BM-23976: Fixes: When the network context changes, if the BlueMind client (Electron) is not restarted (and remains open), emails may no longer be sent, with a draft becoming stuck in a state where it cannot be saved, thereby preventing all other drafts from being saved.
BM-24004: Fixes: Loss of an email saved in .msg format when dragged and dropped onto an appointment in Outlook.
BM-24250: Fixes: Confirming a calendar event causes the event to disappear in Outlook.
BM-23321: Fixes: Duplicate entries in the mapping of properties named ‘Outlook’ (pidmapping), which could prevent the installation upgrade from completing.
BM-21721: Fixes: Loss of organizer on single appointment.
Fixes: Inability to attach a file that has already been attached to an event when the user does not have the permission to link files, and the removal of existing attachments from the event.
Fixes: A meeting may end up with no organiser or participants when Outlook sends a meeting request without an username.
Fixes: A contact search in the global directory could, for example due to a typo in an address, return all records in the domain, causing significant slowdowns in Outlook.
Improved reliability and performance of searches in the Global Address List (GAL) from Outlook during periods of high concurrent usage.
BM-24151: Fixes: Loss of the assistant, car, radio and company telephone number fields in contact records when synchronising from BlueMind to a mobile device.
BM-24153: Fixes: Calendar synchronisation (reminder not synchronised, errors with annual and monthly recurring events, organiser incorrectly added to the list of attendees, attendee statuses).
BM-24154: Fixes: Description of synchronised tasks.
BM-24159: Fixes: The reminder was not synchronised for a one-off occurrence of a recurring event.
Feature: The mail app management tab for a user or a shared mailbox now allows you to manage delegations for that user or mailbox.
See the relevant sections:
Numerous reliability fixes for server cloning that could have led to data loss or a complete halt to the cloning process: user settings not restored, shared mailbox folders incorrectly reconstructed, organizational units or groups deleted but mistakenly recreated after cloning, freezes caused by concurrent access during restoration.
The sequential cloning mode (tail) now restores changes made after cloning began: system configuration, backup retention policy, scheduled jobs, API keys, Outlook MAPI named properties and the global administrator’s MFA username.
Fixes: Cloning failure during monitoring installation.
Fixes: Postfix rejecting emails addressed to mailboxes that have just been restored at the very end of the cloning process.
Improvement: Added a feature allowing user sessions to be transferred from one server to another, thereby avoiding a forced reconnection when switching servers.
(Critical): Sorting of emails and conversations now only accepts known columns. An unknown column is rejected with the error INVALID_PARAMETER.
(High): the resolution of external entities and DTDs is disabled in the XML parsers of the DAV server (CalDAV/CardDAV), in net.bluemind.utils.DOMUtils (CAS, MAPI), in the MAPI tags and in the BigBlueButton client.
(Critical): Queries on scheduled jobs pass the domain as a bound parameter. A domain administrator can now only see runs within their own domain.
(Medium): The directory (AD/LDAP) password cache is cleared every time a password is changed in BlueMind. It now stores an HMAC hash instead of the plaintext password. Its duration can be set using core.security.directory-password-cache-ttl (maximum 20 minutes). (BM-24181)
(Minor): Only the global administrator can change the AD import type (DC/GC). (BM-24217)
(Medium): The BM* identity headers sent by the client are removed before processing.
(Hardening): requests for file sharing and password expiry now use related parameters.
(Medium): The web proxy now denies access to /grafana/metrics. This issue exposed Grafana’s internal metrics without authentication; local data collection via Alloy is not affected.