# PeerTube v8.2.3

- Product: PeerTube (https://whatsnew.fyi/product/peertube)
- Vendor: Framasoft
- Date: 2026-07-20
- Version: v8.2.3
- Original notes: https://github.com/Chocobozzz/PeerTube/releases/tag/v8.2.3
- Permalink: https://whatsnew.fyi/product/peertube/releases/v8.2.3

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Fix P2P segment validator to correctly reject invalid chunks
- **security** — Forbid embed for videos with embed restrictions if the referer header is not set
- **security** — Redact OAuth tokens in debug logs
- **security** — Add max depth when fixing ActivityPub object
- **fixed** — Fix iOS mobile link for channels
- **fixed** — Fix input placeholder font size
- **fixed** — Correctly remove a private video linked to an abuse
- **fixed** — Do not validate search filters on Enter press in tag inputs
- **fixed** — Improve client notification if the backend returns a 502 HTTP error
- **fixed** — Fix various UI bugs and inconsistencies on RTL layout
- **fixed** — Fix watching password protected live
- **fixed** — Fix password submit button theme in embed
- **fixed** — Fix Invalid width to find appropriate image error in embed
- **fixed** — Fix responsive embed in custom markup used to build the instance homepage
- **fixed** — Prevent serving invalid segment JSON file for lives
- **fixed** — Fix broken control bar when hovering the progress bar on small players
- **fixed** — Correctly detect unlisted privacy from remote objects
- **fixed** — Abort request on invalid HTTP digest
- **fixed** — Correctly take into account count: 0 in SQL requests

###### SECURITY

 * Fix P2P segment validator to correctly reject invalid chunks
 * Forbid embed for videos with embed restrictions if the referer header is not set
 * Redact OAuth tokens in debug logs
 * Add max depth when fixing ActivityPub object

###### Bug fixes

 * Fix iOS mobile link for channels
 * Fix input placeholder font size
 * Correctly remove a private video linked to an abuse
 * Do not validate search filters on "Enter" press in tag inputs
 * Improve client notification if the backend returns a 502 HTTP error
 * Fix various UI bugs/inconsistencies on RTL layout
 * Fix watching password protected live
 * Fix password submit button theme in embed
 * Fix "Invalid width to find appropriate image" error in embed
 * Fix responsive embed in custom markup (used to build the instance homepage)
 * Prevent serving invalid segment JSON file for lives
 * Fix broken control bar when hovering the progress bar on small players
 * Correctly detect unlisted privacy from remote objects
 * Abort request on invalid HTTP digest
 * Correctly take into account `count: 0` in SQL requests
 * Hide live scheduled date for past dates
 * Fix infinite loop with S3 pagination
 * Correctly dedupe refresh remote objects jobs
 * Do not run scheduled jobs more than needed
 * Consume all job attempts before throwing an error for move to object storage/file system job
 * More robust live ending handler
 * Fix TOCTOU race when starting a live session
 * More precise live quota exceeded checker
 * Fix live cleanup race issue
 * Correctly cleanup tmp directory when handling runner job files
 * Fix stalled request when rejecting auth for socket endpoints
 * Fix non-settled promise in video download endpoint when the user closes the stream
 * Correctly match plugin websocket routes
 * Don't crash video import if youtube-dl doesn't return a date
 * Correctly extract mentions followed by a punctuation/newline