Today we announce the immediate release of ownCloud Server 10.13.3.
Download is available here: Download Server Packages - ownCloud
Beside a fix related to the previews cleanup job in combination with PostgreSQL database, we have reverted #41014 as it turned out to cause performance problems. Additionally, we have introduced a security fix to ensure that users can only delete their own external storage configurations.
One of the filters of the preview cleanup job requires casting a filename, which is supposed to contain only digits, to an integer. The expected execution of the DB query should filter the results so the condition above should be true, but the DB’s query planner might choose to apply the filters in a different way, so we could potentially cast random strings to integer. In the case of PostgreSQL, the cast function will cause an error if the string can’t be cast to an integer (because it has non-digit chars, for example). This situation is fixed for all the supported DBs, so we don’t require the query planner to execute the query in any particular way. #41051
Ensure that users can only delete their own external storage configurations. #41092
Comments describing the configuration variables related to the Kerberos and Windows Network Drive app are now updated and in sync with published online documentation. #41109
Find below a list of updated apps in comparison with the 10.13.2 complete bundle. More information on the changes can be found in the respective changelogs on ownCloud Marketplace.
- Custom Groups: 0.8.0
- Kerberos Integration: 1.0.1
- S3 Primary Object Storage: 1.6.0
- Text Editor: 2.6.1
- Password Policy: 2.2.1
- External Storage: Windows Network Drives: 2.3.2
Since we reverted #41014, upon removing a mount point configuration from the web UI, the occ command
files:remove-storage is currently not able to properly find the candidates to delete in case shares have been created for files/folders located on those mountpoints.