Versie 6.4.3 van Pi-hole Core is uitgekomen. Ook zijn Pi-hole Web 6.6 en Pi-hole FTL 6.7 verschenen. Pi-hole is een advertising-aware dns- en webserver bedoeld om te draaien op een Raspberry Pi in het netwerk. Als op de router naar Pi-hole wordt verwezen voor dns-afhandelingen, zullen alle apparaten binnen het netwerk er automatisch gebruik van maken zonder dat er instellingen hoeven te worden aangepast. Vervolgens worden advertenties niet meer opgehaald, waardoor pagina's sneller laden. In potentie kan er ook malware mee buiten de deur worden gehouden. Voor meer informatie verwijzen we jullie door naar de uitleg en video's op deze pagina, deze handleiding van tweaker jpgview, of dit topic op ons forum. De releasenotes voor deze uitgave kunnen hieronder worden gevonden.
Pi-hole FTL v6.7, Web v6.6 and Core v6.4.3 Released!
As always, please read through the changelogs before updating withpihole -upDon’t forget, you can use Teleporter to export your configuration. It can be found under the settings menu of the web interface or on the command line with
pihole-FTL --teleporterDocker has been tagged as
2026.07.0Highlights Security
This release closes out six advisories across Core and FTL. We’d like to thank all of the researchers who took the time to responsibly disclose these issues — several are related to work covered in previous releases, and we’re grateful for the continued scrutiny.Thank you to supperhellokitty20, rrobgill, T0X1Cx and SakusenSec for responsibly disclosing these issues. Full details for all advisories can be found at the following links:
- pi-hole/pi-hole/security/advisories/GHSA-h8w9-qx2v-wrww — Local privilege escalation from
piholeuser to root via/etc/pihole/logrotate(High) reported by supperhellokitty20- pi-hole/FTL/security/advisories/GHSA-q6fm-xwxf-37r5 — WebUI (& API) DoS via lack of rate limiting (High) reported by rrobgill
- pi-hole/FTL/security/advisories/GHSA-w8cr-2cwg-92cg — Session expiration bypass (High) reported by T0X1Cx
- pi-hole/FTL/security/advisories/GHSA-8j7w-m3cr-6q6x — Remote Code Execution via CivetWeb configuration injection (High) reported by SakusenSec
- pi-hole/FTL/security/advisories/GHSA-g7v8-8q8f-hprp — Log injection in the access-log writer chaining to RCE via Lua-server-page evaluation (Moderate)
- pi-hole/FTL/security/advisories/GHSA-r5vh-5q82-jg7q — CRLF injection / HTTP header injection via group name (Low) reported by T0X1Cx
Updated embedded components
FTL now ships with an updated embedded dnsmasq v2.93 and SQLite3 v3.53.1, keeping the core resolver and database layer current. (FTL #2890, FTL #2891)A brand new DHCP static leases editor
Managing DHCP leases from the web interface has been one of the most frequently requested improvements since we released v6, and this release finally delivers it. The static leases interface has been completely reworked into a proper editor: adding, editing and removing reserved leases should now feel more intuitive. (Web #3766)Thank you to everyone who’s asked for this over the years and to @rdwebdesign for making it happen.
iCloud Private Relay and better MAC vendor resolution
A fix landed for iCloud Private Relay zones (FTL #2919), and MAC vendor lookups now resolve sub-allocated blocks (MA-M / MA-S) via longest-prefix match, so more devices are correctly identified (FTL #2907).Other web interface improvements
Editing reverse DNS servers (dns.revServers) now has a much friendlier interface, and the Lists page has clearer hints and help text. (Web #3769, Web #3798)Friendlier error messages
Error messages across FTL have been made more human friendly, including a custom message for UNIQUE constraint errors, so it’s clearer what’s gone wrong when something does. (FTL #2878, FTL #2879)
:strip_exif()/i/2002897482.png?f=thumbmedium)
/u/3914/crop5daf530caa307_cropped.png?f=community)