What better way is there to celebrate the coming of autumn :fallen_leaf: than a patch release? In this new version, we have extended and significantly improved AdGuard Home's built-in DHCP server (fixing many bugs in the process) as well as improved our service blocking feature, thanks to many contributions from the community. As always, we have also updated our tooling to make sure that we use the latest versions without any known security issues.

Acknowledgements

A special thanks to our open-source contributors, @evrifaessa, @scripthunter7, @RoboMagus, @fernvenue, @caribpa, @eduardoaddad, and @MkQtS, as well as to everyone who filed and inspected issues, added translations, and helped us test this release!

Full Changelog

See also the v0.107.12 GitHub milestone.

Security

• Go version was updated to prevent the possibility of exploiting the CVE-2022-27664 and CVE-2022-32190 Go vulnerabilities fixed in Go 1.18.6.

Added

• New bool, dur, u8, and u16 DHCP options to provide more convenience on options control by setting values in a human-readable format (#4705). See also a Wiki page.

• New del DHCP option which removes the corresponding option from server's response (#4337). See also a Wiki page.

  NOTE: This modifier affects all the parameters in the response and not only the requested ones.

• A new HTTP API, GET /control/blocked_services/services, that lists all available blocked services (#4535).

Changed

• The DHCP options handling is now closer to the RFC 2131 (#4705).

• When the DHCP server is enabled, queries for domain names under dhcp.local_domain_name not pointing to real DHCP client hostnames are now processed by filters (#4865).

• The DHCPREQUEST handling is now closer to the RFC 2131 (#4863).

• The internal DNS client, used to resolve hostnames of external clients and also during automatic updates, now respects the upstream mode settings for the main DNS client (#4403).

Deprecated

• Ports 784 and 8853 for DNS-over-QUIC in Docker images. Users who still serve DoQ on these ports are encouraged to move to the standard port 853. These ports will be removed from the EXPOSE section of our Dockerfile in a future release.

• Go 1.18 support. Future versions will require at least Go 1.19 to build.

Fixed

• The length of the DHCP server's response is now at least 576 bytes as per RFC 2131 recommendation (#4337).

• Dynamic leases created with empty hostnames (#4745).

• Unnecessary logging of non-critical statistics errors (#4850).