AdGuard Home 0.108.0-b.86

Original release notes

Changes compared to the previous beta, v0.108.0-b.85. See [CHANGELOG.md] for all changes.

Acknowledgements

A special thanks to @N0zoM1z0 for reporting the vulnerability, our community moderators team, as well as to everyone who filed and inspected issues, added translations, and helped us test this release!

Full changelog

Security

Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in [1.26.3][go-1.26.3].

IDs of requests received over DoH and DoQ and forwarded to plain-DNS upstreams are now set to non-zero values to improve security.

This is GHSA-xgx4-4h9w-53pv. We thank @N0zoM1z0 for reporting this security issue.

Added

New reason query parameter in GET /control/querylog. See openapi/openapi.yaml for the full description.

Changed

Frontend API requests no longer depend on axios.

Dashboard charts use Recharts instead of Nivo.

enable_dnssec in dns configuration now defines whether the proxy should set the DO flag in the upstream requests, the default is true (#7046).

Deprecated

Query parameter response_status in GET /control/querylog is now deprecated. Use new reason query parameter instead.

Fixed

Statistics database deadlock (#8359).

Translated labels on the DNS settings pages not updating after changing the UI language.

Dashboard charts now correctly display lower query counts (#6823).

Redundant validation warnings about DHCP when it's disabled (#8348).

Safe Browsing and Parental Control labels on the General Settings page not updating after changing the UI language.

[CHANGELOG.md]: https://github.com/AdguardTeam/AdGuardHome/tree/v0.108.0-b.86/CHANGELOG.md [go-1.26.3]: https://groups.google.com/g/golang-announce/c/qcCIEXso47M