Skip to content

richdocuments

v9.1.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo File Storage & Sync
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

collabora libreoffice libreoffice-online nextcloud odt

Summary

AI summary

Updates Other, https://github.com/nextcloud/richdocuments/pull/5736, and https://github.com/nextcloud/richdocuments/pull/5713 across a mixed release.

Changes in this release

Security Low

NPM audits run

NPM audits run

Source: llm_adapter@2026-06-09

Confidence: low

Feature Low

Make preview conversion timeout and max file size configurable

Make preview conversion timeout and max file size configurable

Source: llm_adapter@2026-06-09

Confidence: high

Dependency Low

Dependency updates performed

Dependency updates performed

Source: llm_adapter@2026-06-09

Confidence: high

Bugfix Medium

Remove expired WOPI tokens with a single query

Remove expired WOPI tokens with a single query

Source: llm_adapter@2026-06-09

Confidence: high

Bugfix Medium

Save As works with encryption

Save As works with encryption

Source: llm_adapter@2026-06-09

Confidence: high

Bugfix Low

Make preview timeout an info log instead of error

Make preview timeout an info log instead of error

Source: llm_adapter@2026-06-09

Confidence: high

Refactor Low

Remove hardcoded language from document template

Remove hardcoded language from document template

Source: llm_adapter@2026-06-09

Confidence: high

Full changelog

Added

  • Make preview conversion timeout and max file size configurable by @juliusknorr in #5736

Fixed

  • Remove expired WOPI tokens with a single query by @juliusknorr in #5713
  • Save As works with encryption by @juliusknorr in #5704
  • Remove hardcoded language from document template by @juliusknorr in #5659
  • Make preview timeout an info log instead of error by @CarlSchwan in #5642

Other

  • Dependency updates
  • NPM audits

Security Fixes

  • Expired WOPI tokens are removed with a single database query.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track richdocuments

Get notified when new releases ship.

Sign up free

About richdocuments

Collabora Online for Nextcloud

All releases →

Related context

Beta — feedback welcome: [email protected]