← Back to all sparks
N

Nextcloud

COLLAB
Velocity5.0

Self-hosted cloud platform for file sync, collaboration, and communication with integrated video conferencing and office tools

Nextcloud's November patches lean on preview speed and sharing fixes across three branches.

self-hostedfile-sharingsecurity-patchesperformancecalendar sync
◆Current state
Nextcloud released 35.0.3, 34.0.6 and 33.0.11 on November 12, a month after the previous patch round. 35.0.3 is the largest, with about a dozen calendar and contacts sync fixes, faster cold preview generation, a cached mimetype table, share expiration times that are kept, share-by-mail passwords sent readable instead of hashed, and sharing with remote owners. The two older lines get the same sharing, encryption and audit-log backports.
◆Where it's heading
Since the 35.0 major in September, Nextcloud has returned to its monthly three-branch patch rhythm. The fixes concentrate on sharing correctness, CalDAV/CardDAV sync and performance on large instances, with few new features. The 35 line receives small additions, such as remote share owners, that the older branches do not.
◆Prediction
The next patch round should land in mid-December on the same three branches; the entries do not show when 36 development will surface.

◆Recent moves

  1. 2d ago

    Nextcloud 34.0.6: sharing, encryption and upload backports

    The 34 line gets the November backports: share expiration kept, encryption size fixes, sliding expiry for chunked uploads and an audit log entry when brute-force protection is bypassed. Maintenance for admins who have not moved to 35.

  2. 2d ago

    Nextcloud 33.0.11: sharing and legacy DAV auth backports

    The oldest supported line receives the same sharing, encryption and preview migration fixes, plus a password session check on legacy DAV auth. Routine maintenance.

  3. 2d ago

    Nextcloud 35.0.3: faster previews, sync and sharing fixes

    The 35 line's third patch speeds up cold preview generation and app loading, fixes a dozen calendar and contacts sync issues, keeps share expiration times and allows remote share owners. It continues the post-major cleanup with a stronger focus on performance than 35.0.2.

  4. 1mo ago

    Nextcloud 35.0.2: webhook metadata, sharing fixes, report API

    The second patch on the 35 line mixes sharing and encryption fixes with small integration additions: extra metadata on node webhooks, webhook-compatible comment events and an API for system-report sections. It also lays groundwork for a unified sharing sync, the clearest hint of where the sharing rework is heading.

  5. 1mo ago

    Nextcloud 34.0.5: share CSRF fix, log redaction, sharing backports

    A large backport bundle for the 34 line, led by a CSRF token on share acceptance, token-checked uploads and log redaction. It brings 34 in line with the sharing and encryption fixes already shipped on 35.

  6. 1mo ago

    Nextcloud 33.0.10: share CSRF fix and sharing backports

    The 33 line gets the same security and sharing backports as 34.0.5, including the share-accept CSRF fix and the encryption key-cache cap. Maintenance only, but it shows Nextcloud still patching three majors in parallel.