SmarterMail Build 9735

Tweet

Build 9735

• IMPORTANT: App Passwords were regenerated to a new security scheme. Anyone using App Passwords created prior to Build 9735 will need to enter a new App Password in order to use any 2FA-enabled account in a desktop or mobile client.
• Added: [HA] [HUB] Force 2FA for new Cluster Administrators.
• Added: Aliases can now be enabled or disabled.
• Added: Auto-Clean setting for mailing list "Previously Sent Messages".
• Added: CC: conditions for content filters.
• Added: Import and export features for trusted domains and trusted senders for domains.
• Added: The ability to disable a Content Filter.
• Changed: [HA] [HUB] Webmail login customization consistency changes.
• Changed: Calendar, tasks, contacts, and notes now show their subject when deleting.
• Changed: Updated ClamAV to version 1.5.4.
• Changed: Updated webmail folder alignment for folders that contain subfolders.
• Fixed: [HA] [HUB] Aliases for split domains don't show in GAL for Contacts.
• Fixed: [HA] [HUB] An issue where an administrator is unable to save a Whitelist entry.
• Fixed: [HA] [HUB] Cluster Administrator grid is missing the column for IP Restrictions.
• Fixed: [HA] [HUB] Cluster Administrators can adjust their own settings when "manage secondary administrators" is disabled.
• Fixed: [HA] [HUB] New cluster could get the hostname from the server's network search domain instead of the DNS suffix from the setup wizard.
• Fixed: [HA] [HUB] New System Administrator 2FA setup never enables the Next button.
• Fixed: [HA] [HUB] Settings page is not saving File System Restrictions.
• Fixed: [HA] [HUB] Wizard can create an unclear state for the hub.
• Fixed: [HA] Areas where our lock logging was logging too much.
• Fixed: [HA] Cluster Administrators are not being cleared from memory when they're deleted.
• Fixed: [HA] Clustered hubs perform redundant leader checks that generate excessive logging.
• Fixed: [HA] New cluster administrators are unable to manage nodes initially.
• Fixed: [HA] When adding more than a single IP restriction for Cluster Administrators, the IP is cached.
• Fixed: Attachment content filters always trigger if there are three or more attachments.
• Fixed: Authentication endpoints are incorrectly returning a 'refreshToken' when no clientId is provided.
• Fixed: Autoresponder check is not performed on the correct day in some conditions.
• Fixed: Calendar events displaying one hour ahead in '(UTC+01:00) Amsterdam, Berlin, etc' in Outlook.
• Fixed: Cluster status can sometimes show as Recovery when all nodes are active.
• Fixed: Connecting via 443 without specifying server name causes SSL failure.
• Fixed: Contact group profile pictures can't be retrieved using some clients [EWS].
• Fixed: Content Filter "Add Text to Subject" action can execute with emails on other domains under certain conditions.
• Fixed: EAS issue where an appointment disappears under certain conditions.
• Fixed: EAS sync issue when email headers contain NULL characters.
• Fixed: Email addresses in MIME messages can fail to parse properly when they have a display name that includes parentheses.
• Fixed: HTML editor jumps to a different location in the compose window.
• Fixed: Importing the same VCard file multiple times can show potential conflict numbers that do not match.
• Fixed: Invalid refresh token causing Brute Force by IP IDS block.
• Fixed: Mailing list digests never send to digest subscribers.
• Fixed: Message scheduling uses the browser's time zone, not the user's configured time zone.
• Fixed: Opening Calendar Appointments in rapid succession fails to load the previous appoinment.
• Fixed: Saving a whitelisted domain doesn't actually save.
• Fixed: Sending a Private calendar appointment via Outlook [MAPI] is not showing as Private for recipients.
• Fixed: Sending with an account that has non-ASCII characters in the Display Name to a mailing list strips the UTF encoding in the header.
• Fixed: SmarterMail does not trigger Rspamd learning requests.
• Fixed: Some messages are not visible when opening and closing chats in webmail.
• Fixed: System Administrator emails could show as spam with certain spam settings.
• Fixed: System level setting "Sender Priority" and domain level setting "Delivery Priority" are not applied during delivery.
• Fixed: Thunderbird desktop client [EWS] doesn't let you send messages.
• Fixed: Users do not always see the Scheduling menu item under certain conditions.
• Fixed: Users with Sharing enabled sometimes do not see the Sharing menu.
• Fixed: When selecting User Statuses from the tree menu, if you use "Export to CSV" either no users are exported on only the first nine (9) are.
• Security: An issue where attachment uploads can bypass the extension blacklist.
• Security: An issue with the legacy SOAP API.
• Security: An XSS issue.
• Security: Authenticated users had elevated permissions in some instances.
• Security: Issued a couple of path traversal fixes.
• Security: Login failures can allow user enumeration.
• Security: Password-reset links are not reliably expired at redemption.