Skip to content

docs: add server release notes for 10.16.4 #199

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
phil-davis merged 1 commit into from
Jul 29, 2026
Merged

docs: add server release notes for 10.16.4 #199

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions modules/ROOT/pages/server_release_notes.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,20 @@ next@docs::server_release_notes.adoc, next@docs_main::server_release_notes.adoc
toc::[]


== Changes in 10.16.4

Dear ownCloud administrator, find below the changes and known issues in ownCloud Classic 10.16.4 that need your attention. You can also read the {oc-changelog-url}[full ownCloud Classic changelog] for further details on what has changed.

IMPORTANT: This is a security release. Upgrading is strongly recommended for all installations.

[discrete]
=== Security Fixes

* Honour the write hook veto on legacy chunked WebDAV uploads: https://github.com/owncloud/core/pull/41763[#41763] +
The legacy WebDAV chunked upload path assembled the final file without respecting the pre-write hook result, so the filename blacklist that applies to ordinary uploads was not enforced for chunked uploads. A file name that is rejected on the normal upload path could still be written through the chunked path.
* Fix subadmin email change updating caller's address instead of target's: https://github.com/owncloud/core/pull/41574[#41574] +
The verification token and confirmation link in the subadmin path of `setMailAddress` were associated with the caller's account instead of the target user's account.

== Changes in 10.16.3

Dear ownCloud administrator, find below the changes and known issues in ownCloud Classic 10.16.3 that need your attention. You can also read the {oc-changelog-url}[full ownCloud Classic changelog] for further details on what has changed.
Expand Down