Skip to content

2.0-RC4

Pre-release
Pre-release

Choose a tag to compare

@lwindolf lwindolf released this 16 Jun 21:54

This is another security bugfix release. Please upgrade!

Give feedback!

If you are testing this 2.0 release candidate please give feedback in the Github discussion
created for this release: https://github.com/lwindolf/liferea/discussions

Changes

* Fixes a RCE vulnerability when importing OPML files containing
  script commands. Now script commands from untrusted OPML files are
  always dropped.
  (reported by Laurence Tennant)

* Fixes a RCE vulnerability in the download manager plugin where
  a command could have been injected into file paths.
  (reported by Laurence Tennant)

* Fixes #1519: fatal errors on unsupported URI schemes
  (Lars Windolf)

* Fixes #1533: missing refresh of feed info after updates
  (Lars Windolf)

* Fixes regression when adding newsbins
  (Lars Windolf)

* Improved handling for image loading, overly large images (e.g.
  from HTML scraping) are now shrunk to their effective size.
  (Lars Windolf)

* Do not show "0" for news bin count, when "show total count" is enabled
  (Lars Windolf)