Download Latest Version Pi-hole FTL v6.7.1 source code.zip (5.3 MB) Google Add to Preferred Sources
Home / v6.7.1
Name Modified Size InfoDownloads / Week
Parent folder
pihole-FTL-riscv64 2026-09-19 32.3 MB
0
pihole-FTL-riscv64.sha1 2026-09-19 61 Bytes
0
api-docs.tar.gz 2026-09-19 350.1 kB
0
pihole-FTL-amd64 2026-09-19 28.8 MB
0
pihole-FTL-amd64.sha1 2026-09-19 59 Bytes
0
pihole.toml 2026-09-19 71.2 kB
0
pihole-FTL-armv7 2026-09-19 26.1 MB
0
pihole-FTL-armv7.sha1 2026-09-19 59 Bytes
0
pihole-FTL-arm64 2026-09-19 29.1 MB
0
pihole-FTL-arm64.sha1 2026-09-19 59 Bytes
0
pihole-FTL-armv6 2026-09-19 28.1 MB
0
pihole-FTL-armv6.sha1 2026-09-19 59 Bytes
0
pihole-FTL-386 2026-09-19 26.6 MB
0
pihole-FTL-386.sha1 2026-09-19 57 Bytes
0
pihole-FTL-amd64-clang 2026-09-19 17.8 MB
0
pihole-FTL-amd64-clang.sha1 2026-09-19 65 Bytes
0
Pi-hole FTL v6.7.1 source code.tar.gz 2026-09-19 5.1 MB
0
Pi-hole FTL v6.7.1 source code.zip 2026-09-19 5.3 MB
0
README.md 2026-09-19 2.6 kB
0
Totals: 19 Items   199.8 MB 0

Security Fixes

Behavior changes

  • misc.dnsmasq_lines and webserver.advancedOpts can no longer be changed through the API or the web interface. They can still be set in pihole.toml, through environment variables and with pihole-FTL --config.
  • Wrong-method API requests now return 405 with an Allow header, and OPTIONS names only the methods of the endpoint that fits the URI best.
  • The CAP_NET_RAW startup warning is gone, dnsmasq reports it when it actually needs the capability.
  • database.maxDBdays is an unsigned value now. A negative value kept the queries forever and is migrated to 4294967295, which continues to do so.

Fixes of note

  • pi.hole and the local host name were answered with NODATA until restart once the interface cache went stale (#3050)
  • An infinite loop in the dnsmasq config test when debug.config is enabled
  • Webserver workers spinning at 100% CPU in the mbedTLS debug callback (#3106)
  • Async-signal-safety in the real-time signal handler and the TCP worker terminator
  • Query indices that went stale while the shared memory lock was released, and a domain lookup that gave up at once when a list change was being committed
  • Database connection leaks and counter skew, gravity regex and search-term handling, config write races, API error paths and response correctness
  • Memory-safety hardening in the netlink parsers, get_api_string(), base64_decode_update() and arp-scan

Full Changelog: https://github.com/pi-hole/FTL/compare/v6.7...v6.7.1

Source: README.md, updated 2026-09-19