App Suite Releases
  • 8.35
  • 7.10.6
Imprint
  • 8.35
  • 7.10.6
Imprint
  • Release 8.37
  • Release 8.36
  • Release 8.35
  • Release 8.34
  • Release 8.33
  • Release 8.32
  • Release 8.31
  • Release 8.30
  • Release 8.29
  • Release 8.28
  • Release 8.27
  • Release 8.26
  • Release 8.25
  • Release 8.24
  • Release 8.23
  • Release 8.22
  • Release 8.21
  • Release 8.20
  • Release 8.19
  • Release 8.18
  • Release 8.17
  • Release 8.16
    • Changelogs
      • App Suite UI
      • App Suite Middleware
  • Release 8.15
  • Release 8.14
  • Release 8.13
  • Release 8.12
  • Release 8.11
  • Release 8.10

App Suite Middleware

8.16.50 - 2023-08-22

Fixed

  • MWB-2266: Hard timeout of 1h for tracked requests of any kind & hard timeout of 60 seconds for mail compose related communication with primary mail backend

8.16.46 - 2023-08-09

Security

  • MWB-2261: CVE-2023-29048

8.16.0 - 2023-08-01

Added

  • ASP-131: Implemented a MailExportService that converts e-mails to PDFs
    • SCR-1235: Introduced a new action to the 'mail' module for exporting mails as PDFs
    • SCR-1236: Introduced new properties for the MailExportService
    • SCR-1237: Introduced new properties for the CollaboraMailExportConverter
    • SCR-1238: Introduced new properties for the GotenbergMailExportConverter
    • SCR-1239: Introduced new properties for the CollaboraPDFAConverter
    • SCR-1240: Introduced a new capability to activate the PDF MailExportService
  • MW-2036: added contact collector documentation
  • MW-2073: Log any HTTP header
  • MWB-2238: allow to configure a purge folder for trash deletion
    • The property com.openexchange.imap.purgeFolder allows to configure a parent folder for renamed trash folder. If one of those folders is configured then the trash is not deleted by the middleware itself.
  • Add missing configuration for new packages

Changed

  • Improve markdown for core-mw chart
  • MW-1862: Upgrade encrypted data dynamically during usage
    • Throw exception if legacy encryption is detected in CryptoService
    • Services/storages detect legacy encryption by this exception and recrypt secrets themselves (by using async task)
    • If shared item protected by secret with legacy encryption is accessed, use LegacyCrypto and log this event (not possible to recrypt here)
    • When users logs in, all items shared by him are collected and checked if secrets needs to be recrypted
  • SCR-1233: Update encryption for passwords of anonymous guest users
  • MW-1840: Reworked the CryptoService
    • changed the encrypting algorithm to AES/GCM/NoPadding
    • deprecated the encrypt and decrypt methods with the old mechanisms
    • removed default salting - Now callers are responsible for their salts
    • introduced fallbacks for the old mechanics
    • MW-1894: moved CryptoUtil to c.o.java, replaced all instances of SecureRandom with the centralised version
  • MW-1861: Use Implicit Salt in CryptoService
    • Utilise argon2i for password hashing
    • Use the legacy crypto for the Key-based methods
    • Let the callers dictate the byte size for salt and iv
    • Use a 96bit key for IV
    • Re-create secure random after a specified amount of time
    • Use implicit salt and IV in CryptoService
  • SCR-1252: Updated Netty NIO libraries from v4.1.89 to v4.1.94
  • SCR-1247: Updated pushy library from v0.15.1 to v0.15.2
  • SCR-1245: Updated metadata-extractor from v2.17.0 to v2.18.0
  • SCR-1253: Updated lettuce library from v6.2.3 to v6.2.5
  • SCR-1246: Updated Google Guava from v31.1 to v32.1.1
  • SCR-1231: Updated OSGi target platform bundles
  • MWB-2208: Do log possible IMAP protocol errors while trying to acquire a part's content
  • SCR-1255: Updated Apache Tika library from v2.6.0 to v2.8.0
  • SCR-1256: Upgraded Javassist to 3.29.2-GA
  • SCR-1244: Updated htmlcleaner from v2.22 to v2.29
  • SCR-1243: Updated dnsjava from v3.5.1 to v3.5.2

Removed

  • SCR-1254: removed support for content_disposition=inline and delivery=view parameter

Fixed

  • MWB-2258: Adjust 'credentials' table for enhanced crypto service
  • SCR-1267: Extend password columns in db to store encrypted passwords
  • MWB-2253: removed unused import
    • to fix not working imageconverter and documentconverter
  • MWB-2252: Keep possible HTML comment markers when examining CSS
  • MWB-2251: Prefer configured call-back URL regardless of
    • applicable dispatcher prefix
  • MWB-2186: The upload of big files gets slower and slower (against MW 8.x)
  • properly load reseller service on demand
  • MWB-2228: Move EventsContactHalo into com.openexchange.halo.chronos bundle
  • MWB-2221: Append additionally available plain text content to existent one
  • MWB-2184: Add support for extraStatefulSetProperties and make use of ox-common.pods.podSpec
  • MWB-2240: Don't output inline images as attachment
  • MW-2203: Omit OS version for web clients
  • MWB-2228: Move contact halo into com.openxchange.server bundle
  • MWB-2231: Confirmation buttons not working when inviting a person to a series exception
  • MWB-2248: Pass proper range when querying messages from contained sub-accounts if Unified Mail
  • MWB-2227: Attendee cannot be re-invited to occurrence of event series
  • MWB-2233: Removed ulimit configuration from start script
  • MWB-2241: Lowered log level to DEBUG when moving active/idle sessions to first short-term session container
  • MWB-2223: convert all images with CID for the html body
  • MWB-2210: Consider virtual folders when getting attachments through chronos module
App Suite UI