Changelog | ownCloud.org

Fixed classnames and improved autoloaded to improve compatibility with older PHP versions
Show a warning if an insecure PHP version is used
Filesizes are displayed correctly
Fixed groups in usermanagement
Several Internet Explorer fixes
Use display-names in more places
Fix upgrading of cache
Fix navigation scrollbar for lots of apps
Fixed ETag handling to prevent wrong conflict files
Fix public link handling
Better indexes to improve performance
Several Windows server fixes
Fix renames of shared files
Fix PostgreSQL compatibility
Improve error reporting for app installation
Improved compatibility with Novell eDirectory
Several LDAP fixes
Improved sorting in usermanagement
Improved background jobs
Several CardDAV contacts fixes
Several mediaplayer fixes
Fixes for text editor
Several lucene search fixes
Several smaller fixes
Contacts: SQL Injection (oC-SA-2013-012)
Multiple XSS vulnerabilities (oC-SA-2013-011)

Download: http://download.owncloud.org/community/owncloud-5.0.1.tar.bz2
MD5: http://download.owncloud.org/community/owncloud-5.0.1.tar.bz2.md5

Version 5.0.0 March 14th 2013

New design
Restore deleted files
New fulltext search
Display names
New photo gallery
Improved calendar and contacts
Improved bookmarks
New documentation system
Improved file cache
Improved security checks
Security hardening in templates
Security hardening: Implemented Content Security Policy
Better versioning of better autoexpire
Extended external storage
New OCS REST API support
Improved apps management

Download: http://download.owncloud.org/community/owncloud-5.0.0.tar.bz2
MD5: http://download.owncloud.org/community/owncloud-5.0.0.tar.bz2.md5

Version 4.5.8 March 14th 2013

Fix foldersize checks to validate zip input size
Offer download of shared dir as zip only if zip size limit is not exceeded
Escape more characters for LDAP search
Fix versioning together with real home directories
Multiple XSS vulnerabilities (oC-SA-2013-008)
Contacts: Bypass of file blacklist (oC-SA-2013-009)
user_migrate: Local file disclosure (oC-SA-2013-010)

Download: http://download.owncloud.org/community/owncloud-4.5.8.tar.bz2
MD5: http://download.owncloud.org/community/owncloud-4.5.8.tar.bz2.md5

Version 4.0.13 March 14th 2013

Contacts: Bypass of file blacklist (oC-SA-2013-009)
user_migrate: Local file disclosure (oC-SA-2013-010)

Download: http://download.owncloud.org/community/owncloud-4.0.13.tar.bz2
MD5: http://download.owncloud.org/community/owncloud-4.0.13.tar.bz2.md5

Version 4.5.7 Feb 20th 2013

Fix for 3rd party apps dropping the database
Fix SubAdmins management
Fix PHP warnings
Fix compatibility with some CIFS shares
More robust apps management
Remove not needed AWS tests
Improved mime type parsing
Several sharing fixes
Offer the option to change the password only supported by the backend
More robust auto language detection
Revoke DB rights on install only if the db is newly created
Fix rendering of database connection error page
LDAP: update quota more often
Multiple XSS vulnerabilities (oC-SA-2013-003)
Multiple CSRF vulnerabilities (oC-SA-2013-004)
PHP settings disclosure (oC-SA-2013-005)
Multiple code executions (oC-SA-2013-006)
Privilege escalation in the calendar application (oC-SA-2013-007)

Download: http://mirrors.owncloud.org/releases/owncloud-4.5.7.tar.bz2
MD5: http://mirrors.owncloud.org/releases/owncloud-4.5.7.tar.bz2.md5

Version 4.0.12 Feb 20th 2013

Multiple XSS vulnerabilities (oC-SA-2013-003)
Multiple CSRF vulnerabilities (oC-SA-2013-004)
Multiple code executions (oC-SA-2013-006)

Download: http://mirrors.owncloud.org/releases/owncloud-4.0.12.tar.bz2
MD5: http://mirrors.owncloud.org/releases/owncloud-4.0.12.tar.bz2.md5

Version 4.5.6 Jan 22th 2013

Improved language detection
Improved translations
Fix link to bugtracker
Several IE 6/7/8 fixes
SabreDAV updated to 1.6.6
Improved error reporting
Support special characters in mountpoint
Interpret http 403 and 401 as not authorized in user_webdavauth
Several fixes for special characters in files and folders
Improved PostgreSQL support
Check database names for valid characters
Fix default email address calculation
Remove debug output on send password page
Add SMTP port configuration option
Only show the max possible upload of 2GB on a 32 bit system
Show progress during file downloads
Security: Fix multiple XSS problems: CVE-2013-0201, CVE-2013-0202, CVE-2013-0203
Security: Fix Code execution in external storage: CVE-2013-0204
Security: Removed remoteStorage app because of unfixed security problems.

Download: http://mirrors.owncloud.org/releases/owncloud-4.5.6.tar.bz2
MD5: http://mirrors.owncloud.org/releases/owncloud-4.5.6.tar.bz2.md5

Version 4.0.11 Jan 22th 2013

Security: Fix multiple XSS problems: CVE-2013-0201, CVE-2013-0202, CVE-2013-0203
Security: Removed remoteStorage app because of unfixed security problems.

Download: http://mirrors.owncloud.org/releases/owncloud-4.0.11.tar.bz2
MD5: http://mirrors.owncloud.org/releases/owncloud-4.0.11.tar.bz2.md5

Version 4.5.5 Dec 20th 2012

Show drag and drop shadow for Firefox
Fix Knowledgebase under certain conditions
Fix setting of sharing password
Fix setting of sharing password
Several sharing fixes
Fixversioning during sharing
Fix mounting of external filesystems especially CIFS
Fix several PHP warnings
Show /Shared as standard directory
Fix session management for running several ownClouds on the same host
Fix WebDAV quota enforement
Fix CalDAV with LDAP users
Better warning about missing dependencies
Add warning about conflicting WebDAV auth and LDAP backend
Restore send sharing link my email
Fix encoding problem with mounting of CIFS filesystems
Fix mimetype icons for new files
Fix the folder size calculation
Fix for deleting multiple files
Fix for controling the data dir with LDAP
Security: Auth bypass in user_webdavauth and user_ldap (oC-SA-2012-006)
Security: XSS vulnerability in bookmarks (oC-SA-2012-007)

Download: http://mirrors.owncloud.org/releases/owncloud-4.5.5.tar.bz2
MD5: http://mirrors.owncloud.org/releases/owncloud-4.5.5.tar.bz2.md5

Version 4.0.10 Dec 20th 2012

Security: Auth bypass in user_webdavauth and user_ldap (oC-SA-2012-006)
Security: XSS vulnerability in bookmarks (oC-SA-2012-007)

Download: http://mirrors.owncloud.org/releases/owncloud-4.0.10.tar.bz2
MD5: http://mirrors.owncloud.org/releases/owncloud-4.0.10.tar.bz2.md5

Version 4.5.4 Dec 3th 2012

Fix a regression for system where output buffering is disabled
Fix a problem with old file versions stored in the filesystem cache
Fix group and subadmin ajax bug
Important LDAP fix
Improved Updater

Download: http://mirrors.owncloud.org/releases/owncloud-4.5.4.tar.bz2
MD5: http://mirrors.owncloud.org/releases/owncloud-4.5.4.tar.bz2.md5

Version 4.5.3 Nov 27th 2012

Fix the new from url button
Fix a memory overflow with downloading of big files via WebDAV
Better error output in case of DB problems
Fix problems with uploading files who have special characters in the name
Improved reverse proxy and load balancer support
Fix wrong folder size calculation
Improved share link generation
Fix the syncing of the Shared folder
Fix Sharing by link from within Shared folder
Several LDAP integration fixes
Fix support for PostgreSQL
Several WebDAV fixes
Fix drag and drop uploading
Improved translations
Several Gallery fixes
Several Contacts fixes
Smaller fixes

Download: http://mirrors.owncloud.org/releases/owncloud-4.5.3.tar.bz2
MD5: http://mirrors.owncloud.org/releases/owncloud-4.5.3.tar.bz2.md5

Version 4.5.2 Nov 14th 2012

Fix syncing of shared folder
Various sharing bugs fixed
Fix bug with deleting users
Fix check if resharing is allowed
Fix webdavauth app
Several ldap fixes
Fix data migration
Fix folder uploads
Fix generatino of etags
Fix user specific mount configuration
Several PostgreSQL fixes
Improved performance of file updates
Fix some php warnings
Fix filesize calculation
Add visual feedback if password is set
Various smaller fixes
Several critical security fixes
XSS vulnerability in user_webdavauth (oC-SA-2012-003)
Code Execution in /lib/migrate.php (oC-SA-2012-004)
Code Execution in /lib/filesystem.php (oC-SA-2012-005)

Download: http://mirrors.owncloud.org/releases/owncloud-4.5.2.tar.bz2
MD5: http://mirrors.owncloud.org/releases/owncloud-4.5.2.tar.bz2.md5

Version 4.0.9 Nov 14th 2012

Several critical security fixes
Multiple XSS vulnerabilities (oC-SA-2012-001)
Timing attack in the “Lost Password” implementation (oC-SA-2012-002)
Code Execution in /lib/migrate.php (oC-SA-2012-004)
Code Execution in /lib/filesystem.php (oC-SA-2012-005)

Download: http://mirrors.owncloud.org/releases/owncloud-4.0.9.tar.bz2
MD5: http://mirrors.owncloud.org/releases/owncloud-4.0.9.tar.bz2.md5

Version 4.5.1 Oct 24th 2012

Fix path encoding in breadcrumb
Fix sharing of files with special characters
Fix upercase/lowercase probelm in usernames with WebDAV
Fix LDAP plugin with Postgres
Fix userID migration
Fix sharing of mounted Files
Delete userfiles after deleting a user
Make Webinterface work with nonstandard path
Fix retrieval of Quota, Email via LDAP
Show a warning in installer if .htaccess is not working
Fix Shared folder caching
Increase security by using openssl random number generator
Fix syncing of rollback files
Fix the swift files backend
Disallow user to delete own account
Security: Fix multiple XSS vulnerabilities (oC-SA-2012-001)
Security: Fix a timing attack in the “Lost Password” implementation (oC-SA-2012-002)
Various smaller fixes

Download: http://mirrors.owncloud.org/releases/owncloud-4.5.1.tar.bz2 MD5: http://mirrors.owncloud.org/releases/owncloud-4.5.1.tar.bz2.md5

Version 4.5.0 Oct 10th 2012

Faster Syncing
Sub Administrators
GUI for mounting of external storage
Improved File Versioning
Enhanced Sharing
Reworked LDAP
Big File Chunking

Download: http://mirrors.owncloud.org/releases/owncloud-4.5.0.tar.bz2 MD5: http://mirrors.owncloud.org/releases/owncloud-4.5.0.tar.bz2.md5

Version 4.0.8 Oct 10th 2012

Show Login Button when user and password are autocompleted
Sanitize LDAP base, user and groups
Security: Fix for insufficiently Random Values (CVE-2008-4107)
Security: Fixed multiple XSS vulnerabilities (CVE-2012-5056)
Security: Fixed a HTTP header injection (CVE-2012-5057)
Security: Fixed an Auth bypass in /lib/base.php (CVE-2012-5336)

Download: http://mirrors.owncloud.org/releases/owncloud-4.0.8.tar.bz2 MD5: http://mirrors.owncloud.org/releases/owncloud-4.0.8.tar.bz2.md5

Version 4.0.7 Aug 15th 2012

Show Login Button when user and password are auto-completed
Sanitize LDAP base, user and groups
Fix non active Adressbooks
Calendar: Remove double html encoding
Fix label for versioning in admin settings
Add parent directory into filecache if it doesn´t exist
Handle non writable files correctly
Disable webfinger completely if not activated
Security: Disable user listings in DAV (CVE-2012-4390)
Security: Check file blacklist for file renames (CVE-2012-4389)
Security: CSRF fix for appconfig.php (CVE-2012-4391)
Security: Validate cookie to prevent auth bypasses (CVE-2012-4392)
Special thanks to Julien Cayssol for reporting several security problems

Download: http://mirrors.owncloud.org/releases/owncloud-4.0.7.tar.bz2 MD5: http://mirrors.owncloud.org/releases/owncloud-4.0.7.tar.bz2.md5

Version 4.0.6 Aug 1th 2012

More robust LDAP integration during unexpected collisions
Fix sharing for users with @ in username
Additional error handling for emailing of private links
Cleanup old session files
Fix user space calculation
Fix Ampache authentication
Remove delete tipsy if file is deleted
Don´t delete lot´s of session files during DAV requests
Fix error when no adressbook is created
Check if php-ldap is installed
Security: Check for Admin user in appconfig.php (CVE-2012-4752)
Security: Several CSRF security fixes (CVE-2012-4393)

Download: http://mirrors.owncloud.org/releases/owncloud-4.0.6.tar.bz2 MD5: http://mirrors.owncloud.org/releases/owncloud-4.0.6.tar.bz2.md5

Version 4.0.5 July 20th 2012

Fix remember the username and autologin
Offer an option to allow sharing outside the group.
Fix for birthday format
Fixes for several encoding fixes for unicode characters
Fix invalid filesystem cache in the sharing folder
Several calendar and contacts fixes
Fix sending of emails
Several fixes in the system log
Several fixes for the external filesystem feature
Security: Fix a reflected XSS (CVE-2012-4394)

Download: http://mirrors.owncloud.org/releases/owncloud-4.0.5.tar.bz2 MD5: http://mirrors.owncloud.org/releases/owncloud-4.0.5.tar.bz2.md5

Version 4.0.4 June 28th 2012

Fix assigning several groups to a user.
Fix LDAP connector with AD servers
Conserve some memory in Contacts App
Fix a warning in Gallery when deleting files
Fix a bug in the music scanner

Download: http://mirrors.owncloud.org/releases/owncloud-4.0.4.tar.bz2 MD5: http://mirrors.owncloud.org/releases/owncloud-4.0.4.tar.bz2.md5

Version 4.0.3 June 23rd 2012

Added a check if the .htaccess file is working and the data directory is protected or not.
Added a check if a user is allowed to edit a bookmark or not.
Fix the bookmarklet
Fix the timezone in the datepicker
Fix mimetype detection for cdr files
Fix the filecache for the /Shared folder
Fix a potential data corruption bug in the encryption app
Don´t show other users filenames during filesystem cache rebuild
Security: Fix several XSS bugs (CVE-2012-4395)
Performance improvements for WebDAV and Desktop Syncing
Fix quota calculation
Improve the LDAP integration and group management
Fix problems with the pdf viewer
Fix user account migration
Implement several CSRF security checks
Fix a gallery bug where first picture is repeated in the last picture.
Lot´s of calendar fixes
Fix problem with “/” in filenames
Updated translations
Several fixes in Contacts
Lot´s of fixes in the Tasks App
Fix a bug in the filesystem cache with ghost entries