Important update for all Feber¹ calendar users:
Version 1.3.1 patches two critical security issues (and introduces additional tightening of some security-related settings) – the update is already available through Yunohost and from the website, and I strongly recommend updating!
A big thank you to 0ffheal, who found and responsibly disclosed these issues to me (with a fantastically detailed report, I might add)! ٩(◕‿◕。)۶
Additionally, if you're updating from the website (or in a few days from Yunohost), you'll also get version 1.4.1 already – notably including an extended system requirements check/wizard, and a badge that informs users of the available date range during event creation (see screenshot).
Additional thanks go to @sorenpeter and owlpower for 1.4.0 feature intel, Clemens Lenhart for 1.4.0 regression intel and testing, as well as Amir Abdelhedi for a timely review & merge of the critical 1.3.1 security patch on Yunohost. Thank you so much everyone! <3
¹ Feber is a simple, self-hostable group calendar I released in 2024: https://simonrepp.com/feber/ – It is mostly done but I still have a smol roadmap that I'm working on whenever I find some free time for it •ᴗ•





