App Suite Releases
  • 8.47
  • 8.35
  • 7.10.6
Imprint
  • 8.47
  • 8.35
  • 7.10.6
Imprint
  • Release 8.50
  • Release 8.49
  • Release 8.48
  • Release 8.47LTS
  • Release 8.46
  • Release 8.45
    • Noteworthy Changes
      • Important Changes
      • App Suite Middleware
    • Changelogs
      • App Suite UI
      • App Suite Middleware
      • Additional Components
        • AI Service
        • OX Guard UI
        • Switchboard
    • Helm Charts
      • AI-Service documentation
      • App Suite Stack Chart
      • Helm Chart core-cacheservice
      • Helm Chart core-documentconverter
      • Helm Chart core-imageconverter
      • core-mw
      • Switchboard
  • Release 8.44
  • Release 8.43
  • Release 8.42
  • Release 8.41
  • Release 8.40
Maintained. Older releases are best effort.
Upcoming
Not released yet
LTS
Long-term support branch

App Suite Middleware

8.45.112 - 2026-04-22

Fixed

  • Prevent possible IMAP injection vulnerability

8.45.111 - 2026-04-16

Changed

  • Ensure consistent connection pool state

Fixed

  • PBSR-1664: Orderly consider mail login resolver when dealing with a user's ACL name

8.45.110 - 2026-04-15

Fixed

  • PBSR-1664: Orderly consider mail login resolver when dealing with a user's ACL name

8.45.109 - 2026-04-15

Changed

  • SCR-1691: Added command-line tools for mail signatures

8.45.108 - 2026-04-02

Fixed

  • Dont remove commit SHA

8.45.107 - 2026-04-02

Fixed

  • Removed accidental debug output remnants
    • Fixed: Removed accidental debug output remnants -

8.45.105 - 2026-03-30

Fixed

  • Don't drop stack trace if "includeStackTraceOnError=true" is present in request parameters

8.45.104 - 2026-03-26

Fixed

  • Detect Java version without additional JVM options

8.45.102 - 2026-03-25

Fixed

  • Keep user in recipient list when replying to a mail in a shared folder

8.45.100 - 2026-03-18

Fixed

  • Orderly keep URIs to external images

8.45.99 - 2026-03-17

Fixed

  • Ignore possible "file not found" error when moving entity-associated files due to deletion of that entity (e.g. user deletion)

8.45.97 - 2026-03-12

Added

  • Allowing to enable IMAP trace logging by request

8.45.96 - 2026-03-11

Fixed

  • Special handling when replying to a mail in a shared folder

8.45.95 - 2026-03-10

Changed

  • Some refactoring for Redis health check

Fixed

  • Added alternative faster symmetric encryption for less security use cases & rather fail-fast behavior for Reids connector policies

8.45.94 - 2026-03-04

Fixed

  • Pass proper thread context map on logout of a DAV session

8.45.92 - 2026-03-04

Fixed

  • Use more robust compare-and-set implementation when acquiring a unique sequence identifier

8.45.91 - 2026-03-04

Fixed

  • Added retry behavior in case a recoverable SQL error occurs that suggests restarting
  • Orderly consider user/context information when evaluating "com.openexchange.mail.filter.activated" property

8.45.90 - 2026-03-03

Fixed

  • Docker image missing stable-8.x tag when pushing release image

8.45.89 - 2026-03-03

Fixed

  • Docker image missing stable-8.x tag when pushing release image
    • The git version tag was created after buildahPushAllImages ran, so
    • releaseTags() could not resolve the version and omitted the stable-8.x
    • tag. Move the local tag re-creation before the push task.
  • Avoid too many recursive calls when compiling IMAP SEARCH expression from a search term instance

8.45.88 - 2026-02-27

Fixed

  • Avoid too many recursive calls when compiling IMAP SEARCH expression from a search term instance
  • Added config option to Redis-based session storage to control execution of timer tasks

8.45.87 - 2026-02-27

Fixed

  • Added config option to Redis-based session storage to control execution of timer tasks

8.45.82 - 2026-02-24

Added

  • INF-581: Always apply default HTTP headers in WebDAV responses, including new 'X-Powered-By' header
    • Added: INF-581: Always apply default HTTP headers in WebDAV responses,

8.45.81 - 2026-02-23

Fixed

  • IOL-2841: Periodically touch composition space cache during file upload to ensure it does not vanish from cache

8.45.78 - 2026-02-12

Fixed

  • Drop invalid deputy permissions from result set - /appsuite/platform/core/-/issues/459

8.45.77 - 2026-02-10

Changed

  • Don't fail during mail compose if a referenced image could not be found - appsuite/support#1146

8.45.76 - 2026-02-06

Fixed

  • Remember reply headers in composition space's meta data - /appsuite/platform/core#455

8.45.75 - 2026-02-05

Changed

  • Don't fail during mail compose if a referenced image could not be found - /appsuite/support#1146

8.45.73 - 2026-01-28

Fixed

  • Dropped Eclipse Collections and any of its usages - /appsuite/platform/core#450

8.45.72 - 2026-01-26

Fixed

  • Orderly handle possible "user not found" error when looking-up by mail login string - appsuite/support#994

8.45.71 - 2026-01-23

Fixed

  • Drop superfluous "InitialTombstoneCleanupUpdateTask" update task since there is a periodic execution - /appsuite/platform/core#448

8.45.70 - 2026-01-22

Fixed

  • Do not treat such inline images as extra images that are already referenced in HTML content - /appsuite/platform/core#445
  • Avoid excessive parsing of corrupt E-Mail address string - /appsuite/platform/core#447

8.45.69 - 2026-01-20

Fixed

  • Translations for bug: Scheduled mail failure notification body wrong
    • Relates to https://gitlab.open-xchange.com/appsuite/platform/core/-/issues/437

8.45.68 - 2026-01-15

Fixed

  • Use a more general headline just hinting to a problem while attempting to send a scheduled mail - /appsuite/platform/core#437

8.45.64 - 2026-01-13

Fixed

  • Detect & drop harmful content in CDATA section - /appsuite/platform/core#438

8.45.63 - 2026-01-12

Fixed

  • Mark such scheduled mails as failed (and thus no further transport attempts) for which the transport attempt failed; e.g. SMTP error - [#430]
  • Added documentation for available configuration settings for snoozed mail feature - /appsuite/platform/core#439

8.45.62 - 2026-01-09

Fixed

  • Correctly recognize retry transaction exception and partake in surrounding retry/backoff strategy when saving attachment metadata - /appsuite/platform/core#427

8.45.61 - 2026-01-09

Fixed

  • Insert appropriate information into notification mail in case no further attempt is made to transport a scheduled mail - /appsuite/platform/core#437

8.45.60 - 2026-01-08

Fixed

  • Mark such scheduled mails as failed (and thus no further transport attempts) for which the transport attempt failed; e.g. SMTP error - [#430]
  • Prefer possibly configured personal part for special no-reply address - /appsuite/platform/core#436

8.45.59 - 2025-12-16

Fixed

  • Obey 'separateTransactionForSequenceIds' setting and partake in surrounding retry/backoff strategy when saving attachment metadata - /appsuite/platform/core#427
    • Fixed: Obey 'separateTransactionForSequenceIds' setting and partake in

8.45.55 - 2025-12-11

Fixed

  • Orderly count read bytes from spooled file, properly encode ATTACH properties with Base64 encoding - /appsuite/platform/core#424
    • Fixed: Orderly count read bytes from spooled file, properly encode
    • core424, it is
    • 424...
    • test bigger attachments

8.45.52 - 2025-12-10

Fixed

  • Added backticks around otherwise interpreted input - /appsuite/platform/core#422

8.45.49 - 2025-12-04

Fixed

  • Follow-up to also accept URL parameters w/ empty value - /appsuite/platform/core#400
  • Drop all deputy-associated permissions from mail folders - /appsuite/platform/core#416
  • Keep valid %XX sequences in path of an URI - /appsuite/platform/core#419

8.45.48 - 2025-12-03

Added

  • Added mail snooze feature - /appsuite/platform/core86

Changed

  • SCR-1625: Updated Caffeine caching library and Google Guava
  • SCR-1626: Added Eclipse Collections
  • SCR-1627: Added possibility to specify max. days in future as limitation for the date to send of a scheduled mail
  • SCR-1628: Updated several libraries for newest fabric8 client
  • Updated core-mw chart dependencies
    • Updated Gotenberg image to v8.25.0
    • Updated Collabora image to v25.04.7.2.1
    • Updated Collabora chart to v1.1.53
  • Use a description model when performing update to check what shall be changed and what not - /appsuite/platform/core#405
  • Orderly gather resources when handling addressbook-multiget request - /appsuite/platform/core#410
  • Added to "allowedProtocols" to HTML white-list JSlob entry - /appsuite/support#939
  • Added plausibility check to issued LIST "" "*" command against IMAP server (expect at least "INBOX" to be present) - /appsuite/support#966
  • Improved returned error code for invalid parameter value - /appsuite/support#975
  • Minor improvement for the attachment storage clean-up query - /appsuite/support#985
  • Don't query all attendee field when resolving event(s) by UID - /appsuite/support#986
  • Orderly handle possible "user not found" error when looking-up by maiul login string - /appsuite/support#994
  • Proper counting of borrowed IMAP store instances - /appsuite/support#1012

Fixed

  • CIC-930: Orderly add newlines when having multiple secret context sets
  • Delete tombstone entries in chunks
    • This limits the size of simultaneously loaded tombstone entries to 10k and therefore preventing overloads if the size is extremely big
  • Ensure IMAP folder is really not existent through dedicated LIST commands - /appsuite/platform/core#375
  • Use retry mechanism when encountering special optimistic concurrency conflict - /appsuite/platform/core#381
  • Orderly process locally held inline images to have a "Content-Id"-referencing "src" attribute - /appsuite/platform/core#382
  • Properly recognize guest calendar user in public folder - /appsuite/platform/core#395
  • Dont delete foreign folder appsuite/platform/core#396
  • Also allow TLDs as specified in RFC 6761 - /appsuite/platform/core#398
  • Ignore failure to retrieve the metadata for a \NoSelect mailbox - /appsuite/platform/core#399
  • Do not double URL-encode valid %XX sequences - /appsuite/platform/core#400
  • Use an alternative polling-based watcher for changed k8s secret - /appsuite/platform/core#402
  • Introduced possibility to let liveness fail, when health/readiness check failed consecutively for more than a configured duration - /appsuite/platform/core#406
  • Avoid auto-creation of optional default Drive folder (Documents, Videos, Music, ...) - appsuite/platform/core#407
  • Corrected invocation of legacy (PIM) event queue and adjusted its logging behavior - /appsuite/platform/core#408
  • Use improved hash calculation for a folder name to avoid possible collisions - /appsuite/platform/core#409
  • Chunk-wise output of resources in calendar- and addressbook-multiget report exceeding configured limits - /appsuite/platform/core#410
    • SCR-1634: Changed Semantics for 'com.openexchange.carddav.addressbookMultigetLimit' and 'com.openexchange.caldav.calendarMultigetLimit'
  • Drop invalid deputy permissions from result set - /appsuite/platform/core#411
  • Read proper command-line tool parameter on secondary account creation - /appsuite/platform/core#412
  • Enforce HTML sanitization if output view is set to "document" - /appsuite/platform/core#413
  • Lowered log level for annoying log message - /appsuite/platform/core#414
  • Still offer to accept party crasher from outdated REPLY - /appsuite/platform/core#415
  • Lowered log level to DEBUG if exception indicates an invalidly configured no-reply transport - /appsuite/platform/core#417
  • Use "DELETE ... JOIN" statement to drop duplicate entries from "ratelimit" table - /appsuite/platform/core#418
  • Corrected exception message argument order when importing to an incompatible parent folder - /appsuite/support#983
Prev
App Suite UI
Next
Additional Components