github owncloud/ocis v8.2.3

3 hours ago

Table of Contents

  • Changelog for 8.2.3

Changes in 8.2.3

Summary

  • Security - Bump vulnerable dependencies: #13300
  • Bugfix - Fix the data race on the web theme defaults: #13251
  • Change - Deprecate the owncloudsql environment variables: #13193
  • Change - Deprecate the posixfs environment variables: #13302

Details

  • Security - Bump vulnerable dependencies: #13300

    Bumped golang.org/x/net to v0.62.0, github.com/go-jose/go-jose/v4 to v4.1.6
    and github.com/klauspost/compress to v1.20.2. The last one fixes GO-2026-6865,
    a panic on two-block frames.

    #13300
    #13365

  • Bugfix - Fix the data race on the web theme defaults: #13251

    The web service kept the theme defaults in a package-level map and merged the
    base and branding themes into that shared map on every GET /themes/* request.
    Concurrent requests therefore read and wrote the same map at the same time,
    which is a data race: it could corrupt the rendered theme, leak values between
    themes, or crash the service with a concurrent map read and map write.

    The theme defaults are now built fresh for each request, so no state is shared
    between concurrent requests.

    #13251

  • Change - Deprecate the owncloudsql environment variables: #13193

    We deprecated all environment variables of the owncloudsql driver in the
    services storage-users, auth-basic, users, groups, and sharing. The
    variables have the name part OWNCLOUDSQL. oCIS 9.0.0 removes the variables
    together with the owncloudsql driver.

    #13193

  • Change - Deprecate the posixfs environment variables: #13302

    We deprecated all environment variables of the posixfs driver in the
    storage-users service. The variables have the name part POSIX. oCIS 9.0.0
    removes the variables together with the posixfs driver.

    #13302

Don't miss a new ocis release

NewReleases is sending notifications on new releases.