• Milestone
• Discussion 🎄

A few highlights ✨:

• New Important feeds group in the main view, with corresponding new priority level for feeds #5782
  • Entries from important feeds are not marked as read during scroll, during focus, nor during Mark all as read
• Add filter actions (auto mark as read) at category level and at global levels #5942
• Increase SQL fields length to maximum possible #5788, #5570
• Many bug fixes

Breaking changes 💥:

• Require PHP 7.4+
• Soft require Apache 2.4+ (but repair minimal compatibility with Apache 2.2)
• Use GitHub Actions to build Docker images, offering architectures amd64, arm32v7, arm64v8 with automatic detection #5808
  • So no -arm suffix anymore
• Upgraded extensions require FreshRSS 1.23.0+ Extensions#181

This release has been made by several contributors: @Alkarex, @ColonelMoutarde, @FireFingers21, @Frenzie, @kasimircash, @andris155, @b-reich, @foux, @jaden, @jan-vandenberg, @joestump, @jtracey, @mark-monteiro, @martinrotter, @math-GH, @passbe

Full changelog:

• Features
  • New Important feeds group in the main view, with corresponding new priority level for feeds #5782
    • Entries from important feeds are not marked as read during scroll, during focus, nor during Mark all as read
  • Add filter actions (auto mark as read) at category level and at global levels #5942
  • Improve reliability of Max number of articles to keep unread #5905
  • New option to mark entries as read when focused from keyboard shortcut 5812
  • New display option to hide My labels in article footers #5884
  • Add support for more thumbnail types in feeds enclosures #5806
  • Support for favicons with non-absolute paths #5839
  • Increase SQL (VARCHAR) text fields length to maximum possible #5788
  • Increase SQL date fields to 64-bit to be ready for year 2038+ #5570
• Compatibility
  • Require PHP 7.4+, and implement typed properties #5720
  • Require Apache 2.4+ (but repair minimal compatibility with Apache 2.2) #5791, #5804
• Bug fixing
  • Fix regression in Docker CRON_MIN if any environment variable contains a single quote #5795
  • Improve filtering of cron environment variables #5898
  • Fix the TRUSTED_PROXY environment variable used in combination with trusted sources #5853
  • Fix regression in marking as read if an identical title already exists #5937
  • Fix JavaScript regression in label dropdown #5785
  • Fix regression when renaming a label #5842
  • Fix API for adding feed with a title #5868
  • Fix regression in UI of update page #5802
  • Fix XPath encoding #5912
  • Fix notifications, in particular during login #5959
• Deployment
  • Use GitHub Actions to build Docker images, offering architectures amd64, arm32v7, arm64v8 with automatic detection #5808
  • Docker alternative image updated to Alpine 3.19 with PHP 8.2.13 and Apache 2.4.58 #5383
• Extensions
  • Upgrade extensions code to PHP 7.4+ #5901, #5957
  • Breaking change: upgraded extensions require FreshRSS 1.23.0+ Extensions#181
  • Pass FreshRSS version to JavaScript client side for extensions #5902
  • Add GitHub Actions and PHPStan for automatic testing of the Extensions repository Extensions#185
• API
  • Improve handling of new lines in enclosure descriptions (e.g., YouTube video descriptions) #5859
• Security
  • Avoid printing exceptions in favicons #5867
  • Remove unneeded execution permissions on some files #5831
• UI
  • Ensure that enough articles are loaded on window resize #5815
  • Improve Nord theme #5885
  • Do not show message Add some feeds #5827
  • Various UI and style improvements #5886
• i18n
  • Fix font priority for languages using Han characters #5930
  • Improve Dutch #5796
  • Improve Hungarian #5918
• Misc.
  • Increase PHPStan from Level 7 to Level 8 #5946
  • Compatibility PHP 8.2+ for running automated tests #5826
  • Use PHP declare(strict_types=1); #5830
  • Better stack trace for SQL errors #5916
  • Code improvements #5511, #5945
  • Update dev dependencies #5787

An anonymous reader shared this report from Fast Company: Providers of critical infrastructure in the United States are doing a sloppy job of defending against cyber intrusions, the National Security Council tells Fast Company, pointing to recent Iran-linked attacks on U.S. water utilities that exploited basic security lapses [earlier this month]. The security council tells Fast Company it's also aware of recent intrusions by hackers linked to China's military at American infrastructure entities that include water and energy utilities in multiple states. Neither the Iran-linked or China-linked attacks affected critical systems or caused disruptions, according to reports. "We're seeing companies and critical services facing increased cyber threats from malicious criminals and countries," Anne Neuberger, the deputy national security advisor for cyber and emerging tech, tells Fast Company. The White House had been urging infrastructure providers to upgrade their cyber defenses before these recent hacks, but "clearly, by the most recent success of the criminal cyberattacks, more work needs to be done," she says... The attacks hit at least 11 different entities using Unitronics devices across the United States, which included six local water facilities, a pharmacy, an aquatics center, and a brewery... Some of the compromised devices had been connected to the open internet with a default password of "1111," federal authorities say, making it easy for hackers to find them and gain access. Fixing that "doesn't cost any money," Neuberger says, "and those are the kinds of basic things that we really want companies urgently to do." But cybersecurity experts say these attacks point to a larger issue: the general vulnerability of the technology that powers physical infrastructure. Much of the hardware was developed before the internet and, though they were retrofitted with digital capabilities, still "have insufficient security controls," says Gary Perkins, chief information security officer at cybersecurity firm CISO Global. Additionally, many infrastructure facilities prioritize "operational ease of use rather than security," since many vendors often need to access the same equipment, says Andy Thompson, an offensive cybersecurity expert at CyberArk. But that can make the systems equally easy for attackers to exploit: freely available web tools allow anyone to generate lists of hardware connected to the public internet, like the Unitronics devices used by water companies. "Not making critical infrastructure easily accessible via the internet should be standard practice," Thompson says.

Read more of this story at Slashdot.

La Estrella de Panamá  La Estrella de Panamá

Opinión  La Estrella de Panamá

Un estudio revela que el 90 % de los usuarios realiza compras de forma espontánea durante jornadas de ofertas como el Viernes Negro o el ciberlunes