Skip to content

QuestarrNG v1.7.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Oct 03:10
· 224 commits to main since this release
v1.7.3
f044bbc

User-facing changes

Changed

  • Release Pipeline: Release-note fragments now appear in versioned releases, and Discord announcements use the shared channel webhook configured as the DISCORD_RELEASE_WEBHOOK Actions secret.

Security

  • Proxy: YunoHost proxy requests now use a fixed upstream host and forward WebSocket upgrades only, blocking attacker-controlled host and h2c upgrade headers.
  • Dependencies: Questarr now bundles a locally patched node-forge release that rejects malformed RSA PKCS#1 v1.5 DigestInfo signatures (CVE-2026-85393).

Container image: ghcr.io/snapetech/questarrng:1.7.3

Pull with: docker pull ghcr.io/snapetech/questarrng:1.7.3.

Assets 2
Loading