Skip to content

Pi-hole FTL v6.2.3#2510

Merged
DL6ER merged 27 commits intomasterfrom
development
Jun 10, 2025
Merged

Pi-hole FTL v6.2.3#2510
DL6ER merged 27 commits intomasterfrom
development

Conversation

@DL6ER
Copy link
Member

@DL6ER DL6ER commented Jun 9, 2025

This patch release contains fixes for almost all reported bugs (most importantly, it fixes a logging regression where types are missing from pihole.log as well as a crash in filter_servers() deep down in dnsmasq code). There is one remaining issue about the behavior of server=/example.com/1.2.3.4 having changed which we are still working on with the maintainers of dnsmasq.

What's Changed

DL6ER and others added 26 commits May 21, 2025 15:55
…eval from cache without another CNAME inspection

Signed-off-by: DL6ER <dl6er@dl6er.de>
Signed-off-by: DL6ER <dl6er@dl6er.de>
Sync master back into development
Signed-off-by: yubiuser <github@yubiuser.dev>
Signed-off-by: yubiuser <github@yubiuser.dev>
Signed-off-by: yubiuser <github@yubiuser.dev>
Signed-off-by: yubiuser <github@yubiuser.dev>
Relax the session cookie from SameSite=Strict to Lax
The bug occurs when we ask lookup_domain() for a server for a domain
which is not a general upstream server, by setting F_DOMAINSRV in the flags.

If there are no possible servers, because there are no upstream servers
defined (for instance, at startup) then the code steps off the end of an
array and SEGVs.

The bug has been latent for some time, but
3e659bd4ec6525ebe4518fd10b8e183997f46351 added a new call to lookup_domain()
which can actually trigger the bug if DNSSEC is enabled and a certain
amount of bad luck ensues.

Thanks to the testers extraordinaire at PiHole for reporting this.

Signed-off-by: DL6ER <dl6er@dl6er.de>
Logging queries lost the RRtype.

Revert to e.g. query[A] example.com

Signed-off-by: DL6ER <dl6er@dl6er.de>
Signed-off-by: DL6ER <dl6er@dl6er.de>
Signed-off-by: DL6ER <dl6er@dl6er.de>
… for Lua pages outside of webhome

Signed-off-by: DL6ER <dl6er@dl6er.de>
Signed-off-by: DL6ER <dl6er@dl6er.de>
Run dependabot also on composite actions
Signed-off-by: yubiuser <github@yubiuser.dev>
Signed-off-by: yubiuser <github@yubiuser.dev>
Speedup build and test by running RISCV on ARM64
…plication

Signed-off-by: DL6ER <dl6er@dl6er.de>
If in debug mode the request using an unsupported version will be logged.
An ntp v4 packet will be returned in any case.

Signed-off-by: Rob Gill <rrobgill@protonmail.com>
ntp : ignore client version, always return a v4 packet
Store intermediate CNAME domain pointers in DNS cache
Allow unauthenticated access to non-admin LUA pages
@DL6ER DL6ER requested a review from a team as a code owner June 9, 2025 05:20
@DL6ER DL6ER added the Release label Jun 9, 2025
yubiuser
yubiuser previously approved these changes Jun 9, 2025
rdwebdesign
rdwebdesign previously approved these changes Jun 9, 2025
Split FTL build and test on GHA
@yubiuser yubiuser dismissed stale reviews from rdwebdesign and themself via 911a24a June 10, 2025 05:07
@DL6ER
Copy link
Member Author

DL6ER commented Jun 10, 2025

@pi-hole/ftl-maintainers Needs re-approval for releasing

@dschaper dschaper self-requested a review June 10, 2025 18:41
@DL6ER DL6ER merged commit 88737f6 into master Jun 10, 2025
19 checks passed
ShadowMitia pushed a commit to ShadowMitia/FTL that referenced this pull request Jun 13, 2025
Pi-hole FTL v6.2.3

Signed-off-by: Dimitri Belopopsky <ShadowMitia@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants