openSUSE-SU-2023:0096-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2023:0096-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2023:0096-1
Related
Published
2023-04-27T12:51:25Z
Modified
2025-05-07T18:14:36.040841Z
Upstream
Summary
Security update for liferea
Details

liferea was updated to version 1.14.1:

  • Fix CVE-2023-1350 - Remote code execution on feed enrichment (boo#1209190).

Update to version 1.14.0:

  • New 'Reader mode' preference that allows stripping all web content
  • Implement support for Webkits Intelligent Tracking Protection
  • New progress bar when loading websites
  • Youtube videos from media:video can be embedded now with a click on the video preview picture.
  • Changes to UserAgent handling: same UA is now used for both feed fetching and internal browsing.
  • New view mode 'Automatic' which switches between 'Normal' and 'Wide' mode based on the window proportions.
  • Liferea now supports the new GTK dark theme logic, where in the GTK/GNOME preferences you define wether you 'prefer' dark mode or light mode
  • Favicon discovery improvements: now detects all types of Apple Touch Icons, MS Tile Images and Safari Mask Icons
  • Increase size of stored favicons to 128x128px to improve icon quality in 3-pane wide view.
  • Make several plugins support gettext
  • Allow mutiple feed in same libnotify notification
  • Redesign of the update message in the status bar. It now shows a update counter of the feeds being in update.
  • You can now export a feed to XML file
  • Added an option to show news bins in reduced feed list
  • Added menu option to send item per mail
  • Default to https:// instead of http:// when user doesn't provide protocol on subscribing feed
  • Implement support for subscribing to LD+Json metadata listings e.g. concert or theater event listings
  • Implement support for subscribing to HTML5 websites
  • Support for media:description field of Youtube feeds
  • Improve HTML5 extraction: extract main tag if it exists and no article was found.
  • Execute feed pipe/filter commands asynchronously
  • Better explanation of feed update errors.
  • Added generic Google Reader API support (allows using FeedHQ, FreshRSS, Miniflux...)
  • Now allow converting TinyTinyRSS subscriptions to local subscriptions
  • New search folder rule to match podcasts
  • New search folder rule to match headline authors
  • New search folder rule to match subscription source
  • New search folder rule to match parent folder name
  • New search folder property that allows hiding read items
  • Now search folders are automatically rebuild when rules are changed
  • Added new plugin 'add-bookmark-site' that allows to configure a custom bookmarking site.
  • Added new plugin 'getfocus' that adds transparency on the feed list when it is not focussed.
  • Trayicon plugin has now a configuration option to change the behaviour when closing Liferea.
  • Trayicon plugin has now an option to disable minimizing to tray
  • New hot key Ctrl-D for 'Open in External Browser'
  • New hot key F10 for headerbar plugin to allow triggering the hamburger menu
  • New hot key Ctrl-0 to reset zoom
  • New hot key Ctrl-O to open enclosures
  • Fix hidden panes, Liferea will never allow the panes to be smaller than 5% in height or width
  • Wait for network to be fully available before updating
  • 2-pane mode was removed
  • Dropped CDF channel support
  • Dropped Atom 0.2/0.3 (aka Pie) support
  • Dropped blogChannel namespace support

  • Dropped photo namespace support

  • Require python3-cairo; needed for tray icon (boo#1193579).

References

Affected packages

SUSE:Package Hub 15 SP4 / liferea

Package

Name
liferea
Purl
pkg:rpm/suse/liferea&distro=SUSE%20Package%20Hub%2015%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.14.1-bp154.2.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "liferea": "1.14.1-bp154.2.3.1",
            "liferea-lang": "1.14.1-bp154.2.3.1"
        }
    ]
}

openSUSE:Leap 15.4 / liferea

Package

Name
liferea
Purl
pkg:rpm/opensuse/liferea&distro=openSUSE%20Leap%2015.4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.14.1-bp154.2.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "liferea": "1.14.1-bp154.2.3.1",
            "liferea-lang": "1.14.1-bp154.2.3.1"
        }
    ]
}