Build 9777 (Oct 8, 2026)
Question asked by kevind - Today at 6:04 AM
Unanswered
Share your experience with this new build!
  • Changed: Improved path validation for domain configuration settings.
  • Fixed: [HA] Toggling the Legacy SOAP API in System Settings -> General gives a 403 error.
  • Fixed: A CardDAV synchronization issue when a contact resource ends with a slash.
  • Fixed: Attendees cannot accept changed recurring appointments made in UTC+1 Amsterdam using Outlook (MAPI).
  • Fixed: Clicking "Invite All to Appointment" on an email does not populate the attendee list on the new appointment.
  • Fixed: Remote Spam Assassin and Remote Rspamd dialog boxes point to the same help link.
  • Fixed: Secure connections could serve an incomplete SSL/TLS certificate chain in certain conditions.
  • Fixed: Users can't subscribe to a calendar URL link that points to an internal IP address.
  • Fixed: Windows installer continues to run after the install completes.
  • Efficiency: Improved Windows installer delays on install/upgrade for Windows 2025.
  • Security: A domain administrator's login tokens are rejected after the account is demoted.
  • Security: Fixed a domain alias permission issue affecting domain administrators.
  • Security: Fixed a privilege-escalation issue in system administrator Two-Factor Authentication.
  • Security: Hardened access checks around attached file removal.
  • Security: Hardened access checks for shared folders across domains.
  • Security: Hardened Docker images with the latest OS security patches.
  • Security: Hardened XSS validation in HTML sanitization.
  • Security: Protocol logins now reject an expired password until it is changed in webmail.
  • Security: Security and reliability improvements for administrator Event hooks.

Reply to Thread

Enter the verification text