ownCloud Server 10.16.3 Released

We are happy to announce the release of ownCloud server 10.16.3.

Please note that this release contains Security and Bug fixes. We recommend that you update to this version as soon as possible.

Changelog

  • Security: Update phpseclib to 3.0.52 for CVE-2026-40194
  • Security: Restrict AppConfigController read methods to full admins only
  • Security: Update symfony/routing to 5.4.52 for CVE-2026-45065
  • Bugfix: Prevent mounting local storage if not allowed
  • Bugfix: Use the correct user ID when changing email via admin API
  • Bugfix: Prevent IDOR in WebDAV comments API

More detailed information about this release is available in the Changelog on GitHub.

Download

Tarball and ZIP archives are available at:

Verification files (.md5, .sha256, .asc) are available alongside the archives:

A complete bundle (including all apps) is also available:

Docker Images

The official Docker image is available on Docker Hub:

docker pull owncloud/server:10.16.3

The following convenience tags have been restored and now point to 10.16.3:

docker pull owncloud/server:10
docker pull owncloud/server:10.16
docker pull owncloud/server:latest

Links

2 Likes