{"id":"openSUSE-SU-2023:0096-1","summary":"Security update for liferea","details":"\nliferea was updated to version 1.14.1:\n\n+ Fix CVE-2023-1350 - Remote code execution on feed enrichment (boo#1209190).\n\nUpdate to version 1.14.0:\n\n+ New 'Reader mode' preference that allows stripping all web\n  content\n+ Implement support for Webkits Intelligent Tracking Protection\n+ New progress bar when loading websites\n+ Youtube videos from media:video can be embedded now with a\n  click on the video preview picture.\n+ Changes to UserAgent handling: same UA is now used for both\n  feed fetching and internal browsing.\n+ New view mode 'Automatic' which switches between 'Normal' and\n  'Wide' mode based on the window proportions.\n+ Liferea now supports the new GTK dark theme logic, where in\n  the GTK/GNOME preferences you define wether you 'prefer' dark\n  mode or light mode\n+ Favicon discovery improvements: now detects all types of Apple\n  Touch Icons, MS Tile Images and Safari Mask Icons\n+ Increase size of stored favicons to 128x128px to improve icon\n  quality in 3-pane wide view.\n+ Make several plugins support gettext\n+ Allow mutiple feed in same libnotify notification\n+ Redesign of the update message in the status bar. It now shows\n  a update counter of the feeds being in update.\n+ You can now export a feed to XML file\n+ Added an option to show news bins in reduced feed list\n+ Added menu option to send item per mail\n+ Default to https:// instead of http:// when user doesn't\n  provide protocol on subscribing feed\n+ Implement support for subscribing to LD+Json metadata listings\n  e.g. concert or theater event listings\n+ Implement support for subscribing to HTML5 websites\n+ Support for media:description field of Youtube feeds\n+ Improve HTML5 extraction: extract main tag if it exists and\n  no article was found.\n+ Execute feed pipe/filter commands asynchronously\n+ Better explanation of feed update errors.\n+ Added generic Google Reader API support (allows using FeedHQ,\n  FreshRSS, Miniflux...)\n+ Now allow converting TinyTinyRSS subscriptions to\n  local subscriptions\n+ New search folder rule to match podcasts\n+ New search folder rule to match headline authors\n+ New search folder rule to match subscription source\n+ New search folder rule to match parent folder name\n+ New search folder property that allows hiding read items\n+ Now search folders are automatically rebuild when rules are\n  changed\n+ Added new plugin 'add-bookmark-site' that allows to configure\n  a custom bookmarking site.\n+ Added new plugin 'getfocus' that adds transparency on the feed\n  list when it is not focussed.\n+ Trayicon plugin has now a configuration option to change the\n  behaviour when closing Liferea.\n+ Trayicon plugin has now an option to disable minimizing to tray\n+ New hot key Ctrl-D for 'Open in External Browser'\n+ New hot key F10 for headerbar plugin to allow triggering the\n  hamburger menu\n+ New hot key Ctrl-0 to reset zoom\n+ New hot key Ctrl-O to open enclosures\n+ Fix hidden panes, Liferea will never allow the panes to be\n  smaller than 5% in height or width\n+ Wait for network to be fully available before updating\n+ 2-pane mode was removed\n+ Dropped CDF channel support\n+ Dropped Atom 0.2/0.3 (aka Pie) support\n+ Dropped blogChannel namespace support\n+ Dropped photo namespace support\n\n- Require python3-cairo; needed for tray icon (boo#1193579).\n","modified":"2026-03-11T07:33:29.561912Z","published":"2023-04-27T12:51:25Z","related":["CVE-2023-1350"],"upstream":["CVE-2023-1350"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U2XWO532L7BXCMKLBA5M4DP7HIU4NSO2/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1193579"},{"type":"REPORT","url":"https://bugzilla.suse.com/1209190"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-1350"}],"affected":[{"package":{"name":"liferea","ecosystem":"SUSE:Package Hub 15 SP4","purl":"pkg:rpm/suse/liferea&distro=SUSE%20Package%20Hub%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-bp154.2.3.1"}]}],"ecosystem_specific":{"binaries":[{"liferea-lang":"1.14.1-bp154.2.3.1","liferea":"1.14.1-bp154.2.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0096-1.json"}},{"package":{"name":"liferea","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/liferea&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.1-bp154.2.3.1"}]}],"ecosystem_specific":{"binaries":[{"liferea-lang":"1.14.1-bp154.2.3.1","liferea":"1.14.1-bp154.2.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0096-1.json"}}],"schema_version":"1.7.5"}