FreshRSS 1.30.4

Von Alkarex

Milestone

This is a fourth security release in the continuation of 1.30.x, mostly to address some severe PHP vulnerabilities and update our official alternative Docker images (Alpine) (our default Docker images based on Debian were already fixed).

Note that our rolling-release channel (edge) is recommended for faster security patches.

Bug fixes highlights 🐛:

PHP CVE-2026-109618, CVE-2026-109619 php#2026-10-21-5

This release has been made by @Alkarex, @Frenzie and newcomer @icco

Full changelog:

Security
- Docker alternative image (Alpine 3.24) updated with PHP 8.5.12 and Apache 2.4.69 #9475
- Docker: disable PHP session.upload_progress.enabled for additional security #9476
I18n
- Improve Dutch #9479

21. Oktober 2026 um 22:45

Störungsmeldung vom 22.10.2026 10:44

Von heise online

Neue Störungsmeldung für Provider Vodafone Kabel

Details

Beginn: 22.10.2026 10:44
Region: Böblingen (07031)
Provider: Vodafone Kabel
Zugangsart: Kabel

Alle Details zur Störungsmeldung ansehen Eigene Internetstörung melden

22. Oktober 2026 um 10:44

FreshRSS.org
FreshRSS 1.30.3
21. Oktober 2026 um 16:30

FreshRSS 1.30.3

Von Alkarex

Milestone

This is a third security release in the continuation of 1.30.x, mostly to address some severe PHP vulnerabilities and update our official default Docker images (Debian) (but not our alternative Alpine images yet, which are delayed).

Note that our rolling-release channel (edge) is recommended for faster security patches.

Bug fixes highlights 🐛:

PHP CVE-2026-109618, CVE-2026-109619 php#2026-10-21-5

This release has been made by @Alkarex, @Inverle and newcomer @Ricardo-Simoes

Full changelog:

Deployment
- Docker default image updated to Debian 13 Trixie with PHP 8.4.27-1~deb13u1 and Apache 2.4.69
Extensions
- New hook: Minz_HookType::AutofillField for auth views #9362
I18n
- Improve Brazilian Portuguese #9473
Misc.
- Translate non-English code comments and identifiers #9383

21. Oktober 2026 um 16:30

FreshRSS.org
FreshRSS 1.30.2
19. Oktober 2026 um 22:57

FreshRSS 1.30.2

Von Alkarex

Milestone

This is a second security and bug-fixing release in the continuation of 1.30.x.

Note that our rolling-release channel (edge) is recommended for faster security patches.

Bug fixes highlights 🐛:

Fix PHP 8.5+ deprecation warning with SQLite
Block data: URI scheme in some cases

Performance highlights 🏎️:

Reduce memory consumption of export

This release has been made by @Alkarex, @Inverle and newcomers @abp002, @Arslan-TR, @Emredinho61, @HawkForge, @lordmarrik, @spa77k, @tomac4t, @tpq2030

Full changelog:

Security
- SimplePie sanitizer: block data: URI scheme while keeping data:image for images #9417
- Mitigate some 404 situations #9435
- Do not log the Fever API key on authentication failure #9468
- Fix local DNS leak when fetching feeds through a proxy #9451
Bug fixes
- WebSub fix POST, fix warning, better message #9420
- Fix PHP 8.5+ deprecation of sqliteCreateFunction for SQLite #9421
- Preserve explicit sort overrides when searching #9467
- Fix wrong order of args in extension compatibility check #9445
Performance
- Reduce memory consumption of export #9350
Features
- Better doc and log proxy cases #9436
Extensions
- Update registerHook docs with newer PHP 8.1+ syntax for callables #9443, Extensions#548
UI
- Disallow user page navigation while refreshing feeds #9446
- Various UI and style improvements #9426, #9441
I18n
- Improve German #9439
- Improve Polish #9458
- Improve Turkish #9440
Misc.
- Update to GT\CssXPath 1.6.0 #9411
- CI/CD: Fix login to Docker Hub #9433
- Fix SVGO zero percent filtering in CI #9422
- Update dev dependencies #9425