Owncloud 9.12 Release Notes

• Facebook
• Twitter
• LinkedIn

We recommend you follow our Release Channels to always have the latest ownCloud Server version which fits your needs.

• ownCloud 9.1
• ownCloud 9.0
• ownCloud 8.2
• ownCloud 8.1
• ownCloud 8.0 (unsupported!)
• ownCloud 7 (unsupported!)
• ownCloud 6 (unsupported!)

Version 9.1.2 Nov 8 2016

• Core: Adjusted documentation link to issue template – core/#26087
• Core: Display feedback in users page when changing password – core/#25532
• Core: Fix mime type detection in hidden directories – core/#26133
• Core: Change forum URL to central – core/#25644
• Core: Fix share array format passed to “post_unshareFromSelf” hook – core/#26390
• Core: Release mount info memory after running background jobs – core/#26223
• Core: Improve users page performance by not sorting after every add – core/#26234
• Core: Escape special chars in some queries – core/#25429
• Core: Redirect to two factor challenge page when only a single provider exists – core/#26134
• Core: Fix bogus PasswordLoginForbidden DAV error when logging in as non-existing user – core/#26123
• Core: Change the minimum log level to FATAL – core/#26131
• Core: Fix issue with “(2)” appearing on shares when querying avatar with wrong casing – core/#26271
• Core: Enabling an app now also analyzes dependencies at this time instead of only at install – core/#26295
• Core: Reuse cached app info to avoid high load on some environments – core/#25603
• Core: Show warning instead of exception when trying to run ownCloud on Windows – core/#26208
• Core: Fix misleading SSL/TLS SMTP email configuration – core/#26447
• Core: Fix malformed attribute in files app page – core/#26480
• DAV: Improve chunk assembly performance for new DAV endpoint – core/#26062
• DAV: New chunking now returns Etag and OC-Etag on the final MOVE – core/#25682
• DAV: Do not print exception messages in HTML – core/#26460
• DAV: Sanitize length headers when validating quota – core/#26366
• Files: Allow uploading empty files in the web UI – core/#19116
• Files: Properly translate file summary in lists – core/#26221
• Files: Exclude more invalid chars in path – core/#26461
• Sharing: Let the share owner increase permissions – core/#25542
• Federation: Fix sharing with remote user names containing spaces – core/#25955
• Federation: Save some memory in sync job by releasing mount info after each user – core/#26204
• Federation: Fix federated address book syncing by using the correct background job name – core/#26202
• CalDAV: Add Schedule and IMip plugins when receiving webdav v1 api calendar calls – core/#23600
• CardDAV: Unset photo before setting a new one – core/#26242
• CardDAV: Fix for birthday entries – core/#25636
• CardDAV: Limit image export mime types – core/#26459
• Updater: Fix web UI update in some environments – updater/#378
• Updater: Retrigger integrity check after update – updater/#405
• User_LDAP: Added OCC command to update group mappings – user_ldap/#14
• User_LDAP: Fix issue with “(2)” appearing on shares when refreshing users in some scenarios – core/#25718
• User_external: Double verify the SMB response – apps/#2198
• Firstrunwizard: Only display the wizard when in files app – firstrunwizard/#52
• Gallery: Do not display technical error messages – gallery/#707

Download: owncloud-9.1.2.tar.bz2 or owncloud-9.1.2.zip
MD5: owncloud-9.1.2.tar.bz2.md5 or owncloud-9.1.2.zip.md5
SHA256: owncloud-9.1.2.tar.bz2.sha256 or owncloud-9.1.2.zip.sha256
PGP (Key): owncloud-9.1.2.tar.bz2.asc or owncloud-9.1.2.zip.asc
Packages on our Build Service: 9.1 Release Channel and Stable Release Channel. Learn more about Release Channels.

Version 9.0.6 Nov 8 2016

• Core: Adjusted documentation link to issue template – core/#26087
• Core: Display feedback in users page when changing password – core/#25532
• Core: Fix mime type detection in hidden directories – core/#26133
• Core: Change forum URL to central – core/#25644
• Core: Fix share array format passed to “post_unshareFromSelf” hook – core/#26389
• Core: Release mount info memory after running background jobs – core/#26223
• Core: Improve users page performance by not sorting after every add – core/#26234
• Core: Escape special chars in some queries – core/#25429
• Core: Fix misleading SSL/TLS SMTP email configuration – core/#26447
• DAV: Do not print exception messages in HTML – core/#26460
• DAV: Sanitize length headers when validating quota – core/#26366
• Files: Allow uploading empty files in the web UI – core/#19116
• Files: Exclude more invalid chars in path – core/#26461
• Sharing: Let the share owner increase permissions – core/#25542
• Federation: Fix sharing with remote user names containing spaces – core/#25955
• Federation: Save some memory in sync job by releasing mount info after each user – core/#26204
• CardDAV: Unset photo before setting a new one – core/#26242
• CardDAV: Limit image export mime types – core/#26459
• Updater: Fix web UI update in some environments – updater/#378
• Updater: Retrigger integrity check after update – updater/#405
• User_LDAP: Added OCC command to update group mappings – user_ldap/#14
• User_external: Double verify the SMB response – apps/#2198
• Antivirus: Fix background scan – files_antivirus/#128
• Gallery: Do not display technical error messages – gallery/#707

Download: owncloud-9.0.6.tar.bz2 or owncloud-9.0.6.zip
MD5: owncloud-9.0.6.tar.bz2.md5 or owncloud-9.0.6.zip.md5
SHA256: owncloud-9.0.6.tar.bz2.sha256 or owncloud-9.0.6.zip.sha256
PGP (Key): owncloud-9.0.6.tar.bz2.asc or owncloud-9.0.6.zip.asc
Packages on our Build Service: 9.0 Release Channel and Stable Release Channel. Learn more about Release Channels.

Version 8.2.9 Nov 8 2016

• Core: Adjusted documentation link to issue template – core/#26087
• Core: Display feedback in users page when changing password – core/#25532
• Core: Fix mime type detection in hidden directories – core/#26133
• Core: Change forum URL to central – core/#25644
• Core: Fix unshare from self etag propagation – core/#26346
• Core: Fix misleading SSL/TLS SMTP email configuration – core/#26447
• DAV: Sanitize length headers when validating quota – core/#26366
• Updater: Fix signature data not found error when updating to 9.0 – updater/#384
• Updater: Clicking notification now updates doc in new tab – core/#26260
• User_external: Double verify the SMB response – apps/#2198

Download: owncloud-8.2.9.tar.bz2 or owncloud-8.2.9.zip
MD5: owncloud-8.2.9.tar.bz2.md5 or owncloud-8.2.9.zip.md5
SHA256: owncloud-8.2.9.tar.bz2.sha256 or owncloud-8.2.9.zip.sha256
PGP (Key): owncloud-8.2.9.tar.bz2.asc or owncloud-8.2.9.zip.asc
Packages on our Build Service: 8.2 Release Channel. Learn more about Release Channels.

Version 8.1.11 Nov 8 2016

• Core: Adjusted documentation link to issue template – core/#26087
• Core: Fix misleading SSL/TLS SMTP email configuration – core/#26447
• DAV: Sanitize length headers when validating quota – core/#26366
• Updater: Fixed to properly use update server URL from config – updater/#381

Download: owncloud-8.1.11.tar.bz2 or owncloud-8.1.11.zip
MD5: owncloud-8.1.11.tar.bz2.md5 or owncloud-8.1.11.zip.md5
SHA256: owncloud-8.1.11.tar.bz2.sha256 or owncloud-8.1.11.zip.sha256
PGP (Key): owncloud-8.1.11.tar.bz2.asc or owncloud-8.1.11.zip.asc
Packages on the openSUSE Build Service: 8.1 Release Channel, Stable Release Channel. Learn more about Release Channels.

Version 8.0.16 Nov 8 2016

• Core: Adjusted documentation link to issue template – core/#26087
• DAV: Sanitize length headers when validating quota – core/#26366
• Updater: Fixed to properly use update server URL from config – updater/#382

Download: owncloud-8.0.16.tar.bz2 or owncloud-8.0.16.zip
MD5: owncloud-8.0.16.tar.bz2.md5 or owncloud-8.0.16.zip.md5
SHA256: owncloud-8.0.16.tar.bz2.sha256 or owncloud-8.0.16.zip.sha256
PGP (Key): owncloud-8.0.16.tar.bz2.asc or owncloud-8.0.16.zip.asc
Packages on the openSUSE Build Service: 8.0 Release Channel. Learn more about Release Channels.

Version 9.1.1 Sep 20 2016

• Core: Remove OCS response body for HTTP status 204 and 304 which disturbed some firewalls – core/#25835
• Core: Map Oracle driver options to params – core/#23938
• Core: Log cron job class name for easier troubleshooting – core/#25743
• Core: Skip version and trash expiry for users that never logged in – core/#25741
• Core: Added white download icons for apps to use – core/#23891
• Core: Fix warning about undefined offset in LoginController – core/#25714
• Core: Fix warning about undefined two factor providers – core/#25606
• Core: Load app before executing its repair steps – core/#25674
• Core: Fix “defaultapp” setting – core/#25562
• Core: Fix issue when opening some file app links received in share emails – core/#25200
• Core: Reconnect DB in occ files:scan to avoid DB timeouts – core/#25853
• Core: Fix status.php page redirection with non-standard port – core/#25946
• Core: Improve users page loading performance with many groups – core/#25922
• Core: Don’t log credentials from tryLogin – core/#25895
• Core: Fix password recovery with case sensitive user names – core/#25684
• Core: Fix two factor page cyclic reload with some providers – core/#25893
• Core: Add visual feedback when updating password in users page – core/#25532
• Core: Fix useless warning when overwriting file when open_basedir is set – core/#26033
• Files: Display hidden files in footer and selection summary – core/#25855
• Files: Fix hidden files handling with insertion or selection – core/#25856
• DAV: Faster classification migration in CalDAV – core/#25638
• DAV: Error message about forbidden password login is now logged in debug level – core/#25486
• DAV: Return “data-fingerprint” property on any file related element – core/#25482
• DAV: Fix missing properties in CalDAV subscriptions – core/#24469
• DAV: Improve performance of chunking in new DAV endpoint- core/#26072
• Sharing: Fixed wrong insufficient storage error – core/#25582
• Sharing: Prevent shared storage recursions to avoid memory issues and crashes – core/#25557
• Sharing: Group received shares which have same source and target – core/#25113
• Sharing: Fix sharing over API when dealing with trailing slashes – core/#25464
• Sharing: Fix public upload issue with quota in some scenarios – core/#24751
• Sharing: Fix issue where videos did not play from share links with PHP 7 – core/#25483
• Sharing: Fix BadMethodCallException in cron or scanner – core/#25506
• Sharing: Prevent ghost mounts for deleted/orphaned shares – core/#26001
• Sharing: Fix fatal error for users with older existing shares from OC <= 8.2 – core/#25933
• Sharing: Always allow share owner to increase permissions – core/#25542
• Sharing: Properly retry federated shares after they were unavailable – core/#26037
• Sharing: Reallow spaces in federated share autocomplete in share dialog – core/#25955
• Encryption: OCC command for decryption now doesn’t decrypt received shares – core/#25599
• Files_external: Removed reference magic to avoid potential infinite loops – core/#25844
• Files_external: Added conditional trace logging for debugging SMB on production systems – core/#25758
• Files_external: Fix config database issue when using Oracle – core/#25764
• Files_external: SMB subfolders with read-only attribute are now writeable in OC to match spec – core/#24608
• Files_external: Fix “save in session” mode when using Webdav without cookies/session – core/#25511
• Files_external: Respect theme for external folder icon – core/#25461
• Files_external: Disable NFD encoding wrapper that was enabled by mistake for local storages – core/#25819
• Files_external: Some SMB fixes and better debug logging – core/#25817
• Files_trashbin: Add occ command to trigger trashbin retention expiration – core/#25878
• Files_versions: Add occ command to trigger versions retention expiration – core/#25878
• LDAP: Fix login issue when dealing with display name of deleted users – core/#23248
• LDAP: Prevent triggering email change events at login time for unchanged email – core/#25553
• LDAP: Fix login and logging issue with big avatars by reducing their size – core/#25857
• LDAP: Hide LDAP admin password in wizard – core/#25702
• Provisioning API: Fixed issue where subadmins could not change group memberships – core/#25496
• Provisioning API: Added flag to enable/disable two-factor auth for users – core/#25876
• Activity: Fix owner name processing for received federated shares – core/#24938
• Updater: Fix web update issue with filesystem apps – updater/#371
• Antivirus: Fix incorrect report of file size – files_antivirus/#120
• Antivirus: Fix background scan – files_antivirus/#109

Download: owncloud-9.1.1.tar.bz2 or owncloud-9.1.1.zip
MD5: owncloud-9.1.1.tar.bz2.md5 or owncloud-9.1.1.zip.md5
SHA256: owncloud-9.1.1.tar.bz2.sha256 or owncloud-9.1.1.zip.sha256
PGP (Key): owncloud-9.1.1.tar.bz2.asc or owncloud-9.1.1.zip.asc
Packages on our Build Service: 9.1 Release Channel and Stable Release Channel. Learn more about Release Channels.

Version 9.0.5 Sep 20 2016

• Core: Remove OCS response body for HTTP status 204 and 304 which disturbed some firewalls – core/#25835
• Core: Sanitize more data in config report – core/#23728
• Core: Map Oracle driver options to params – core/#23938
• Core: Log cron job class name for easier troubleshooting – core/#25743
• Core: Skip version and trash expiry for users that never logged in – core/#25741
• Core: Added white download icons for apps to use – core/#23891
• Core: Reconnect DB in occ files:scan to avoid DB timeouts – core/#25853
• Core: Fix status.php page redirection with non-standard port – core/#25946
• Core: Improve users page loading performance with many groups – core/#25922
• DAV: Added quota plugin to new DAV files endpoint – core/#25646
• Sharing: Group received shares which have same source and target – core/#25113
• Sharing: Fix public upload issue with quota in some scenarios – core/#24751
• Sharing: Fix sharing over API when dealing with trailing slashes – core/#25464
• Sharing: Fix path sent by shared storage hooks, could affect some apps like gallery – core/#23620
• Sharing: Fix issue where videos did not play from share links with PHP 7 – core/#25483
• Encryption: OCC command for decryption now doesn’t decrypt received shares – core/#25599
• Files_external: Removed reference magic to avoid potential infinite loops – core/#25844
• Files_external: Added conditional trace logging for debugging SMB on production systems – core/#25758
• Files_external: Fix config database issue when using Oracle – core/#25764
• Files_external: SMB subfolders with read-only attribute are now writeable in OC to match spec – core/#24608
• Files_external: Fix “save in session” mode when using Webdav without cookies/session – core/#25511
• Files_external: Respect theme for external folder icon – core/#25461
• Files_external: Some SMB fixes and better debug logging – core/#25817
• Files_trashbin: Add occ command to trigger trashbin retention expiration – core/#25878
• Files_versions: Add occ command to trigger versions retention expiration – core/#25878
• LDAP: Fix login issue when dealing with display name of deleted users – core/#23248
• LDAP: Fix login and logging issue with big avatars by reducing their size – core/#25857
• LDAP: Prevent triggering email change events at login time for unchanged email – core/#25553
• LDAP: Hide LDAP admin password in wizard – core/#25702
• Provisioning API: Fixed issue where subadmins could not change group memberships – core/#25496
• Activity: Fix owner name processing for received federated shares – core/#24938
• Updater: Fix web update issue with filesystem apps – updater/#371

Download: owncloud-9.0.5.tar.bz2 or owncloud-9.0.5.zip
MD5: owncloud-9.0.5.tar.bz2.md5 or owncloud-9.0.5.zip.md5
SHA256: owncloud-9.0.5.tar.bz2.sha256 or owncloud-9.0.5.zip.sha256
PGP (Key): owncloud-9.0.5.tar.bz2.asc or owncloud-9.0.5.zip.asc
Packages on our Build Service: 9.0 Release Channel and Stable Release Channel. Learn more about Release Channels.

Version 8.2.8 Sep 20 2016

• Core: Sanitize more data in config report – core/#23728
• Core: Reconnect DB in occ files:scan to avoid DB timeouts – core/#25853
• Files_trashbin: Add occ command to trigger trashbin retention expiration – core/#25878
• Sharing: Fix path sent by shared storage hooks, could affect some apps like gallery – core/#23620
• LDAP: Fix user cleanup tool deletion detection accuracy – core/#25338
• Updater: Fix “unable to extract package Array” – updater/#134

Download: owncloud-8.2.8.tar.bz2 or owncloud-8.2.8.zip
MD5: owncloud-8.2.8.tar.bz2.md5 or owncloud-8.2.8.zip.md5
SHA256: owncloud-8.2.8.tar.bz2.sha256 or owncloud-8.2.8.zip.sha256
PGP (Key): owncloud-8.2.8.tar.bz2.asc or owncloud-8.2.8.zip.asc
Packages on our Build Service: 8.2 Release Channel. Learn more about Release Channels.

Version 8.1.10 Sep 20 2016

• LDAP: Fix user cleanup tool deletion detection accuracy – core/#25338
• Updater: Properly copy ca-bundle.crt when updating to 8.1.x – updater/#164
• Updater: Fix “unable to extract package Array” – updater/#134

Download: owncloud-8.1.10.tar.bz2 or owncloud-8.1.10.zip
MD5: owncloud-8.1.10.tar.bz2.md5 or owncloud-8.1.10.zip.md5
SHA256: owncloud-8.1.10.tar.bz2.sha256 or owncloud-8.1.10.zip.sha256
PGP (Key): owncloud-8.1.10.tar.bz2.asc or owncloud-8.1.10.zip.asc
Packages on the openSUSE Build Service: 8.1 Release Channel, Stable Release Channel. Learn more about Release Channels.

Version 8.0.15 Sep 20 2016

• Updater: Properly copy ca-bundle.crt when updating to 8.1.x – updater/#164
• Updater: Fix “unable to extract package Array” – updater/#134

Download: owncloud-8.0.15.tar.bz2 or owncloud-8.0.15.zip
MD5: owncloud-8.0.15.tar.bz2.md5 or owncloud-8.0.15.zip.md5
SHA256: owncloud-8.0.15.tar.bz2.sha256 or owncloud-8.0.15.zip.sha256
PGP (Key): owncloud-8.0.15.tar.bz2.asc or owncloud-8.0.15.zip.asc
Packages on the openSUSE Build Service: 8.0 Release Channel. Learn more about Release Channels.

Version 9.1.0 Jul 21 2016

General

• Background jobs (cron) can now run in parallel
• Update notifications in client via API – You can now be notified in your desktop client about available updates for core and apps. The notifications are made available via the notifications API.
• Multi bucket support for primary objectstore integration

Authentication

• Pluggable authentication: plugin system that supports different authentication schemes
• Token-based authentication
• Ability to invalidate sessions
• List connected browsers/devices in the personal settings page. Allows the user to disconnect browsers/devices.
• Device-specific passwords/tokens, can be generated in the personal page and revoked
• Disable users and automatically revoke their sessions
• Detect disabled LDAP users or password changes and revoke their sessions
• Log in with email address
• Configuration option to enforce token-based login outside the web UI
• Two Factor authentication plug-in system
• OCC command added to (temporarily) disable/enable two-factor authentication for single users

Note: the current desktop and mobile client versions do not support two-factor yet, this will be added later. It is already possible to generate a device specific password and enter that in the current client versions.
Files app

• Ability to toggle displaying hidden files
• Remember sort order
• Permalinks for internal shares
• Visual cue when dragging in files app
• Autoscroll file list when dragging files
• Upload progress estimate

Federated sharing

• Ability to create federated shares with CRUDS permissions
• Resharing a federated share does not create a chain of shares any more but connects the share owner’s server to the reshare recipient

External storage

• UTF-8 NFD encoding compatibility support for NFD file names stored directly on external storages (new mount option in external storage admin page)
• Direct links to the configuration pages for setting up a GDrive or Dropbox app for use with ownCloud
• Some performance and memory usage improvements for GDrive, stream download and chunk upload
• Performance and memory usage improvements for Dropbox with stream download
• GDrive library update provides exponential backoff which will reduce rate limit errors

Minor additions

• Support for print style sheets
• Command line based update will now be suggested if the instance is bigger to avoid potential timeouts
• Web updater will be disabled if LDAP or shibboleth are installed
• DB/app update process now shows better progress information
• Added occ files:scan --unscanned to only scan folders that haven’t yet been explored on external storages
• Chunk cache TTL can now be configured
• Added warning for wrongly configured database transactions, helps prevent “database is locked” issues
• Use a capped memory cache to reduce memory usage especially in background jobs and the file scanner
• Allow login by email
• Respect CLASS property in calendar events
• Allow addressbook export using VCFExportPlugin
• Birthdays are also generated based on shared addressbooks

For developers

• New DAV endpoint with a new chunking protocol aiming to solve many issues like timeouts (not used by clients yet)
• New webdav property for share permissions
• Background repair steps can be specified info.xml
• Background jobs (cron) can now be declared in info.xml
• Apps can now define repair steps to run at install/uninstall time
• Export contact images via sabre dav plugin
• Sabre DAV’s browser plugin is available in debug mode to allow easier development around webdav

Technical debt

• PSR-4 autoloading forced for OC\ and OCP\, optional for OCA\ docs at https://doc.owncloud.org/server/9.1/developer_manual/app/classloader.html
• More cleanup of the sharing code (ongoing)

Download: owncloud-9.1.0.tar.bz2 or owncloud-9.1.0.zip
MD5: owncloud-9.1.0.tar.bz2.md5 or owncloud-9.1.0.zip.md5
SHA256: owncloud-9.1.0.tar.bz2.sha256 or owncloud-9.1.0.zip.sha256
PGP (Key): owncloud-9.1.0.tar.bz2.asc or owncloud-9.1.0.zip.asc
Packages on our Build Service: 9.0 Release Channel and Stable Release Channel. Learn more about Release Channels.

Version 9.0.4 Jul 19 2016

• Files: Prepend slash to paths in file list UI to prevent issues with links from share emails – core/#25200
• Files: Ignore invalid paths in the JS file list – core/#25368
• Files: Fix system tags search query – core/#25380
• Files: Can now properly create folders in IE11 – core/#24453
• DAV: Additional perm check in Webdav – core/#25449
• DAV: Get only vcards which match both the address book id and the vcard uri – core/#25294
• DAV: Suppress warnings from DAV migration if there’s nothing to do – core/#25279
• DAV: Contacts API: replace raw image data with url – core/#25081
• Sharing: Fix issue with share ids not being strings on some envs with public links – core/#23066
• Sharing: Fix permission check issue when creating direct shares to users who already have access through group – core/#25359
• Encryption: Fix misleading decrypt-all command message – core/#23695
• Admin: Adding certificate revocation list and validate if the app certificate is revoked – core/#25469
• Admin: Fixes htaccess check on environments that blocks data folder with redirects – core/#25416
• Admin: Prevent endless reload in admin page during setup check – core/#24309
• Admin: Set content type when downloading log file to force download on some browser – core/#25382
• LDAP: Cap memory usage when iterating over all users, eg in a sync job – core/#25323
• LDAP: Fix user cleanup tool deletion detection accuracy – core/#25338
• Versions: Log version expiration as INFO instead of DEBUG to be consistent with trashbin – core/#25367
• Versions: Hide rollback button in versions app when no permission to revert – core/#25288
• Search: Fix search when operating on share file list sections – core/#23774
• Updater: Now uses web requests, useful for environments without CLI or proc_open access – core/#21085
• Updater: fix cleanup routine that failed with some apps – core/#24453
• Updater: fix integrity check issue when updating from 9.0.0 or 9.0.1 – updater/#358

Download: owncloud-9.0.4.tar.bz2 or owncloud-9.0.4.zip
MD5: owncloud-9.0.4.tar.bz2.md5 or owncloud-9.0.4.zip.md5
SHA256: owncloud-9.0.4.tar.bz2.sha256 or owncloud-9.0.4.zip.sha256
PGP (Key): owncloud-9.0.4.tar.bz2.asc or owncloud-9.0.4.zip.asc
Packages on our Build Service: 9.0 Release Channel and Stable Release Channel. Learn more about Release Channels.