Releases: lwindolf/liferea
Release list
2.0
This is the first release of the new stable 2.0 release line. The change of the major version
means breaking changes to the UI interface. 2.0 stays compatible to 1.16 in the data format.
If you have problems with the new release you can easily downgrade. See the "removed
features" section for features that could not be kept in the GTK4 port that was the focus of
this new major version.
Changes
* Liferea was ported to GTK4 and uses libadwaita
* Liferea uses a headerbar now instead of a menubar
* Feed and item list do use GtkListView
* New WebDAV based sync backend
* All node sources now use a common subscribing dialog
* Unread count numbers are now lazy-updated (every 500ms) to improve performance
* New update monitor that gives deeper insight into the background updating
and node source synchronization
* Most of the dialogs use libadwaita widgets and are modal now
Removed Features
* Reduced feed list mode is not supported anymore
* Item list view headers are now gone (use the context menu for sorting)
* Tray icon support has lost the feature to indicate the unread counter
Changes to 2.0-RC4
* Fixes #1575 Serialize feed item document as HTML not XML
(Peter Simonyi)
* Fixes #1551 full screen mode for videos broken
(Lars Windolf)
* Fixes #1534: icons cannot be found
(AndyM48, Lars Windolf)
* Fixes #1533: refresh feed info on update broken
(Lars Windolf)
* Fixes #1525 folder collapse state is not persisted over restarts
(Lars Windolf)
* Fixes Atom 1.0 fields like "contentUpdateDate" were not store as single
values but as lists.
(Lars Windolf)
* Refactored feed list and item list to not use GtkTreeView anymore
(Lars Windolf)
* Refactored unread counting for better performance
(Lars Windolf)
* Reimplemented trayicon plugin using Status-Notifier-Item and libstray
(Lars Windolf)
* Convert OPML source and properties dialog to libadwaita
(Lars Windolf)
* Add python-console plugin to make plugin development easier
(Lars Windolf)
* Auth challenge dialog now uses AdwPasswordEntryRow
(Lars Windolf)
* All online account node sources now use a common dialog that also allows
to specify the node title.
(Lars Windolf)
* Update of Javascript library DomPurify
(Lars Windolf)
* Dropped helper script "liferea-add-feed" as it is equivalent
to "liferea --add-feed"
(Lars Windolf)
* Update of Brazilian Portuguese translation
(Fúlvio Alves)
Known problems
* DnD of feeds causes random crashes
1.16.14
1.16.13
This is a bugfix release for 1.16
Changes
* Fixes #1575 Serialize feed item document as HTML not XML
(Peter Simonyi)
* Removes some unnecessary duplicate processing when marking all items read
(Lars Windolf)
* Fixes Reedah login (invalid auth token)
(Lars Windolf)
* Fixes node source update state after login for Reedah, TheOldReader, GoogleReader
(Lars Windolf)
* Update Javascript dependency DomPurify
(Lars Windolf)
* Remove incorrect lastPoll resetting on startup when "Update all feeds
on startup" preference is disabled
(Lars Windolf)
* Fixes a dummy source handling regression
(Lars Windolf)
* Feed view now renders a HTTP 410 discontinued warning
(Lars Windolf)
* Improve liferea-add-feed helper script to work without already running instance
(Lars Windolf)
* Fixed outdated section in documentation about subscriptions, removed dead FAQ link
(Lars Windolf)
* Improve documentation CSS with auto margin and max-width
(Lars Windolf)
* Updated manpage
(Lars Windolf)
2.0-RC4
This is another security bugfix release. Please upgrade!
Give feedback!
If you are testing this 2.0 release candidate please give feedback in the Github discussion
created for this release: https://github.com/lwindolf/liferea/discussions
Changes
* Fixes a RCE vulnerability when importing OPML files containing
script commands. Now script commands from untrusted OPML files are
always dropped.
(reported by Laurence Tennant)
* Fixes a RCE vulnerability in the download manager plugin where
a command could have been injected into file paths.
(reported by Laurence Tennant)
* Fixes #1519: fatal errors on unsupported URI schemes
(Lars Windolf)
* Fixes #1533: missing refresh of feed info after updates
(Lars Windolf)
* Fixes regression when adding newsbins
(Lars Windolf)
* Improved handling for image loading, overly large images (e.g.
from HTML scraping) are now shrunk to their effective size.
(Lars Windolf)
* Do not show "0" for news bin count, when "show total count" is enabled
(Lars Windolf)
1.16.12
This is a security bugfix release. Please upgrade!
Changes
* Fixes a RCE vulnerability when importing OPML files containing
script commands. Now script commands from untrusted OPML files are
always dropped.
(reported by Laurence Tennant)
* Fixes a RCE vulnerability in the download manager plugin where
a command could have been injected into file paths.
(reported by Laurence Tennant)
2.0-RC3
This is a bugfix release fixing release blockers for 2.0.
Changes
* Fixes a long-standing security bug that caused unencrypted connection
when fetching feed content from Reedah and TheOldReader. Please upgrade
and change your Reedah / TheOldReader password afterwards!
(Lars Windolf)
* Fixes #1529: small memory leak in parser initialization
(Lars Windolf)
* Fixes #1528: TinyTinyRSS not working anymore due to Content-Encoding
header not indicating JSON
(Lars Windolf)
* Fixes #1524: mark all read dialog broken
(Lars Windolf)
* Fixes #1523: replace outdated feedburner URL in default feed list OPML
(Lars Windolf)
* Dialogs converted to libadwaita: rename, reedah_source, google_source
(Lars Windolf)
* Drop old migration code for 1.4-1.8 versions
(Lars Windolf)
* Improved enclosure handling: when using images a large one matching the window
width will be used (previously sometimes the smallest one was selected due to
not checking sizes)
(Lars Windolf)
1.16.11
This is a security bugfix.
Please urgently upgrade if you use Liferea with Reedah or TheOldReader sync!
If you use TinyTinyRSS sync please upgrade to fix a synching issue.
Security Issue with Reedah + TheOldReader sync support
Sadly there is a long-standing security bug causing unencrypted connections when fetching
feed content for those two backends. When doing such requests via http:// your auth token
got exposed and could allow malicious 3rd parties to manipulate your Reedah / TheOldReader
accounts.
Note: the login request itself (including) your password was not affected, still I advise to
- upgrade to the newest Liferea release 1.16.11 or 2.0-RC3
- verify your Reedah / TheOldReader subscriptions
- change your Reedah / TheOldReader password just to be safe
Changes
* Fixes a long-standing security bug that caused unencrypted connection
when fetching feed content from Reedah and TheOldReader. Please upgrade
and change your Reedah / TheOldReader password afterwards!
(Lars Windolf)
* Fixes #1528: TinyTinyRSS not working anymore due to Content-Encoding
header not indicating JSON
(Lars Windolf)
* Fixes #1523: replace outdated feedburner URL in default feed list OPML
(Lars Windolf)
2.0-RC2
This is the 2nd 2.0 release candidate. Thank you for reporting problems.
This release further reduces deprecation warning and fixes functional problems
as well as an important bug in the update handling. Please leave comments in
the Github discussion for this release.
Open TODOs for final 2.0
Right now there are quite some issues left for a 2.0 release mostly critical and
fatal log messages during update handling and in some dialogs (#1519).
Changes
* Fixes #1515: Ctrl-R does not work
(Lars Windolf)
* Fixes #1514: Internal browser URL submit broken
(Lars Windolf)
* Fixes #1510: <media:content> images are not displayer
(Lars Windolf)
* Fixes #1508: Duplicate favicon fetch
(Lars Windolf)
* Fixes a lot of deprecations in GTK, libxml2
(Lars Windolf)
* Fixes broken update state persistence that causes unnecessary
feed updates. Documents compliance with feed reader requirements
https://rachelbythebay.com/frb/ in net.c
(Lars Windolf)
* Add new feature to make search folders show the total count
instead of the unread count. This is useful for example with the
"Important" search folder.
(Lars Windolf)
* Add Georgian translation
(Ekaterine Papava)
1.16.10
This is a new maintenance release for 1.16 backporting some fixes from 2.0-RC2
Changes
* Fixes #1516: glib >= 2.86 required
(Lars Windolf)
* Fixes #1508: Duplicate favicon fetch
(Lars Windolf)
* Fixes update state persistence that caused unnecessary feed updates.
(Lars Windolf)
2.0-RC1
This is the first release candidate for the new 2.0 release line that contains the GTK4 port of Liferea.
Migration from 1.x
Migration from 1.14/1.16 to 2.0 is supported and should be seamless. The database schema is compatible
with 1.16 so you can fall back to 1.16 at any time if you encounter problems.
Removed features
Major porting efforts always have some side-effects with features being lost. Despite this rather
large refactoring almost all features stay as they are with the following exceptions:
- Dropped menu bar in favour of a header bar
- Dropped support for girepository-1.0
- Removed status bar in favour of raising toasts
- Trayicon plugin was removed as incompatible with GTK4
Known issues
This entirely new code base has still some issues:
- Item/feed list popup menus show overflow
- Some dialogs sometimes freeze
Please help with testing and report any bugs you discover!
Changes
* Build system switched from autotools to meson. Tarballs are now .tar.xz
(Lars Windolf)
* All message dialogs and auth dialog are now modal.
(Lars Windolf)
* Source UI definitions are now provided by a Cambalache 1.0 workflow, single source
of truth for all .ui files is liferea.cmb
(Lars Windolf)
* Ported code base to GTK4. Note that the port is a minimal port, a lot of
GTK4 deprecated widgets (like GtkTreeView) are still in use. Those will be
replaced over time.
(Lars Windolf)
* New dependency libadwaita, some dialogs are already implemented as AdwDialog
and AdwAlertDialog more will follow.
(Lars Windolf)
* Removed HTML shortcut documentation in favour of GtkShortCutsWindow
Also changed hotkey F1 to point a shortcuts
(Lars Windolf)
* Changed simple search from a dialog to a search bar
(Lars Windolf)
