On this page
Version published 2026/05/28
Changelog published on 2026/05/28
Calendar
BM-23764 : Fixes: Changes to event date and time were not being applied.
BM-23717 : Fixes: Removing a user's access to a shared mailbox causes errors.
Outlook / MAPI
BM-22392 : Fixes: Emails sent using SendOnBehalf instead of SendAs from Outlook.
BM-23206 : Fixes: A user without access rights to a shared mailbox can add it to their Outlook.
BM-23719 : Fixes: Shared mailboxes were no longer accessible via automatic mounting.
Performance: Optimized download speed.
Administration
Administration console
BM-23738 : Fixes: Adding a read-only mailbox in Outlook "breaks" the user profile — backport of permissions with the "inactive in Outlook" flag.
BM-23747 : Fix: Added the note "inactive in Outlook" to the relevant sharing rights for shared mailboxes in the old version.
Dataprotect
BM-23701 : Fix: The mailbox hierarchy resulting from a full restore of a shared mailbox (old version) should not be located in the restored-XXXX subfolder, as is the case with a restore of emails only.
Milter
BM-23721 : Fixes: It was possible to send emails using an external identity without having the role that authorizes it.
BM-23740 : Fixes: Crash issue when the disk is full.
FEATBL-3587 : Performance:
Reduced memory usage at startup
Gradual release of memory during transfers.
Reduction in the number of temporary objects created in memory during data transfers.
Scheduled jobs
BM-23651 : Fixes: Scheduled jobs getting stuck.
Security
Upgrades:
PostgreSQL 17.10
NginX 1.30.1 - fixes the following CVEs (since 1.23.4):
CVE-2024-7347
CVE-2024-24989
CVE-2024-24990
CVE-2024-31079
CVE-2024-32760
CVE-2024-34161
CVE-2024-35200
CVE-2025-23419
CVE-2026-1642
CVE-2026-27651
CVE-2026-27654
CVE-2026-27784
CVE-2026-28753
CVE-2026-28755
CVE-2026-32647
CVE-2026-40460
CVE-2026-40701
CVE-2026-42934
CVE-2026-42926
CVE-2026-42945
CVE-2026-42946