# Pi-hole Web v5.18.2 and Core v5.15.1 released

**URL:** <https://discourse.pi-hole.net/t/pi-hole-web-v5-18-2-and-core-v5-15-1-released/60695>\
**Category:** Announcements\
**Created:** [January 22, 2023, 5:11pm UTC](https://discourse.pi-hole.net/t/pi-hole-web-v5-18-2-and-core-v5-15-1-released/60695 "2023-01-22T17:11:54Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![PromoFaux](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/promofaux/32/1545_2.png) [@PromoFaux](https://discourse.pi-hole.net/u/PromoFaux)\
**Post date:** [January 22, 2023, 5:11pm UTC](https://discourse.pi-hole.net/t/pi-hole-web-v5-18-2-and-core-v5-15-1-released/60695/1 "2023-01-22T17:11:54Z")

</div>

Originally published at: [Pi-hole Web v5.18.2 and Core v5.15.1 released – Pi-hole](https://pi-hole.net/blog/2023/01/22/pi-hole-web-v5-18-2-and-core-v5-15-1-released/)

**As always, please read through the changelog before updating with `pihole -up`.** _(A new tag for docker image will arrive in due course.)_

#### **Update 2023-01-25:**

**Core v5.15.3** released to address an issue with the PHP config for the admin page:

- Change lighttpd options `min_procs` value to `1` by [@rdwebdesign](https://github.com/rdwebdesign) in [#5149](https://github.com/pi-hole/pi-hole/pull/5149)

**Web v5.18.3** released with a security fix for CVE-2023-23614:

- Fix insecure persistent login token by [@4n4nk3](https://github.com/4n4nk3) [d31cf9d](https://github.com/pi-hole/AdminLTE/commit/d31cf9d1566d6b671933716cb73cd6c5cc9ab802) ([GHSA-33w4-xf7m-f82m](https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-33w4-xf7m-f82m "GHSA-33w4-xf7m-f82m"))

* * *

#### **Update 2023-01-23:**

**Core v5.15.2** released with small patch to prevent rare issues on new installs:

- Ensure that the directory /run/lighttpd exists, and that it is owned by www-data by [@PromoFaux](https://github.com/PromoFaux) in [#5143](https://github.com/pi-hole/pi-hole/pull/5143)

* * *

#### Notes

- When running gravity, if you receive a notice that Pi-hole is ignoring “non-domains” – this is _not an_ error and is for information only. Sometimes lists contain hostnames or regex that are not compatible when importing with gravity – but it does not nessacerily mean action needs to be taken. In previous releases we made this appear more severe than it actually is.
- To clarify changes in the last release – if you receive a 403 response when navigating to `http://ip.address` this is entirely expected and does not constitute a bug. There are some workarounds and tweaks mentioned in the [previous release notes](https://pi-hole.net/blog/2023/01/15/pi-hole-ftl-v5-20-1-web-v5-18-1-and-core-v5-15-released/) if you absolutely have to browse to the web interface by IP. Else, just use `http://pi.hole` or manually append `/admin` when browsing via IP (or update your bookmarks)

### Pi-hole Web changes:

#### What’s Changed

- Add default value for $ver in func.php by [@yubiuser](https://github.com/yubiuser) in [#2497](https://github.com/pi-hole/AdminLTE/pull/2497)
- Show two decimals on doughnutTooltip if total share shown is less than 1% by [@yubiuser](https://github.com/yubiuser) in [#2502](https://github.com/pi-hole/AdminLTE/pull/2502)
- Tweak deleting message by [@yubiuser](https://github.com/yubiuser) in [#2498](https://github.com/pi-hole/AdminLTE/pull/2498)
- Attenuate non-domain warning by [@yubiuser](https://github.com/yubiuser) in [#2507](https://github.com/pi-hole/AdminLTE/pull/2507)
- remove hard-coded /admin/ path by [@gstrauss](https://github.com/gstrauss) in [#2461](https://github.com/pi-hole/AdminLTE/pull/2461)
- Do not return ‘false’ if IDNA\<-\>UNICODE conversion fails by [@yubiuser](https://github.com/yubiuser) in [#2479](https://github.com/pi-hole/AdminLTE/pull/2479)

#### New Contributors

- [@gstrauss](https://github.com/gstrauss) made their first contribution in [#2461](https://github.com/pi-hole/AdminLTE/pull/2461)

**Full Changelog** : [v5.18.1...v5.18.2](https://github.com/pi-hole/AdminLTE/compare/v5.18.1...v5.18.2)

### Pi-hole Core changes:

#### What’s Changed

- Include mod\_accesslog with new config by [@PromoFaux](https://github.com/PromoFaux) in [#5121](https://github.com/pi-hole/pi-hole/pull/5121)
- Run updatechecker after gravity by [@yubiuser](https://github.com/yubiuser) in [#5137](https://github.com/pi-hole/pi-hole/pull/5137)
- Only remove the `server.modules+=` from new config if lighttpd version is \< 1.4.56 by [@PromoFaux](https://github.com/PromoFaux) in [#5133](https://github.com/pi-hole/pi-hole/pull/5133)
- Cleanup if startup failed by [@yubiuser](https://github.com/yubiuser) in [#5052](https://github.com/pi-hole/pi-hole/pull/5052)
- Reduce number of false positives when gravity unable to import domains – change the wording of the output by [@PromoFaux](https://github.com/PromoFaux) in [#5128](https://github.com/pi-hole/pi-hole/pull/5128)
- Change php socket path back to /run/lighttpd/ from /tmp by [@PromoFaux](https://github.com/PromoFaux) in [#5139](https://github.com/pi-hole/pi-hole/pull/5139)
- Always set lighttpd config dir permissions by [@yubiuser](https://github.com/yubiuser) in [#5038](https://github.com/pi-hole/pi-hole/pull/5038)

**Full Changelog** : [v5.15...v5.15.1](https://github.com/pi-hole/pi-hole/compare/v5.15...v5.15.1)