FreshRSS - Package Updates

[Package Updates]

[1.29.1]

• Update FreshRSS to 1.30.1
• Full Changelog
• Reword recommendations and explanations for edge (rolling release) vs. latest (versioned release) channels #9270
• Config + increase default values for search max length and depth #9280
• Reject token access (RSS/OPML export, feed refresh) for disabled accounts #9336
• Bound ZIP import against decompression bombs #9332
• Fix domain-wide Retry-After #9390
• Fix muting of feeds gone with HTTP 410 #9391
• Fix infinite redirect loop due to SCRIPT_NAME in PATH_INFO #9282, #9287
• Fix regression sharing links #9303
• Fix regression with HTTPS proxies due to wrong TLS SNI resolution #9341
• Fix custom favicon with GReader API #9409

[Package Updates]

[1.29.2]

• Fix 502 after SSO login on Cloudron 10.1.5

[Package Updates]

[1.29.3]

• Update FreshRSS to 1.30.2
• Full Changelog
• SimplePie sanitizer: block data: URI scheme while keeping data:image for images #9417
• Mitigate some 404 situations #9435
• Do not log the Fever API key on authentication failure #9468
• Fix local DNS leak when fetching feeds through a proxy #9451
• WebSub fix POST, fix warning, better message #9420
• Fix PHP 8.5+ deprecation of sqliteCreateFunction for SQLite #9421
• Preserve explicit sort overrides when searching #9467
• Fix wrong order of args in extension compatibility check #9445
• Reduce memory consumption of export #9350
• Better doc and log proxy cases #9436

[Package Updates]

[1.30.0]

• Update php-base | final to 8.5-20261021
• security: fix RCEs CVE-2026-109618 / CVE-2026-109619

[Package Updates]

[1.30.1]

• Update FreshRSS to 1.30.4
• Full Changelog
• Docker alternative image (Alpine 3.24) updated with PHP 8.5.12 and Apache 2.4.69 #9475
• Improve Dutch #9479
• Docker default image (Debian 13 Trixie) updated with PHP 8.4.27-1~deb13u1 and Apache 2.4.69 #9475
• New hook: Minz_HookType::AutofillField for auth views #9362
• Improve Brazilian Portuguese #9473
• Translate non-English code comments and identifiers #9383