Bump Nextcloud from v23.0.12 to v25.0.7
binarykitchen opened this issue · comments
Because v23 and v24 are deprecated, unmaintained.
But honestly, mostly because v25 comes with great improvements we all fancy, such as a complete new UI look, better handling for photos and a built-in editor.
Also within the same PR, apply any patches of existing Nextcloud apps if any.
We haven't had any problems with migrations so far, but the following parts need to be tested carefully:
- In a docker image, ensure all existing data on the cloud is still available, such as photos, events and contacts
- There are no new errors under /var/log/
- Resolve any new warnings outlined under settings/admin/overview
Also, be wary of this open issue
nextcloud/user_external#222
That's why we aren't upgrading to v26 yet
Here's the PR:
#2268
Nextcloud User session not correctly destroyed on logout
Severity High 7.2/ 10
Package Server (Nextcloud) Affected versions >= 25.0.2, >= 26.0.0
Patched versions 25.0.6, 26.0.1 Server (Nextcloud Enterprise) >= 25.0.2, >= 26.0.0
https://www.opencve.io/cve/CVE-2023-32318
GHSA-q8c4-chpj-6v38
@datdamnzotz Thanks for the pointer. Not a problem at all. My PR uses version 25.0.7 which has this patch.
Tested all over again on a second, unlocked production server of mine with > 10 users.
Zero errors/warnings in the logs. All works like a charm. So much good stuff in here.
Done, that's merged