Important update for all Feber¹ calendar users:

Version 1.3.1 patches two critical security issues (and introduces additional tightening of some security-related settings) – the update is already available through Yunohost and from the website, and I strongly recommend updating!

A big thank you to 0ffheal, who found and responsibly disclosed these issues to me (with a fantastically detailed report, I might add)! ٩(◕‿◕。)۶

Additionally, if you're updating from the website (or in a few days from Yunohost), you'll also get version 1.4.1 already – notably including an extended system requirements check/wizard, and a badge that informs users of the available date range during event creation (see screenshot).

Additional thanks go to @sorenpeter and owlpower for 1.4.0 feature intel, Clemens Lenhart for 1.4.0 regression intel and testing, as well as Amir Abdelhedi for a timely review & merge of the critical 1.3.1 security patch on Yunohost. Thank you so much everyone! <3

¹ Feber is a simple, self-hostable group calendar I released in 2024: https://simonrepp.com/feber/ – It is mostly done but I still have a smol roadmap that I'm working on whenever I find some free time for it •ᴗ•

#feber

PHP TIL: The 'opcache_enabled' (true/false) property in PHP's opcache_get_status() function does not refer to the enabled status of the opcache ... instead it refers to the status of the shm_cache, because what else. (;´༎ຶٹ༎ຶ`)

In other news: It's my pleasure to announce #feber 1.4.1! :D

Thanks to Clemens Lenhart for catching the regression (note that it affects only some environments), and to the pros at https://github.com/php/php-src/issues/18840 for demystifying the wonders of PHP for laypeople like me. o/