u/Safihre

https://sabnzbd.org/downloads

This is the second test release of version 5.2.0. We are still working on several other features, but hope you will already enjoy the current improvements and give us feedback!

New features in 5.2.0

• Downloaded data will be written directly to disk (if your hardware supports it), which greatly reduces memory and CPU usage on systems with SSD's. Additionally, several other performance improvements were made.
• Search your Indexers and add downloads directly from within SABnzbd.
• Post-Processing, Pre-Queue and Notification Scripts no longer receive command-line arguments. Use the SAB_* environment variables instead. This prevents an attacker easy access to remote code execution.
• Download directories can no longer be inside the program directory. This is also to prevent an attacker easy access to remote code execution.
• Changed the internal webserver from CherryPy to Starlette.
• Overview of Active Sessions is available when username and password are enabled.
• Only allow proxied requests from hosts configured in xff_trusted_hosts.
• Removed the scriptlog link from the script_log history field.
• Remove unused fields completeness, meta, series, id, and script_log from history-API response.
• Cache Public IPv4 address for 10 minutes to prevent abuse.

Bug fixes in 5.2.0

• Downloads with Repair priority would not always be at the top of the queue.
• Failure to read one RSS URL would stop the whole readout instead of continuing to the next.
• Prevent potential XSS in the History from malicious Script output (GHSA-rpwc-qfxm-7h2v) or malicious NNTP responses (GHSA-c5x2-896f-g5g8).
• Correct articles_success to articles_failed in Server statistics API-call.
• Stalled Unrar could freeze the post-processing queue.
• File handles could remain open after download completed.
• Downloads with missing articles and no PAR2 would not be marked as failed.
• macOS: Tray icon would not show on macOS 27.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

This is the first test release of version 5.2.0. We are still working on several other features, but hope you will already enjoy the current improvements and give us feedback!

New features in 5.2.0

• Downloaded data will be written directly to disk (if your hardware supports it), which greatly reduces memory and CPU usage on systems with SSD's. Additionally, several other performance improvements were made.
• Search your Indexers and Add downloads directly from within SABnzbd.
• Changed the internal webserver from CherryPy to Starlette.
• Overview of Active Sessions is available when username and password are enabled.
• Only allow proxied requests from hosts configured in xff_trusted_hosts.

Bug fixes in 5.2.0

• Jobs with Repair priority would not always be at the top of the queue.
• Failure to read one RSS URL would stop the whole readout instead of continuing to the next.
• Prevent potential XSS in the History from malicious Script output (GHSA-rpwc-qfxm-7h2v) or malicious NNTP responses (GHSA-c5x2-896f-g5g8).
• Correct articles_success to articles_failed in Server statistics API-call.
• macOS: Tray icon would not show on macOS 26.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

Security fixes

SABnzbd 5.1.1, 5.1.2 and 5.1.3 resolve a number of security vulnerabilities.

Over the past releases, several security researchers have put a lot of time and effort examining SABnzbd, responsibly reporting their findings, and helping us verify the fixes. We are grateful for their hard work, it has made SABnzbd meaningfully safer for everyone.

For most users the risk is limited: you are only affected if your setup is exposed to untrusted parties. The web interface issues only apply if it can be reached by someone you do not trust. By default, SABnzbd is only accessible from your own device and External internet access is set to No access. If either of those is still at its default, or if you use a proxy service for authentication, you are not affected. The download-processing issues only apply if SABnzbd handles NZBs from a source you do not fully trust, such as a public indexer. If none of that describes your setup, you were never at risk.

The safest action is simply to update to 5.1.3. Full details, affected versions, actions and mitigations for each vulnerability are described at: https://sabnzbd.org/5-1-vulnerabilities

Vulnerabilities resolved:

• GHSA-q326-jpxx-jmjc: __wrapped__ dispatch bypass allows unauthenticated API access, fixed in 5.1.3.
• GHSA-mjwj-v5mr-cmcg: PAR2 symlink bypass allows pickle remote code execution, fixed in 5.1.3.
• GHSA-rgqj-28c2-gxwp: Critical remote code execution via authentication bypass on configuration endpoints, fixed in 5.1.2.
• GHSA-75g3-96fr-7p2r: High-severity path traversal during post-processing via crafted PAR2/SFV files, fixed in 5.1.2.
• GHSA-xrfq-jhgh-wqch: Critical authentication bypass allowing a valid session without credentials, fixed in 5.1.1.

If you rely on the SABnzbd username and password to keep out untrusted parties, and your setup was exposed, it is recommended that you rotate your SABnzbd username/password and API-key, Usenet server passwords, indexer API-keys used in RSS-feeds, and notification service credentials after updating. See the page above for the full guidance.

Other changes and bug fixes in 5.1.3

• Tighten Compact display mode.
• Directly show usenet server errors instead of parsing them.
• Prevent database is locked error when re-evaluating stored RSS jobs.
• Added tooltip to explain search filters in Queue and History.
• Windows and macOS: Updated 7zip to 26.03.

Other bug fixes in 5.1.2

• RSS filters were not applied directly.

Other bug fixes in 5.1.1

• Styling cache issues could occur after updating.
• RSS items were removed too eagerly from RSS-history after download.
• The RSS-feed Clear Downloaded button did not do anything.

Changelog 5.1.0

This release brings a fundamental improvement to "Retry": instead of re-downloading any files with missing data, only the articles that were actually missing are fetched again. RSS got an overhaul under the hood, the interface is refreshed, and we added quite a long list of long-requested features and bugfixes.

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS items are now stored in the database instead of on disk.
• New RSS Age rule to filter jobs based on their age.
• Downloaded RSS items are cleared from the RSS database after 3 days.
• Added support for filename and path pattern matching to the Cleanup List.
• Unwanted extensions will also be removed after unpacking.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• Added SAB_FILES environment variable to Post-processing scripts, listing all files that resulted from the job.
• New Servers will default to 16 connections instead of 8.
• Use media duration as part of Ignore Samples detection.
• Added option to (auto) sort the queue by Remaining Percentage.
• Improved support for screen readers.
• Parsing of header-encrypted RARs will use significantly fewer resources.
• Add Ayatana AppIndicator tray support on GNOME.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.
• Windows and macOS: Updated Python to 3.14.6, Unrar to 7.23 and 7zip to 26.02.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Prevent path traversal in orphaned job APIs.
• Disk Full errors from unrar were not handled gracefully during unpacking.
• Memory leak could occur during article decoding.
• In containers (like Docker), the Article Cache could exceed the memory limit.
• Diskspace checks would be too strict when unpacking to different disk.
• Prevent deadlock when a second signal arrives during shutdown procedure.
• Verification using SFV-checks could fail, even though files were correct.
• Don't log Warning during clean shutdowns.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.
• macOS: Included par2cmdline-turbo will now use all available CPU-features.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

Security fixes

SABnzbd 5.1.1, 5.1.2 and 5.1.3 resolve a number of security vulnerabilities.

Over the past releases, several security researchers have put a lot of time and effort examining SABnzbd, responsibly reporting their findings, and helping us verify the fixes. We are grateful for their hard work, it has made SABnzbd meaningfully safer for everyone.

For most users the risk is limited: you are only affected if your setup is exposed to untrusted parties. The web interface issues only apply if it can be reached by someone you do not trust. By default, SABnzbd is only accessible from your own device and External internet access is set to No access. If either of those is still at its default, or if you use a proxy service for authentication, you are not affected. The download-processing issues only apply if SABnzbd handles NZBs from a source you do not fully trust, such as a public indexer. If none of that describes your setup, you were never at risk.

The safest action is simply to update to 5.1.3. Full details, affected versions, actions and mitigations for each vulnerability are described at: https://sabnzbd.org/5-1-vulnerabilities

Vulnerabilities resolved:

• GHSA-q326-jpxx-jmjc: __wrapped__ dispatch bypass allows unauthenticated API access, fixed in 5.1.3.
• GHSA-mjwj-v5mr-cmcg: PAR2 symlink bypass allows pickle remote code execution, fixed in 5.1.3.
• GHSA-rgqj-28c2-gxwp: Critical remote code execution via authentication bypass on configuration endpoints, fixed in 5.1.2.
• GHSA-75g3-96fr-7p2r: High-severity path traversal during post-processing via crafted PAR2/SFV files, fixed in 5.1.2.
• GHSA-xrfq-jhgh-wqch: Critical authentication bypass allowing a valid session without credentials, fixed in 5.1.1.

If you rely on the SABnzbd username and password to keep out untrusted parties, and your setup was exposed, it is recommended that you rotate your SABnzbd username/password and API-key, Usenet server passwords, indexer API-keys used in RSS-feeds, and notification service credentials after updating. See the page above for the full guidance.

Other changes and bug fixes in 5.1.3

• Tighten Compact display mode.
• Directly show usenet server errors instead of parsing them.
• Prevent database is locked error when re-evaluating stored RSS jobs.
• Added tooltip to explain search filters in Queue and History.
• Windows and macOS: Updated 7zip to 26.03.

Other bug fixes in 5.1.2

• RSS filters were not applied directly.

Other bug fixes in 5.1.1

• Styling cache issues could occur after updating.
• RSS items were removed too eagerly from RSS-history after download.
• The RSS-feed Clear Downloaded button did not do anything.

Changelog 5.1.0

This release brings a fundamental improvement to "Retry": instead of re-downloading any files with missing data, only the articles that were actually missing are fetched again. RSS got an overhaul under the hood, the interface is refreshed, and we added quite a long list of long-requested features and bugfixes.

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS items are now stored in the database instead of on disk.
• New RSS Age rule to filter jobs based on their age.
• Downloaded RSS items are cleared from the RSS database after 3 days.
• Added support for filename and path pattern matching to the Cleanup List.
• Unwanted extensions will also be removed after unpacking.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• Added SAB_FILES environment variable to Post-processing scripts, listing all files that resulted from the job.
• New Servers will default to 16 connections instead of 8.
• Use media duration as part of Ignore Samples detection.
• Added option to (auto) sort the queue by Remaining Percentage.
• Improved support for screen readers.
• Parsing of header-encrypted RARs will use significantly fewer resources.
• Add Ayatana AppIndicator tray support on GNOME.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.
• Windows and macOS: Updated Python to 3.14.6, Unrar to 7.23 and 7zip to 26.02.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Prevent path traversal in orphaned job APIs.
• Disk Full errors from unrar were not handled gracefully during unpacking.
• Memory leak could occur during article decoding.
• In containers (like Docker), the Article Cache could exceed the memory limit.
• Diskspace checks would be too strict when unpacking to different disk.
• Prevent deadlock when a second signal arrives during shutdown procedure.
• Verification using SFV-checks could fail, even though files were correct.
• Don't log Warning during clean shutdowns.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.
• macOS: Included par2cmdline-turbo will now use all available CPU-features.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

SABnzbd 5.1.1 and 5.1.2 resolved 3 serious vulnerabilities.

Critical remote code execution vulnerability resolved in 5.1.2 (GHSA-rgqj-28c2-gxwp)

You are only affected if an untrusted party can reach the web interface. By default, SABnzbd is only accessible from your own device and External internet access is set to No access. If either of those is still at its default, or if you use a proxy service for authentication, you are not affected.

In version 5.1.1 and earlier, an attacker who can reach the web interface could bypass authentication on configuration endpoints, even when SABnzbd is protected with a username and password. By changing SABnzbd's settings this way, an attacker could ultimately execute arbitrary commands on the system running SABnzbd, with the same permissions as SABnzbd itself. This also means that all information in SABnzbd would be exposed.

See GHSA-xrfq-jhgh-wqch below for actions and mitigations. More information: https://sabnzbd.org/5-1-vulnerabilities

High-severity path traversal vulnerability resolved in 5.1.2 (GHSA-75g3-96fr-7p2r)

You are affected if SABnzbd processes NZBs or downloads from a source you do not fully trust, such as a public indexer.

In version 5.1.1 and earlier, a maliciously crafted PAR2 or SFV file inside a download could cause SABnzbd to move downloaded content outside of the job's own folder during post-processing. By using this to plant a file in another job's internal administration, an attacker could ultimately execute arbitrary commands on the system running SABnzbd, with the same permissions as SABnzbd itself.

The only mitigation is to update, there is no configuration change that prevents this. More information: https://sabnzbd.org/5-1-vulnerabilities

Critical authentication vulnerability resolved in 5.1.1 (GHSA-xrfq-jhgh-wqch)

You are only affected if an untrusted party can reach the web interface. By default, SABnzbd is only accessible from your own device and External internet access is set to No access. If either of those is still at its default, or if you use a proxy service for authentication, you are not affected.

If the SABnzbd login page is reachable from outside your network, an attacker could obtain a valid session in version 5.1.0 and earlier, even when SABnzbd is protected with a username and password. This means that all information in SABnzbd would be exposed.

If you rely on the SABnzbd username and password to keep out other users on your network or the internet, it is recommended that you change the following sensitive information after applying the update:

• SABnzbd username and password.
• SABnzbd API-key.
• Usenet server passwords.
• API-keys from indexers used within RSS-feeds.
• Authentication information for notification services.

If you cannot update right away, the only mitigations are to ensure the web interface is not reachable by untrusted parties, or to lower External internet access to Full API or below.

More information: https://sabnzbd.org/5-1-vulnerabilities

Other bug fixes in 5.1.2

• RSS filters were not applied directly.

Other bug fixes in 5.1.1

• Styling cache issues could occur after updating.
• RSS items were removed too eagerly from RSS-history after download.
• The RSS-feed Clear Downloaded button did not do anything.

Changelog 5.1.0

This release brings a fundamental improvement to "Retry": instead of re-downloading any files with missing data, only the articles that were actually missing are fetched again. RSS got an overhaul under the hood, the interface is refreshed, and we added quite a long list of long-requested features and bugfixes.

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS items are now stored in the database instead of on disk.
• New RSS Age rule to filter jobs based on their age.
• Downloaded RSS items are cleared from the RSS database after 3 days.
• Added support for filename and path pattern matching to the Cleanup List.
• Unwanted extensions will also be removed after unpacking.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• Added SAB_FILES environment variable to Post-processing scripts, listing all files that resulted from the job.
• New Servers will default to 16 connections instead of 8.
• Use media duration as part of Ignore Samples detection.
• Added option to (auto) sort the queue by Remaining Percentage.
• Improved support for screen readers.
• Parsing of header-encrypted RARs will use significantly fewer resources.
• Add Ayatana AppIndicator tray support on GNOME.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.
• Windows and macOS: Updated Python to 3.14.6, Unrar to 7.23 and 7zip to 26.02.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Prevent path traversal in orphaned job APIs.
• Disk Full errors from unrar were not handled gracefully during unpacking.
• Memory leak could occur during article decoding.
• In containers (like Docker), the Article Cache could exceed the memory limit.
• Diskspace checks would be too strict when unpacking to different disk.
• Prevent deadlock when a second signal arrives during shutdown procedure.
• Verification using SFV-checks could fail, even though files were correct.
• Don't log Warning during clean shutdowns.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.
• macOS: Included par2cmdline-turbo will now use all available CPU-features.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

SABnzbd 5.1.1 and 5.1.2 resolved 3 serious vulnerabilities.

Critical remote code execution vulnerability resolved in 5.1.2 (GHSA-rgqj-28c2-gxwp)

You are only affected if an untrusted party can reach the web interface. By default, SABnzbd is only accessible from your own device and External internet access is set to No access. If either of those is still at its default, or if you use a proxy service for authentication, you are not affected.

In version 5.1.1 and earlier, an attacker who can reach the web interface could bypass authentication on configuration endpoints, even when SABnzbd is protected with a username and password. By changing SABnzbd's settings this way, an attacker could ultimately execute arbitrary commands on the system running SABnzbd, with the same permissions as SABnzbd itself. This also means that all information in SABnzbd would be exposed.

See GHSA-xrfq-jhgh-wqch below for actions and mitigations. More information: https://sabnzbd.org/5-1-vulnerabilities

High-severity path traversal vulnerability resolved in 5.1.2 (GHSA-75g3-96fr-7p2r)

You are affected if SABnzbd processes NZBs or downloads from a source you do not fully trust, such as a public indexer.

In version 5.1.1 and earlier, a maliciously crafted PAR2 or SFV file inside a download could cause SABnzbd to move downloaded content outside of the job's own folder during post-processing. By using this to plant a file in another job's internal administration, an attacker could ultimately execute arbitrary commands on the system running SABnzbd, with the same permissions as SABnzbd itself.

The only mitigation is to update, there is no configuration change that prevents this. More information: https://sabnzbd.org/5-1-vulnerabilities

Critical authentication vulnerability resolved in 5.1.1 (GHSA-xrfq-jhgh-wqch)

You are only affected if an untrusted party can reach the web interface. By default, SABnzbd is only accessible from your own device and External internet access is set to No access. If either of those is still at its default, or if you use a proxy service for authentication, you are not affected.

If the SABnzbd login page is reachable from outside your network, an attacker could obtain a valid session in version 5.1.0 and earlier, even when SABnzbd is protected with a username and password. This means that all information in SABnzbd would be exposed.

If you rely on the SABnzbd username and password to keep out other users on your network or the internet, it is recommended that you change the following sensitive information after applying the update:

• SABnzbd username and password.
• SABnzbd API-key.
• Usenet server passwords.
• API-keys from indexers used within RSS-feeds.
• Authentication information for notification services.

If you cannot update right away, the only mitigations are to ensure the web interface is not reachable by untrusted parties, or to lower External internet access to Full API or below.

More information: https://sabnzbd.org/5-1-vulnerabilities

Other bug fixes in 5.1.2

• RSS filters were not applied directly.

Other bug fixes in 5.1.1

• Styling cache issues could occur after updating.
• RSS items were removed too eagerly from RSS-history after download.
• The RSS-feed Clear Downloaded button did not do anything.

Changelog 5.1.0

This release brings a fundamental improvement to "Retry": instead of re-downloading any files with missing data, only the articles that were actually missing are fetched again. RSS got an overhaul under the hood, the interface is refreshed, and we added quite a long list of long-requested features and bugfixes.

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS items are now stored in the database instead of on disk.
• New RSS Age rule to filter jobs based on their age.
• Downloaded RSS items are cleared from the RSS database after 3 days.
• Added support for filename and path pattern matching to the Cleanup List.
• Unwanted extensions will also be removed after unpacking.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• Added SAB_FILES environment variable to Post-processing scripts, listing all files that resulted from the job.
• New Servers will default to 16 connections instead of 8.
• Use media duration as part of Ignore Samples detection.
• Added option to (auto) sort the queue by Remaining Percentage.
• Improved support for screen readers.
• Parsing of header-encrypted RARs will use significantly fewer resources.
• Add Ayatana AppIndicator tray support on GNOME.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.
• Windows and macOS: Updated Python to 3.14.6, Unrar to 7.23 and 7zip to 26.02.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Prevent path traversal in orphaned job APIs.
• Disk Full errors from unrar were not handled gracefully during unpacking.
• Memory leak could occur during article decoding.
• In containers (like Docker), the Article Cache could exceed the memory limit.
• Diskspace checks would be too strict when unpacking to different disk.
• Prevent deadlock when a second signal arrives during shutdown procedure.
• Verification using SFV-checks could fail, even though files were correct.
• Don't log Warning during clean shutdowns.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.
• macOS: Included par2cmdline-turbo will now use all available CPU-features.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

Critical authentication vulnerability resolved in 5.1.1 (GHSA-xrfq-jhgh-wqch)

You are only affected if an untrusted party can reach the web interface. By default, SABnzbd is only accessible from your own device and External internet access is set to No access. If either of those is still at its default, or if you use a proxy service for authentication, you are not affected.

If the SABnzbd login page is reachable from outside your network, an attacker could obtain a valid session in version 5.1.0 and earlier, even when SABnzbd is protected with a username and password. This means that all information in SABnzbd would be exposed.

If you rely on the SABnzbd username and password to keep out other users on your network or the internet, it is recommended that you change the following sensitive information after applying the update:

• SABnzbd username and password.
• SABnzbd API-key.
• Usenet server passwords.
• API-keys from indexers used within RSS-feeds.
• Authentication information for notification services.

If you cannot update right away, the only mitigations are to ensure the web interface is not reachable by untrusted parties, or to lower External internet access to Full API or below.

More information: https://sabnzbd.org/auth-bypass

Other bug fixes in 5.1.1

• Styling cache issues could occur after updating.
• RSS items were removed too eagerly from RSS-history after download.
• The RSS-feed Clear Downloaded button did not do anything.

Changelog 5.1.0

This release brings a fundamental improvement to "Retry": instead of re-downloading any files with missing data, only the articles that were actually missing are fetched again. RSS got an overhaul under the hood, the interface is refreshed, and we added quite a long list of long-requested features and bugfixes.

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS items are now stored in the database instead of on disk.
• New RSS Age rule to filter jobs based on their age.
• Downloaded RSS items are cleared from the RSS database after 3 days.
• Added support for filename and path pattern matching to the Cleanup List.
• Unwanted extensions will also be removed after unpacking.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• Added SAB_FILES environment variable to Post-processing scripts, listing all files that resulted from the job.
• New Servers will default to 16 connections instead of 8.
• Use media duration as part of Ignore Samples detection.
• Added option to (auto) sort the queue by Remaining Percentage.
• Improved support for screen readers.
• Parsing of header-encrypted RARs will use significantly fewer resources.
• Add Ayatana AppIndicator tray support on GNOME.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.
• Windows and macOS: Updated Python to 3.14.6, Unrar to 7.23 and 7zip to 26.02.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Prevent path traversal in orphaned job APIs.
• Disk Full errors from unrar were not handled gracefully during unpacking.
• Memory leak could occur during article decoding.
• In containers (like Docker), the Article Cache could exceed the memory limit.
• Diskspace checks would be too strict when unpacking to different disk.
• Prevent deadlock when a second signal arrives during shutdown procedure.
• Verification using SFV-checks could fail, even though files were correct.
• Don't log Warning during clean shutdowns.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.
• macOS: Included par2cmdline-turbo will now use all available CPU-features.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

Critical authentication vulnerability resolved in 5.1.1 (GHSA-xrfq-jhgh-wqch)

You are only affected if an untrusted party can reach the web interface. By default, SABnzbd is only accessible from your own device and External internet access is set to No access. If either of those is still at its default, or if you use a proxy service for authentication, you are not affected.

If the SABnzbd login page is reachable from outside your network, an attacker could obtain a valid session in version 5.1.0 and earlier, even when SABnzbd is protected with a username and password. This means that all information in SABnzbd would be exposed.

If you rely on the SABnzbd username and password to keep out other users on your network or the internet, it is recommended that you change the following sensitive information after applying the update:

• SABnzbd username and password.
• SABnzbd API-key.
• Usenet server passwords.
• API-keys from indexers used within RSS-feeds.
• Authentication information for notification services.

If you cannot update right away, the only mitigations are to ensure the web interface is not reachable by untrusted parties, or to lower External internet access to Full API or below.

More information: https://sabnzbd.org/auth-bypass

Other bug fixes in 5.1.1

• Styling cache issues could occur after updating.
• RSS items were removed too eagerly from RSS-history after download.
• The RSS-feed Clear Downloaded button did not do anything.

Changelog 5.1.0

This release brings a fundamental improvement to "Retry": instead of re-downloading any files with missing data, only the articles that were actually missing are fetched again. RSS got an overhaul under the hood, the interface is refreshed, and we added quite a long list of long-requested features and bugfixes.

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS items are now stored in the database instead of on disk.
• New RSS Age rule to filter jobs based on their age.
• Downloaded RSS items are cleared from the RSS database after 3 days.
• Added support for filename and path pattern matching to the Cleanup List.
• Unwanted extensions will also be removed after unpacking.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• Added SAB_FILES environment variable to Post-processing scripts, listing all files that resulted from the job.
• New Servers will default to 16 connections instead of 8.
• Use media duration as part of Ignore Samples detection.
• Added option to (auto) sort the queue by Remaining Percentage.
• Improved support for screen readers.
• Parsing of header-encrypted RARs will use significantly fewer resources.
• Add Ayatana AppIndicator tray support on GNOME.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.
• Windows and macOS: Updated Python to 3.14.6, Unrar to 7.23 and 7zip to 26.02.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Prevent path traversal in orphaned job APIs.
• Disk Full errors from unrar were not handled gracefully during unpacking.
• Memory leak could occur during article decoding.
• In containers (like Docker), the Article Cache could exceed the memory limit.
• Diskspace checks would be too strict when unpacking to different disk.
• Prevent deadlock when a second signal arrives during shutdown procedure.
• Verification using SFV-checks could fail, even though files were correct.
• Don't log Warning during clean shutdowns.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.
• macOS: Included par2cmdline-turbo will now use all available CPU-features.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

This release brings a fundamental improvement to "Retry": instead of re-downloading any files with missing data, only the articles that were actually missing are fetched again. RSS got an overhaul under the hood, the interface is refreshed, and we added quite a long list of of long-requested features and bugfixes.

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS items are now stored in the database instead of on disk.
• New RSS Age rule to filter jobs based on their age.
• Downloaded RSS items are cleared from the RSS database after 3 days.
• Added support for filename and path pattern matching to the Cleanup List.
• Unwanted extensions will also be removed after unpacking.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• Added SAB_FILES environment variable to Post-processing scripts, listing all files that resulted from the job.
• New Servers will default to 16 connections instead of 8.
• Use media duration as part of Ignore Samples detection.
• Added option to (auto) sort the queue by Remaining Percentage.
• Improved support for screen readers.
• Parsing of header-encrypted RARs will use significantly fewer resources.
• Add Ayatana AppIndicator tray support on GNOME.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.
• Windows and macOS: Updated Python to 3.14.6, Unrar to 7.23 and 7zip to 26.02.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Prevent path traversal in orphaned job APIs.
• Disk Full errors from unrar were not handled gracefully during unpacking.
• Memory leak could occur during article decoding.
• In containers (like Docker), the Article Cache could exceed the memory limit.
• Diskspace checks would be too strict when unpacking to different disk.
• Prevent deadlock when a second signal arrives during shutdown procedure.
• Verification using SFV-checks could fail, even though files were correct.
• Don't log Warning during clean shutdowns.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.
• macOS: Included par2cmdline-turbo will now use all available CPU-features.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

This release brings a fundamental improvement to "Retry": instead of re-downloading any files with missing data, only the articles that were actually missing are fetched again. RSS got an overhaul under the hood, the interface is refreshed, and we added quite a long list of of long-requested features and bugfixes.

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS items are now stored in the database instead of on disk.
• New RSS Age rule to filter jobs based on their age.
• Downloaded RSS items are cleared from the RSS database after 3 days.
• Added support for filename and path pattern matching to the Cleanup List.
• Unwanted extensions will also be removed after unpacking.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• Added SAB_FILES environment variable to Post-processing scripts, listing all files that resulted from the job.
• New Servers will default to 16 connections instead of 8.
• Use media duration as part of Ignore Samples detection.
• Added option to (auto) sort the queue by Remaining Percentage.
• Improved support for screen readers.
• Parsing of header-encrypted RARs will use significantly fewer resources.
• Add Ayatana AppIndicator tray support on GNOME.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.
• Windows and macOS: Updated Python to 3.14.6, Unrar to 7.23 and 7zip to 26.02.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Prevent path traversal in orphaned job APIs.
• Disk Full errors from unrar were not handled gracefully during unpacking.
• Memory leak could occur during article decoding.
• In containers (like Docker), the Article Cache could exceed the memory limit.
• Diskspace checks would be too strict when unpacking to different disk.
• Prevent deadlock when a second signal arrives during shutdown procedure.
• Verification using SFV-checks could fail, even though files were correct.
• Don't log Warning during clean shutdowns.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.
• macOS: Included par2cmdline-turbo will now use all available CPU-features.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

This is the second release candidate of version 5.1.

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS items are now stored in the database instead of on disk.
• New RSS Age rule to filter jobs based on their age.
• Downloaded RSS items are cleared from the RSS database after 3 days.
• Added support for filename and path pattern matching to the Cleanup List.
• Unwanted extensions will also be removed after unpacking.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• Added SAB_FILES environment variable to Post-processing scripts, listing all files that resulted from the job.
• New Servers will default to 16 connections instead of 8.
• Use media duration as part of Ignore Samples detection.
• Added option to (auto) sort the queue by Remaining Percentage.
• Improved support for screen readers.
• Parsing of header-encrypted RARs will use significantly fewer resources.
• Add Ayatana AppIndicator tray support on GNOME.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.
• Windows and macOS: Updated Python to 3.14.6, Unrar to 7.23 and 7zip to 26.02.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Prevent path traversal in orphaned job APIs.
• Disk Full errors from unrar were not handled gracefully during unpacking.
• Memory leak could occur during article decoding.
• In containers (like Docker), the Article Cache could exceed the memory limit.
• Diskspace checks would be too strict when unpacking to different disk.
• Prevent deadlock when a second signal arrives during shutdown procedure.
• Verification using SFV-checks could fail, even though files were correct.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

This is the first release candidate of version 5.1. Like many other projects out there, we were able to use the shiny new AI tools to add quite a lot of long-requested features!

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS items are now stored in the database instead of on disk.
• New RSS Age rule to filter jobs based on their age.
• Downloaded RSS items are cleared from the RSS database after 3 days.
• Added support for filename and path pattern matching to the Cleanup List.
• Unwanted extensions will also be removed after unpacking.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• Added SAB_FILES environment variable to Post-processing scripts, listing all files that resulted from the job.
• New Servers will default to 16 connections instead of 8.
• Use media duration as part of Ignore Samples detection.
• Improved support for screen readers.
• Parsing of header-encrypted RARs will use significantly fewer resources.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.
• Windows and macOS: Updated Python to 3.14.6, Unrar to 7.23 and 7zip to 26.02.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Prevent path traversal in orphaned job APIs.
• Disk Full errors from unrar were not handled gracefully during unpacking.
• Memory leak could occur during article decoding.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

This is the third beta release of version 5.1. We will probably add (a few) new features in upcoming testing releases, but we already wanted to share the current improvements with you!

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS-items are now stored in the database instead of on disk.
• Downloaded RSS-items are cleared from RSS-database after 3 days.
• Add support for filename and path pattern matching to the Cleanup List.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• New Servers will default to 16 connections instead of 8.
• Use media duration as part of Ignore Samples detection.
• Parsing of header-encrypted RAR's will use significantly less resources.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.
• Windows and macOS: Updated Python to 3.14.6, Unrar to 7.23 and 7zip to 26.02.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Prevent path traversal in orphaned job API's.
• Disk Full errors from unrar were not handled gracefully during unpacking.
• Memory leak could occur during article decoding.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.
• Downgrading from version 4.2.0 or newer to 3.7.2 or older will require performing a Queue repair due to changes in the internal data format.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

This is the second beta release of version 5.1. We will probably add (a few) new features in upcoming testing releases, but we already wanted to share the current improvements with you!

New features in 5.1.0

• Refreshed the interface.
• When Retrying a job, only the actually missing articles are tried again. This only works for jobs downloaded in 5.1.0 (or newer).
• RSS-items are now stored in the database instead of on disk.
• Downloaded RSS-items are cleared from RSS-database after 3 days.
• Add support for filename and path pattern matching to the Cleanup List.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• New Servers will default to 16 connections instead of 8.
• Parsing of header-encrypted RAR's will use significantly less resources.
• Removed redundant INSTALL.txt file.
• Dropped support for Python 3.9.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Files unrelated to job could get removed by the Cleanup List logic.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.
• Downgrading from version 4.2.0 or newer to 3.7.2 or older will require performing a Queue repair due to changes in the internal data format.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

This is the first beta release of version 5.1. We will probably add new features in upcoming testing releases, but we already wanted to share the current improvements with you!

New features in 5.1.0

• Refreshed the interface.
• RSS-items are now stored in the database instead of on disk.
• Downloaded RSS-items are cleared from RSS-database after 3 days.
• Add support for filename and path pattern matching to the Cleanup List.
• Allow job setting changes directly from Extra queue columns.
• Added support for unpacking .tar files during post-processing.
• Improved anonymization of the logs when using Show Logging.
• Dropped support for Python 3.9.

Bug fixes in 5.1.0

• Prevent incorrect warnings about non-writeable directories.
• Windows: Uninstall would not remove Settings or Windows Service.
• Windows: Warn for OS-limit if more than 1024 connections are configured.
• macOS: AppleDouble files could result in failures in Moving stage.
• macOS: Restarting the application resulted in Terminal window.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.
• Downgrading from version 4.2.0 or newer to 3.7.2 or older will require performing a Queue repair due to changes in the internal data format.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)

https://sabnzbd.org/downloads

In this fifth major release of SABnzbd, we included:

• Smarter (and potentially faster) downloads with NNTP Pipelining and Direct Write.
• Reliability gains from a reworked cache and safer processing.
• A significant number of bug fixes and platform updates.

Features and bug fixes in 5.0.4

• RSS feed modifications no longe require clicking Apply Filters.
• Fixed RSS priority handling.
• Server Test could block the queue.
• Use reduced progress bar width in Compact layout.
• Replaced unreliable directory access check.
• Prevent crash in idle-jobs check.
• Jobs with invalid date would show as Fetching.
• Windows and macOS: Updated Python to 3.14.5 and Unrar to 7.22.

Features and bug fixes in 5.0.1, 5.0.2 and 5.0.3

• Fetching NZB's failed on new installations.
• Queue entries from older versions now load correctly after upgrading.
• nzo_id now uses GUIDs to prevent duplicates.
• Updating to 5.0 now succeeds even when duplicate nzo_id values exist.
• URL fetching no longer crashes when duplicate jobs are present.
• Default RSS priority is now applied correctly.
• Duplicate filenames no longer cause queue stalls.
• IPv6 binding now works correctly for the Web interface.
• The On queue finish action now executes reliably.
• Saving the post-processing queue no longer throws errors.
• Directory creation now handles existing directories gracefully.
• Windows and macOS: Updated Unrar to 7.21 and 7zip to 26.01.

New features in 5.0.0

• Added support for NNTP Pipelining which eliminates idle waiting between requests, significantly improving speeds on high-latency connections. Read more here: https://sabnzbd.org/wiki/advanced/nntp-pipelining New servers will have Articles per request set to 2 by default. Existing servers need to be manually changed to use NNTP Pipelining.
• Implemented Direct Write to optimize assembly of downloaded files. Read more here: https://sabnzbd.org/wiki/advanced/direct-write
• Post-processing scripts will always be executed, even for failed jobs. Make sure to check the status of the job in your scripts!
• Removed Special setting empty_postproc as it is no longer needed.
• Complete redesign of article cache.
• Improved disk speed measurement in Status window.
• Reduced delays between jobs during post-processing.
• Improved handling of disks getting full.
• Diskspace check will now include Category-specific folders.
• If a download only contains .nzb files, the new downloads will include the name of the original download.
• No longer show tracebacks in the browser, only in the logs.
• Dropped support for Python 3.8.
• Windows: Added Windows ARM (portable) release.
• Windows and macOS: Added HTML version of the Release Notes.
• Windows and macOS: Updated Python to 3.14.4, Unrar to 7.20, par2cmdline-turbo to 1.4 and 7zip to 26.00.

Bug fixes in 5.0.0

• Check before download could get stuck or fail to reject.
• Several stability changes for the core download process.
• If only par2 files were missing, jobs could get incorrectly aborted.
• No error was shown in case NZB upload failed.
• Correct mobile layout if Full Width is enabled.
• Handle passwords that exceed Unrar's password limit.
• Aborted Direct Unpack could result in no files being unpacked.
• Encrypted RAR detection could sometimes fail.
• Unwanted extension check was unreliable on passworded downloads.
• No longer exclusively lock all directory operations.
• Improved handling of non-NFC unicode filenames.
• Sorting of files inside jobs was inconsistent.
• Linux: No longer break test-data in the release package.
• Windows: Tray icon disappears after Explorer restart.
• macOS: Slow to start on some network setups.

Changes to default settings for new installations in 5.0.0

• Default Minimum Free Space for Temporary Download Folder set to 500M.
• Enabled verify_xff_header setting by default.

Upgrade notices

• You can directly upgrade from version 3.0.0 and newer.
• Upgrading from older versions will require performing a Queue repair.
• Downgrading from version 4.2.0 or newer to 3.7.2 or older will require performing a Queue repair due to changes in the internal data format.

Known problems and solutions

• Read ISSUES.txt or https://sabnzbd.org/wiki/introduction/known-issues

Code Signing Policy

Windows code signing is provided by SignPath.io using a SignPath Foundation certificate.

About

SABnzbd is an open-source cross-platform binary newsreader. It simplifies the process of downloading from Usenet dramatically, thanks to its web-based user interface and advanced built-in post-processing options that automatically verify, repair, extract and clean up posts downloaded from Usenet.

(c) Copyright 2007-2026 by The SABnzbd-Team (sabnzbd.org)