AdGuard Home versie 0.107.53 is uitgekomen. Met deze software kan er thuis een dns-server worden opgezet om zo onder meer advertenties en malware te blokkeren op het hele netwerk, waardoor dat niet langer op elk individueel apparaat nodig is. Het is daarmee dus vergelijkbaar met Pi-hole. AdGuard Home werkt op een machine met Windows, macOS, Linux of FreeBSD, is ook in staat om tegen phishing te beschermen en heeft parental control. Op ons eigen forum kan over het programma worden gediscussieerd. In deze uitgave zijn de volgende veranderingen en verbeteringen aangebracht:
AdGuard Home v0.107.53It's been a while since we postponed the next AdGuard Home update for a few months. But of course, we had a good reason for it: with the help of community members (we are very thankful to you!), we discovered two vulnerabilities and have been working on patching them. Testing the solutions took a bit longer than expected, but in the end, we believe in quality over speed.
Luckily, it's not all patching vulnerabilities and fixing bugs; we've made some improvements, too. For example, we've added support for 64-bit RISC-V architecture and Ecosia search engine to Safe Search. Find the complete changelog below.
SecurityAdded
- Previous versions of AdGuard Home allowed users to add any system file it had access to as filters, exposing them to be world-readable. To prevent this, AdGuard Home now allows adding filtering-rule list files only from files matching the patterns enumerated in the
filtering.safe_fs_patternsproperty in the configuration file.- Additionally, AdGuard Home will now try to change the permissions of its files and directories to more restrictive ones to prevent similar vulnerabilities as well as limit the access to the configuration.
- Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in 1.23.2.
Changed
- Support for 64-bit RISC-V architecture (#5704).
- Ecosia search engine is now supported in safe search (#5009).
- Upstream server URL domain names requirements has been relaxed and now follow the same rules as their domain specifications.
Configuration changes
In this release, the schema version has changed from 28 to 29.
Fixed
- The new array
filtering.safe_fs_patternscontains glob patterns for paths of files that can be added as local filtering-rule lists. The migration should add list files that have already been added, as well as the default value,$DATA_DIR/userfilters/*.Known issues
- Property
clients.runtime_sources.dhcpin the configuration file not taking effect.- Stale Google safe search domains list (#7155).
- Bing safe search from Edge sidebar (#7154).
- Text overflow on the query log page (#7119).
- Due to the complexity of the Windows permissions architecture and poor support from the standard Go library, we have to postpone the proper automated Windows fix until the next release.
Temporary workaround: Set the permissions of theAdGuardHomedirectory to more restrictive ones manually. To do that:
- Locate the
AdGuardHomedirectory.- Right-click on it and navigate to Properties → Security → Advanced.
- (You might need to disable permission inheritance to make them more restricted.)
- Adjust to give the
Full controlaccess to only the user which runs AdGuard Home. Typically,Administrator.
:strip_exif()/i/2003594310.png?f=thumbmedium)
:strip_icc():strip_exif()/u/83736/crop56082112dfba0_cropped.jpeg?f=community){kind=small}
Ik hoef het nu nog niet persé te gebruiken, dat speelt ook mee.