./security/adguardhome, Powerful network-wide ads and trackers blocking DNS server

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ]

Branch: CURRENT, Version: 0.107.77nb1, Package name: adguardhome-0.107.77nb1, Maintainer: pkgsrc-users

AdGuard Home is a network-wide software for blocking ads and tracking. After
you set it up, it'll cover ALL your home devices, and you don't need any
client-side software for that.

It operates as a DNS server that re-routes tracking domains to a "black hole",
thus preventing your devices from connecting to those servers. It's based on
software we use for our public AdGuard DNS servers, and both share a lot of
code.

Master sites:

Filesize: 2301.5 KB

Version history: (Expand)

CVS history: (Expand)


   2026-06-05 12:21:56 by Benny Siegert | Files touched by this commit (205) | Package updated
Log message:
Revbump all Go packages after go126 security update
   2026-06-03 07:08:56 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
adguardhome: updated to 0.107.77

0.107.77

Security

Authorization in GLiNET mode is no longer vulnerable to path traversal attacks.
NOTE: This is CVE-2026-41448. We thank @djnnvx for reporting this security issue.

Added

New reason query parameter in GET /control/querylog. See openapi/openapi.yaml \ 
for the full description.

Deprecated

Query parameter response_status in GET /control/querylog is now deprecated. Use \ 
new reason query parameter instead.
   2026-05-24 07:41:36 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
adguardhome: updated to 0.107.76

0.107.76

Changed

Duration values in YAML configuration file now support d (days) units and has \ 
been updated.
NOTE: Any rollback to version below the v0.107.76 should convert the values back \ 
to hours.

Fixed

DNS caching with disabled DNSSEC
   2026-05-19 20:16:38 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
adguardhome: updated to 0.107.75

0.107.75

We’ve fixed a critical vulnerability affecting DNS-over-QUIC and DNS-over-HTTPS
that could put your DNS privacy at risk. The gap is now closed, and your
encrypted traffic is back to traveling through a properly armored tunnel.
   2026-05-07 20:50:12 by Benny Siegert | Files touched by this commit (204) | Package updated
Log message:
Revbump all Go packages after go126 security update
   2026-04-16 14:40:07 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
adguardhome: updated to 0.107.74

0.107.74

Security

Frontend libraries has been updated to prevent the possibility of exploiting the \ 
vulnerability described in CVE-2026-40175.
Go version has been updated to prevent the possibility of exploiting the Go \ 
vulnerabilities fixed in 1.26.2.

Changed

Configuration changes

Fixed

Incorrect forwarding of root domain requests when domain-specific upstreams are \ 
configured
The strict SNI check setting is not persisted when the TLS configuration is changed
   2026-04-08 07:45:14 by Benny Siegert | Files touched by this commit (203) | Package updated
Log message:
Revbump all Go packages after security update
   2026-03-11 07:35:28 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
adguardhome: updated to 0.107.73

0.107.73

Security

Authentication is now applied to requests that have been upgraded from HTTP/2 \ 
Cleartext (H2C) requests to public resources.