Pull request 2389: AG-38975 Update proxy
Merge in DNS/adguard-home from AG-38975-upd-proxy to master Squashed commit of the following: commit 94fc1fb9bb1c004fea17d52f586af263b6918694 Author: Eugene Burkov <E.Burkov@AdGuard.COM> Date: Thu Apr 17 20:45:12 2025 +0300 home: fix typo commit b1cbf45dcc54c6d4dc7de86868c189114caf7cb1 Merge: c2c868b7d3521e8ed9Author: Eugene Burkov <E.Burkov@AdGuard.COM> Date: Thu Apr 17 20:44:14 2025 +0300 Merge branch 'master' into AG-38975-upd-proxy commit c2c868b7d938eee6e4e4a19d43b2ed734155c7da Author: Eugene Burkov <E.Burkov@AdGuard.COM> Date: Thu Apr 17 20:19:23 2025 +0300 all: upd to tag commit 1680a9d79f34bd42f0b64712b2e7e968890e7c6e Merge: df42dec3a4d258972dAuthor: Eugene Burkov <E.Burkov@AdGuard.COM> Date: Wed Apr 16 14:08:46 2025 +0300 Merge branch 'master' into AG-38975-upd-proxy commit df42dec3a302af0e6e301365a943763cd87d752d Author: Eugene Burkov <E.Burkov@AdGuard.COM> Date: Wed Apr 16 13:43:29 2025 +0300 all: add thanks commit f212d6a9ee3d614bd6db776204c65298f0359a87 Author: Eugene Burkov <E.Burkov@AdGuard.COM> Date: Mon Apr 14 17:57:33 2025 +0300 dnsforward: use bool commit 055072e29dee0673cf38b198476e252bdbade8d9 Author: Eugene Burkov <E.Burkov@AdGuard.COM> Date: Fri Apr 11 18:35:38 2025 +0300 stats: imp doc commit 6554101a73564b7786cd77d250344ba141c0cbb5 Author: Eugene Burkov <E.Burkov@AdGuard.COM> Date: Thu Apr 10 19:32:34 2025 +0300 all: log changes commit da8ecf17778be9481232222c8bb7682beea475c6 Author: Eugene Burkov <E.Burkov@AdGuard.COM> Date: Thu Apr 10 19:07:04 2025 +0300 all: upd proxy, add config
This commit is contained in:
11
CHANGELOG.md
11
CHANGELOG.md
@@ -17,6 +17,15 @@ See also the [v0.107.61 GitHub milestone][ms-v0.107.61].
|
||||
|
||||
NOTE: Add new changes BELOW THIS COMMENT.
|
||||
-->
|
||||
|
||||
### Security
|
||||
|
||||
- Any simultaneous requests that are considered duplicates will now only result in a single request to upstreams, reducing the chance of a cache poisoning attack succeeding. This is controlled by the new configuration object `pending_requests`, which has a single `enabled` property, set to `true` by default.
|
||||
|
||||
**NOTE:** We thank [Xiang Li][mr-xiang-li] for reporting this security issue. It's strongly recommended to leave it enabled, otherwise AdGuard Home will be vulnerable to untrusted clients.
|
||||
|
||||
[mr-xiang-li]: https://lixiang521.com/
|
||||
|
||||
<!--
|
||||
NOTE: Add new changes ABOVE THIS COMMENT.
|
||||
-->
|
||||
@@ -55,7 +64,7 @@ See also the [v0.107.60 GitHub milestone][ms-v0.107.60].
|
||||
[#7729]: https://github.com/AdguardTeam/AdGuardHome/issues/7729
|
||||
[#7734]: https://github.com/AdguardTeam/AdGuardHome/issues/7734
|
||||
|
||||
[go-1.24.2]: https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk
|
||||
[go-1.24.2]: https://groups.google.com/g/golang-announce/c/Y2uBTVKjBQk
|
||||
[ms-v0.107.60]: https://github.com/AdguardTeam/AdGuardHome/milestone/95?closed=1
|
||||
|
||||
## [v0.107.59] - 2025-03-21
|
||||
|
||||
Reference in New Issue
Block a user