54 Releases 58 Tags

RSS Feed

• v27.1-rc.7 26f545d1f0

  Compare

  v27.1-rc.7 Pre-Release

  jcoffey-dev released this 2026-11-02 02:27:40 +00:00 | 37 commits to main since this release

  This build failed and no image was published. Use 27.1-rc.8, which has everything here.

  The seventh release candidate of the 27.1 series: 27.1-rc.6 with one security fix.

  Security

  • Allow Directory Queries now does what it says. With the setting off, which is the default, regular users could still list and look up the other accounts on their server. Now listing and searching are refused over JMAP and WebDAV. A regular user can only look up the accounts they already have a connection to: their own, their groups, people who shared with them, and people on their own shares. Sharing follows the same rule on JMAP, WebDAV and IMAP. (#282, #283)

  Before you upgrade

  If you're on the default, regular users lose these when you upgrade:

  • directory suggestions in compose (addresses they type still send)
  • picking anyone they have no connection to in the share dialog
  • free/busy for people who haven't shared with them
  • starting a share with someone new, in any client

  People already on a share keep it, and it can still be changed or removed.

  To keep all of that, turn on Settings › Sharing › Allow Directory Queries. With it on, nothing changes. Accounts allowed to list accounts aren't affected either way.

  An IMAP connection keeps the settings it started with, so a change to this setting reaches it when it reconnects.

  Run this with inbuxa-webmail 27.1-rc.3, which shows names on shares and explains missing free/busy when the setting is off.

  Everything in 27.1-rc.6 is here too, inbuxa Relay and migrations included. inbuxa Relay ships from this tag as registry.coffeylabs.org/inbuxa/inbuxa-relay:27.1-rc.7 and as static binaries with .sig files; run it with the server release of the same version.

  Container image: registry.coffeylabs.org/inbuxa/inbuxa-server:27.1-rc.7, also tagged :27.1-rc. :latest stays on 2026.x until 27.1 ships.

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)