This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+13 more
Affected surfaces
ReleasePort's take
Moderate signalThis release includes a critical security patch for the crossbeam‑epoch dependency and several feature updates affecting authz integration, frontend UI, and PDF handling.
Why it matters: Bump crossbeam-epoch to apply the security patch; severity rated 90. All teams should update immediately to mitigate risk.
Summary
AI summaryUpdates front, feat, and music across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Critical |
Bump crossbeam-epoch dependency for security patch. Bump crossbeam-epoch dependency for security patch. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Migrate caldav and carddav to authz engine. Migrate caldav and carddav to authz engine. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Move playlist handling to authz engine. Move playlist handling to authz engine. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Restore previously legacy frontend features. Restore previously legacy frontend features. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Clean localStorage on user change in front end. Clean localStorage on user change in front end. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Remove panic=abort to allow catch_unwind for PDF extraction. Remove panic=abort to allow catch_unwind for PDF extraction. Source: llm_adapter@2026-07-15 Confidence: high |
— |
Full changelog
What's Changed
- fix(front): clean localStorage on user change by @EdouardVanbelle in https://github.com/AtalayaLabs/OxiCloud/pull/561
- chore/bump to 0.8.2 + security on crossbeam-epoch by @EdouardVanbelle in https://github.com/AtalayaLabs/OxiCloud/pull/564
- feat: caldav carddav migration to authz by @EdouardVanbelle in https://github.com/AtalayaLabs/OxiCloud/pull/553
- music: move playlist to authz engine by @EdouardVanbelle in https://github.com/AtalayaLabs/OxiCloud/pull/563
- restore frontend features from legacy by @EdouardVanbelle in https://github.com/AtalayaLabs/OxiCloud/pull/562
- fix: remove panic=abort so catch_unwind guards PDF extraction. by @illogic-al in https://github.com/AtalayaLabs/OxiCloud/pull/531
New Contributors
- @illogic-al made their first contribution in https://github.com/AtalayaLabs/OxiCloud/pull/531
Full Changelog: https://github.com/AtalayaLabs/OxiCloud/compare/v0.8.2...v0.8.3
What's Changed
- fix(front): clean localStorage on user change by @EdouardVanbelle in https://github.com/AtalayaLabs/OxiCloud/pull/561
- chore/bump to 0.8.2 + security on crossbeam-epoch by @EdouardVanbelle in https://github.com/AtalayaLabs/OxiCloud/pull/564
- feat: caldav carddav migration to authz by @EdouardVanbelle in https://github.com/AtalayaLabs/OxiCloud/pull/553
- music: move playlist to authz engine by @EdouardVanbelle in https://github.com/AtalayaLabs/OxiCloud/pull/563
- restore frontend features from legacy by @EdouardVanbelle in https://github.com/AtalayaLabs/OxiCloud/pull/562
- fix: remove panic=abort so catch_unwind guards PDF extraction. by @illogic-al in https://github.com/AtalayaLabs/OxiCloud/pull/531
New Contributors
- @illogic-al made their first contribution in https://github.com/AtalayaLabs/OxiCloud/pull/531
Full Changelog: https://github.com/AtalayaLabs/OxiCloud/compare/v0.8.2...v0.8.3
Security Fixes
- Bump crossbeam-epoch dependency for security fixes
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About OxiCloud
☁ Ultra-fast, secure & lightweight self-hosted cloud storage — your files, photos, calendars & contacts, all in one place. Built in Rust.
Beta — feedback welcome: [email protected]