AdGuard Home - Package Updates

[Package Updates]

[1.14.16]

• Update AdGuardHome to 0.107.76
• Full Changelog
• New reason query parameter in GET /control/querylog. See openapi/openapi.yaml for the full description.
• Duration values in YAML configuration file now support d (days) units and has been updated.
• NOTE: Any rollback to version below the v0.107.76 should convert the values back to hours.
• Query parameter response_status in GET /control/querylog is now deprecated. Use new reason query parameter instead.
• DNS caching with disabled DNSSEC (#8384).

[Package Updates]

[1.14.17]

• Update AdGuardHome to 0.107.77
• Full Changelog
• Authorization in GLiNET mode is no longer vulnerable to path traversal attacks.
• NOTE: This is CVE-2026-41448. We thank @djnnvx for reporting this security issue.
• New reason query parameter in GET /control/querylog. See openapi/openapi.yaml for the full description.
• Query parameter response_status in GET /control/querylog is now deprecated. Use new reason query parameter instead.

[Package Updates]

[1.14.18]

• Update AdGuardHome to 0.107.78
• Full Changelog
• See also the v0.107.79 GitHub milestone.

[Package Updates]

[1.14.19]

• Update AdGuardHome to 0.107.79
• Full Changelog
• Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in [1.26.6][go-1.26.6].
• AdGuard Home is now more resistant to resource exhaustion attacks when using DNS-over-QUIC.
• Bootstrap servers configuration now supports comments.
• New property "language" in POST /control/install/check_config and POST /control/install/configure HTTP APIs.
• The user is able to remove the static lease's hostname via the HTTP API.
• The edge channel has been switched to the new UI and versioning scheme.
• strict_sni_check is now deprecated.
• DNS64 treating unresolved CNAME/DNAME answers as the end of resolution chain (#7514).
• Blocked requests without an EDNS(0) OPT record (#8183).