsigned underflow by @DL6ER in https://github.com/pi-hole/FTL/pull/2815
• Add universal crash backtrace via _Unwind_Backtrace by @DL6ER in https://github.com/pi-hole/FTL/pull/2811
• config: show totp_secret presence in CLI output by @DL6ER in https://github.com/pi-hole/FTL/pull/2813
• Fix client count inflation for rate-limited queries by @DL6ER in https://github.com/pi-hole/FTL/pull/2814
• Fix stack buffer overflow in get_process_name() by @DL6ER in https://github.com/pi-hole/FTL/pull/2821
• Do not restart FTL while pihole -g is still ongoing by @DL6ER in https://github.com/pi-hole/FTL/pull/2419

Security Advisories

• GHSA-r7g8-3fj7-m5qq - Authorization bypass: CLI API sessions can import Teleporter archives and modify configuration reported by @mzalzahrani
• Remote Code Execution (RCE) via Newline Injection in Multiple Configuration Parameters reported by @T0X1Cx
  • pi-hole/FTL/security/advisories/GHSA-vfmq-jrx3-wv3c
  • pi-hole/FTL/security/advisories/GHSA-wxhv-w77q-6qwp
  • pi-hole/FTL/security/advisories/GHSA-28g5-gg88-wh5m
  • pi-hole/FTL/security/advisories/GHSA-fqv2-qhfh-ghcj
  • pi-hole/FTL/security/advisories/GHSA-23w8-7333-p9fj

New Contributors

• @aeolio made their first contribution in https://github.com/pi-hole/FTL/pull/2795

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.5...v6.6