Table of Contents
- Changelog for 8.2.3
Changes in 8.2.3
Summary
- Security - Bump vulnerable dependencies: #13300
- Bugfix - Fix the data race on the web theme defaults: #13251
- Change - Deprecate the owncloudsql environment variables: #13193
- Change - Deprecate the posixfs environment variables: #13302
Details
-
Security - Bump vulnerable dependencies: #13300
Bumped
golang.org/x/netto v0.62.0,github.com/go-jose/go-jose/v4to v4.1.6
andgithub.com/klauspost/compressto v1.20.2. The last one fixes GO-2026-6865,
a panic on two-block frames. -
Bugfix - Fix the data race on the web theme defaults: #13251
The
webservice kept the theme defaults in a package-level map and merged the
base and branding themes into that shared map on everyGET /themes/*request.
Concurrent requests therefore read and wrote the same map at the same time,
which is a data race: it could corrupt the rendered theme, leak values between
themes, or crash the service with a concurrent map read and map write.The theme defaults are now built fresh for each request, so no state is shared
between concurrent requests. -
Change - Deprecate the owncloudsql environment variables: #13193
We deprecated all environment variables of the
owncloudsqldriver in the
servicesstorage-users,auth-basic,users,groups, andsharing. The
variables have the name partOWNCLOUDSQL. oCIS 9.0.0 removes the variables
together with theowncloudsqldriver. -
Change - Deprecate the posixfs environment variables: #13302
We deprecated all environment variables of the
posixfsdriver in the
storage-usersservice. The variables have the name partPOSIX. oCIS 9.0.0
removes the variables together with theposixfsdriver.