Includes security fixes, deprecations or config changes. Read the notes; usually worth updating soon.
From the release notes
- GHSA-cf36-4hhc-8398 (CVSS 7.8): command execution via a crafted PID. Reported by @abdoghazy2015.
- GHSA-xch2-4qxw-g5vj (CVSS 7.8): root following a symlink when writing the version file. Reported by @keithlinneman and @KimiSecurityTeam.
- GHSA-j8vh-6fp9-cjcx (CVSS 7.8): /opt/pihole is now read-only for the FTL service. Reported by @keithlinneman.
- GHSA-mff6-cjc4-5wq9 (CVSS 7.3): root writing to config-supplied paths. Reported by @KimiSecurityTeam, @keithlinneman and @Pedromdsn.
Read the full official release notes →
✏️ Suggest a fix for this verdict
📬 The Weekend Patch Report
One email a week: what's safe to update, what will bite, and one practical tip for your homelab or printer.
Free, weekly, unsubscribe anytime.