1.14.3 Stable

This is another 1.14 bugfix release to address a crash affecting some users and a build issue when running tests.

Changes

    * Fixes #1214: crash in conf_get_bool_value_from_schema
      (mozbugbox, reported by Mikel Olasagasti)

    * Fixes #1215: failed to build in launchpad PPA due to
      auto_test permission issue (reported by PandaJim)

1.14.2 Stable

This is a stability fix for 1.14.1. The fix of CVE-2023-1350 in 1.14.1 did contain a memory error that leads to crashes. Sorry about that. Please upgrade to avoid the problem!

Changes

    * Fixes #1212: 1.14.1 crash when refreshing feeds.
      (mozbugbox, reported by Froggy232)

    * Fixes a memory leak when reloading CSS
      (Lars Windolf)

1.14.1 Stable

This is an important security fix for 1.14. Please upgrade!

CVE-2023-1350 Remote code execution on feed enrichment

If you have enabled "Extract full content from HTML5 and Google AMP" for one or
more of your feed subscriptions it is possible for a an attacker to inject a script command
that would run any command on your system.

Upgrading to 1.14.1 solves this security problem.

If you cannot upgrade disable "Extract full content from HTML5 and Google AMP" for all
of you feeds. This can be done in the feed properties dialog,

If you have many feeds you might want to do this automatically:

1. Close Liferea
2. Open ~/.config/liferea/feedlist.opml in an editor
3. Replace all occurences of html5Extract="true" with an empty string

Changes

    * Fixes CVE-2023-1350: RCE vulnerability on feed enrichment
      (patch by Alexander Erwin Ittner)

    * Fixes #1200: Crash on double free
      (mozbugbox)

    * Improve #1192 be reordering widget creation order
      (Lars Windolf)

1.12.10 Stable

This is an important security fix for 1.12. Please upgrade!

CVE-2023-1350 Remote code execution on feed enrichment

If you have enabled "Extract full content from HTML5 and Google AMP" for one or
more of your feed subscriptions it is possible for a an attacker to inject a script command
that would run any command on your system.

Upgrading to 1.12.10 or 1.14.1 solves this security problem.

If you cannot upgrade disable "Extract full content from HTML5 and Google AMP" for all
of you feeds. This can be done in the feed properties dialog,

If you have many feeds you might want to do this automatically:

1. Close Liferea
2. Open ~/.config/liferea/feedlist.opml in an editor
3. Replace all occurences of html5Extract="true" with an empty string

Changes

    * Fixes CVE-2023-1350: RCE vulnerability on feed enrichment
      (patch by Alexander Erwin Ittner)

1.14.0 Stable

Here comes the newest stable release line of Liferea 1.14!

Features introduced with 1.14

First: Many thanks to all the contributors and package maintainers that made this possible!

Internal Browser

• New 'Reader mode' preference that allows stripping all web content
• Implement support for Webkits Intelligent Tracking Protection
• New progress bar when loading websites
• Youtube videos from media:video can be embedded now with a click on the video preview picture.
• Changes to UserAgent handling: same UA is now used for both feed fetching and internal browsing. User agent now indicates Android+Mobile per default instead of suggesting a Linux desktop to better adapt to the smaller (in comparison to browsers) rendering pane. Additionally special env vars LIFEREA_UA and LIFEREA_UA_ANONYMOUS now also affect the internal browsing.

GUI

• New view mode 'Automatic' which switches between 'Normal' and 'Wide' mode based on the window proportions.
• Liferea now supports the new GTK dark theme logic, where in the GTK/GNOME preferences you define wether you "prefer" dark mode or light mode
• Favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons
• Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view.
• Make several plugins support gettext
• Allow mutiple feed in same libnotify notification
• Redesign of the update message in the status bar. It now shows a update counter of the feeds being in update.
• You can now export a feed to XML file
• Added an option to show news bins in reduced feed list
• Added menu option to send item per mail

Feed parsing

• Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
• Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
• Implement support for subscribing to HTML5 websites
• Support for media:description field of Youtube feeds
• Improve HTML5 extraction: extract main tag if it exists and no article was found.
• Execute feed pipe/filter commands asynchronously
• Better explanation of feed update errors.

Online services

• Added generic Google Reader API support (allows using FeedHQ, FreshRSS, Miniflux...)
• Now allow converting TinyTinyRSS subscriptions to local subscriptions

Search folders

• New search folder rule to match podcasts
• New search folder rule to match headline authors
• New search folder rule to match subscription source
• New search folder rule to match parent folder name
• New search folder property that allows hiding read items
• Now search folders are automatically rebuild when rules are changed

Plugins

• Added new plugin 'add-bookmark-site' that allows to configure a custom bookmarking site.
• Added new plugin 'getfocus' that adds transparency on the feed list when it is not focussed.
• Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
• Trayicon plugin has now an option to disable minimizing to tray

Hotkeys

• New hot key Ctrl-D for 'Open in External Browser'
• New hot key F10 for headerbar plugin to allow triggering the hamburger menu
• New hot key Ctrl-0 to reset zoom
• New hot key Ctrl-O to open enclosures

Important bugfixes

• Fixing hidden panes:
  Many Liferea users did suffer from invisible pane (e.g. a minimized feed list
  or HTML view) upon startup. With certain desktop environments / themes making
  the pane grips invisible it is hard to grip the correct pixel to restore a pane.

  Now Liferea will never allow the panes to be smaller than 5% in height or width
  regarding to there orientation. If a pane is smaller than 5% height/width it will be
  set to 30% width or 50% height on startup.

  The intention here is that panes are never invisible after startup.

• Wait for network to be fully available before updating: sometimes when real internet
  access takes longer to come up then your WLAN connection Liferea did update feeds to
  early resulting in errors. Now Liferea waits for full internet connection.

Deprecations

• 2-pane mode was removed
• Dropped CDF channel support
• Dropped Atom 0.2/0.3 (aka Pie) support
• Dropped blogChannel namespace support
• Dropped photo namespace support

1.14-RC3 Stable

This is a new release candidate for 1.14. It contains many bugfixes and translation
updates. This will be the last release candidate. Next release will be 1.14.0.

Changes

* Patch #1184: Solving Webkit proxy method deprecations
  (Matthew Horan)

* Fixes #1182: Periodic crash when navigating items (TheOldReader)
  (reported by Matthew Horan)

* Fixes #1176: Custom liferea.css no longer working
  (Matthew Horan)

* Fixes #1174: Missing date for some feeds
  (reported by jfbauer432)

* Fixes #1170: broken notification icon in libnotify plugin
  (Tasos Sahanidis)

* Fixes #1162: a sting impossible to translation
  (Paweł Marciniak)

* Fixes #1124: Formation vanishes after a few seconds
  (reported by Michael F. Schönitzer)

* Fixes #1121: Wait for network to be fully available before updating
  (reported by Jeff Fortin)

* Update of Albanian trasnlation (Besnik Bleta)
* Update of Brazilian-Portugese translation (Alexandre Erwin Ittner)
* Update of Chinese translation (David Yang)
* Update of German translation (Lars Windolf)
* Update of Polish translation (Paweł Marciniak)
* Update of Russian trasnlation (mbrav)
* Update of Spanish translation (Christian Martinez)

1.14-RC2 Stable

This is the second release candidate for the next stable release line 1.14. There
will be probably one more release candidates until 1.14.0.

Focus on this release was closing some long standing bugs. There is also a new
plugin add-bookmark-site to allow providing a user define bookmarking site.

Call for translations!

If you are a translator please consider updating your Liferea translation. Here is a list
of the current translation status by language. Note the respective amount of fuzzy and
untranslated messages.

ar.po 375 translated messages, 61 fuzzy translations, 102 untranslated messages.
ast.po 338 translated messages, 84 fuzzy translations, 116 untranslated messages.
be@latin.po 242 translated messages, 152 fuzzy translations, 144 untranslated messages.
bg.po 143 translated messages, 201 fuzzy translations, 194 untranslated messages.
ca.po 369 translated messages, 73 fuzzy translations, 96 untranslated messages.
cs.po 447 translated messages, 46 fuzzy translations, 45 untranslated messages.
da.po 370 translated messages, 71 fuzzy translations, 97 untranslated messages.
de.po 512 translated messages, 12 fuzzy translations, 14 untranslated messages.
el.po 238 translated messages, 147 fuzzy translations, 153 untranslated messages.
en_GB.po 5 translated messages, 533 untranslated messages.
es.po 408 translated messages, 55 fuzzy translations, 75 untranslated messages.
eu.po 370 translated messages, 74 fuzzy translations, 94 untranslated messages.
fi.po 401 translated messages, 60 fuzzy translations, 77 untranslated messages.
fr.po 520 translated messages, 12 fuzzy translations, 6 untranslated messages.
gl.po 312 translated messages, 105 fuzzy translations, 121 untranslated messages.
he.po 394 translated messages, 57 fuzzy translations, 87 untranslated messages.
hu.po 509 translated messages, 16 fuzzy translations, 13 untranslated messages.
id.po 437 translated messages, 39 fuzzy translations, 62 untranslated messages.
it.po 509 translated messages, 17 fuzzy translations, 12 untranslated messages.
ja.po 384 translated messages, 55 fuzzy translations, 99 untranslated messages.
ko.po 138 translated messages, 210 fuzzy translations, 190 untranslated messages.
lt.po 282 translated messages, 91 fuzzy translations, 165 untranslated messages.
lv.po 372 translated messages, 71 fuzzy translations, 95 untranslated messages.
mk.po 99 translated messages, 214 fuzzy translations, 225 untranslated messages.
nl.po 520 translated messages, 12 fuzzy translations, 6 untranslated messages.
pl.po 508 translated messages, 17 fuzzy translations, 13 untranslated messages.
pt_BR.po 537 translated messages, 1 fuzzy translation.
pt.po 312 translated messages, 105 fuzzy translations, 121 untranslated messages.
ro.po 316 translated messages, 104 fuzzy translations, 118 untranslated messages.
ru.po 377 translated messages, 66 fuzzy translations, 95 untranslated messages.
sk.po 312 translated messages, 104 fuzzy translations, 122 untranslated messages.
sq.po 507 translated messages, 18 fuzzy translations, 13 untranslated messages.
sv.po 402 translated messages, 56 fuzzy translations, 80 untranslated messages.
tr.po 410 translated messages, 56 fuzzy translations, 72 untranslated messages.
uk.po 403 translated messages, 56 fuzzy translations, 79 untranslated messages.
vi.po 403 translated messages, 56 fuzzy translations, 79 untranslated messages.
zh_CN.po 342 translated messages, 86 fuzzy translations, 110 untranslated messages.
zh_TW.po 133 translated messages, 199 fuzzy translations, 206 untranslated messages.

Please help updating translations for Liferea!

Changes

    * #1152: Reduces height of the status bar to save vertical space.
      (Lars Windolf)

    * #1070: Added new plugin 'add-bookmark-site' that allows to configure
      a custom bookmarking site.
      (Lars Windolf)

    * Fixes #1155: Toolbar/menu actions disabling wrong for search
      folders/folders
      (Lars Windolf)

    * Fixes #1154: Search folder property "Hide read items" has wrong
      initial state when opening dialog
      (Lars Windolf)

    * Fixes #1100: Dates are overwritten on every update for feeds
      that do not provide date information.
      (Lars Windolf)

    * Fixes #923: Reading folders with unread filtering active often
      has remnant read items
      (Lars Windolf)

    * Fixes #723: LiveJournal feeds parsing can make the headline link
      a link to an XML document. Liferea now checks for the line MIME type.
      (Lars Windolf)

    * Fixes #720: Mark all as read doesn't clear Unread folder if one entry is selected
      (Lars Windolf)

    * Fixes #501: Fixes segfault when deleting a search folder that is rebuilding
      (Lars Windolf)

    * Updated pr-BR translation (Alexandre Erwin Ittner)

1.14-RC1 Stable

This is the first release candidate for the next stable release line 1.14. There
will be probably 2 more release candidates until 1.14.0.

Fixing hidden panes

Many Liferea users did suffer from invisible pane (e.g. a minimized feed list
or HTML view) upon startup. With certain desktop environments / themes making
the pane grips invisible it is hard to grip the correct pixel to restore a pane.

Now Liferea will never allow the panes to be smaller than 5% in height or width
regarding to there orientation. If a pane is smaller than 5% height/width it will be
set to 30% width or 50% height on startup.

The intention here is that panes are never invisible after startup.

Last minute features

This release brings some small last minutes features

• Liferea now supports the new GTK dark theme logic, where in the preferences
  you define wether you "prefer" dark mode or light mode.

• New search folder rule to match podcasts

• New search folder rule to match headline authors

• Support for media:description field of Youtube feeds

Changes

    * Liferea now supports gtk-application-prefer-dark-theme based
      dark mode switching.
      (Lars Windolf, Alexander Erwin Ittner)

    * #1148: Add search rule to find items from a given author.
      (Alexander Erwin Ittner)

    * #1147: Exported OPML feed lists are now UTF-8 encoded for better readability.
      (Alexander Erwin Ittner)

    * #1145: Render <media:description> field for Youtube feeds
      (Lars Windolf)

    * #1143: Updated default feed sources (HTTP->HTTPS)
      (Alexander Erwin Ittner)

    * #1133: Added new "podcast" search folder rule.
      (Alexander Erwin Ittner)

    * #1139: Also add enclosures when saving items to file.
      (Alexander Erwin Ittner)

    * Fixes #1132: Improved timeout error handling in feed commands
      (Alexander Erwin Ittner)

    * Fixes #1129: Accessibility errors in .ui files
      (reported by Paul Gevers)

    * Fixes #1126: Some images broken in reader mode
      (reported by Saijin-Naib)

    * Fixes #901, #1123: resize view panes to sensible positions
      when they were at min or max position on last shutdown. Makes
      left pane 30% window width and item list pane 50% height/width
      when pane position is 0 or 95% of height/width. (Lars Windolf)

    * Fixes #992: HTML with self-closing tags not rendering properly.
      (Rich Coe)

    * Fixes #644, #901, #909: restoring window size/position with header
      bar plugin active. (Lars Windolf)

    * #1137: Updated French translation (Guillaume Bernard)

    * #1134, #1135: Updated Spanish example feeds (Joel Barrios)

1.13.9 Unstable

This will be the last unstable release before the first 1.14 release candidate. It contains
bugfixes and a generalization of the Google Reader API implementation we already had
for TheOldReader. This implementation was improved, fixing some bugs and can now
be used with arbitrary Google Reader services.

New feature: Google Reader API support

If you are a FeedHQ, FreshRSS, Basquz user or a a user of any other Google Reader
compatible service, you can now subscribe to those services.

Note: it currently doesn't work with Miniflux due to this miniflux/v2#1498
which is probably a bug in Miniflux. Once it is solved Miniflux also can be used.

If you experience any issues please open a ticket for support!

GUI simplification: less cluttered item list

The item list has seen some rework. The quite large left padding (cause by reserved space
for expansion header) is now gone. Also the enclosures icon column was dropped. When
using Liferea in wide mode this really gives back a lot of vertical space, so Liferea in wide mode
becomes more useful half-maximized or in split screen situations.

Please give feedback how you like the change, especially the rather small padding left of the
favicon column (when in wide mode)!

Changes

    * Update to Readability.js 0.41 (better image and table handling)
      (Lars Windolf)
      
    * Changes to UserAgent handling: same UA is now used for both feed fetching
      and internal browsing. User agent now indicates Android+Mobile per default
      instead of suggesting a Linux desktop to better adapt to the smaller
      (in comparison to browsers) rendering pane. Additionally special env
      vars LIFEREA_UA and LIFEREA_UA_ANONYMOUS now also affect the internal
      browsing.

    * Improve HTML5 extraction: extract <main> if it exists and no article
      was found.

    * #1117: Hide unused expander space in item list. This saves horizontal
      space. (Sefler Zhou)

    * Drop enclosure icon from item list. This saves horizontal space.
      (Lars Windolf)

    * #515, #962, #1113 adds generic Google Reader API support
      (this enables access to FeedHQ, FreshRSS, Miniflux...)

    * #1108, #113: Improve performance by different check order in itemset
      merging (suggested by mozbugbox)

    * Fixes #1033: Subscribing defaulted to HTML5 feeds even when real
      feeds do exist. (reported by Hanno Braun)

    * Fixes #1111: wrong base URI in reader mode
      (Lars Windolf)
    
    * Fixes #1112: Image duplication caused by feeds providing an image
      link which is also in the item description as additional metadata.
      (Lars Windolf)

    * Update of Dutch translation (Gert-dev)

1.13.8 Unstable

Here comes a new development release in the 1.13 line.

As with the previous releases there were again many contributions which make working
on Liferea a lot of fun. Special thanks to Matthew Horan for the multitude of contributions
in this release!

Continued work on 'Reader Mode'

It contains further work on the new "Reader Mode" feature. While the feature is not yet complete
it is much more useful now. "Reader mode" is now more consistent to the global preference and
can be consistently ad-hoc toggled via the browser content menu. It now uses the same styling
as the headline view does.

What's still missing for the feature:

• maybe a per-feed subscription
• good fallback when it fails (e.g. auto-redirect to normal website and/or a good error message)

TheOldReader improvements

For TheOldReader support for synchronizing title changes and folder changes was implemented.
There is also a bugfix to prevent that deleted feeds would reappear later.

Release Candidate for v1.14

Given the progress so far, after one or two more 1.13 releases we will probably see a 1.14 release candidate.
Until then some issues with 'Reader Mode' and HTML5 feeds have to be ironed out...

Changes

Here is the detailed list of changes:

* #1103: New hot key Ctrl-D for 'Open in External Browser' 
  (David Yang)

* #1101: Reader mode for internal browser: is now applied on prefetched HTML
  document instead of applying after normal rendering. Which means it
  is more secure and much faster. (Lars Windolf)

* #1097: Reader mode for internal browser: shows now standard decorations
  like in headline view. (Lars Windolf)

* #1095: New feature: Export items to feed file
  (Alexandre Erwin Ittner)

* #1078, #1081, #1082: Make several plugins XDG path aware
  (Paweł Marciniak)

* #1071: Various fixes and feature enhancements for TheOldReader sources
  Sync titles, sync folder changes, fix removal consistency
  (Matthew Horan)

* #1061: Faster and safer generation of localized filenames
  (Lorenzo Ancora)

* #1052: Allow building with libpango < 1.43.0 (Ubuntu 18.04)
  (Alexandre Erwin Ittner)

* #778: New preference: deferred removal of read items from folders and
  search folders. (Rich Coe)

* Fixes #1094: Fix Next Unread Item crash when no feed selected
  (Matthew Horan)

* Fixes #1092: --debug-html seems broken
  (Matthew Horan)

* Fixes #1073: Memory leak in stylesheet reloading
  (Matthew Horan)

* Fixes #1069: Don't update HTML view when browsing internally
  (Matthew Horan)

* Fixes #1064: Fix strsep implicit declaration warning
  (Paweł Marciniak)

* Fixes #1058: Italian manpage installation
  (Paweł Marciniak)

* Fixes #1053: Use liferea_shell_show_window() when activating
  This shold fix an issue where position is not restored on XOrg when
  Liferea is trigger from Cinnamon launcher (instead of tray)
  (Matthew Horan)

* Fixes #1066: Browse to requested URI on JS window creation (this
  prevents loading empty tabs on weird JS links some sites/feeds have)
  (Matthew Horan)

* #1095: Updated of French translation
  (sblondon)

* #1043: Added Italian documentation translation
  (Lorenzo Ancora)

Download

Get Liferea from https://github.com/lwindolf/liferea/releases/tag/v1.13.8