LoginSign Up
← Back to all sparks
E

EGroupware

COLLAB
Velocity5.0

Online groupware suite with calendar, contacts, projects and file management

www.egroupware.org ↗

EGroupware's November release pairs critical security fixes with full Stalwart mail-server support.

groupwaresecurityemailself-hostedstalwart
◆Current state
EGroupware ships a 26.x release every week or two, and almost every one carries security fixes; the 12 November release is flagged with multiple critical ones. That release also adds full Stalwart v1.0 support with account syncing, ends all other sessions when a password is changed or reset, and makes printing long lists about 10x faster. The 23.1 branch closed on 21 October, so 26 is now the only supported line.
◆Where it's heading
Two threads run through the autumn releases: a steady stream of security patches and continued mail work (unseen mail on top, large-recipient warnings, invoice OCR, now Stalwart). The UI is also being modernised, with edit dialogs moving off tables to responsive layouts. The Stalwart integration points to EGroupware pairing itself with a specific self-hosted mail server rather than staying a generic IMAP client.
◆Prediction
Expect the next 26.x release within two weeks with more security fixes, and further Stalwart-related mail features following the v1.0 integration.

◆Recent moves

  1. 1d ago

    Critical security fixes plus full Stalwart v1.0 mail support

    Another release led by critical security fixes, but with more user-facing change than usual: full Stalwart v1.0 support with account syncing, password changes that log out every other session, 10x faster printing of long lists and responsive edit dialogs. It extends the mail-focused feature work of October.

    View source ↗
  2. 14d ago

    26.10.20261030 fixes a critical flaw and TinyMCE issue

    A critical EGroupware fix and a TinyMCE patch, plus mail repairs for .eml import, CSP header failures and S/MIME-signed invites showing as plain text.

    View source ↗
  3. 23d ago

    Final 23.1 release ends the branch with security fixes

    The final 23.1 release, with a PHP 8.5.12 update and several security fixes; users are told to move to 26. It ends the old branch.

    View source ↗
  4. 23d ago

    26.10.20261021 updates PHP and fixes admin actions

    A PHP security update and one EGroupware fix, plus repairs to admin row actions broken by the previous security release and to Sent-folder handling.

    View source ↗
  5. 28d ago

    Memory-leak fixes and unseen-mail-on-top option

    Fixes memory leaks that slowed the browser over hours, adds an option to keep unseen mail on top, OpenStreetMap routing in the address book and background calendar sync.

    View source ↗
  6. 29d ago

    Security fixes plus large-recipient warning and invoice OCR

    Fixes several high and medium vulnerabilities and adds mail features: delayed mark-as-read, a warning on large recipient lists with a Bcc offer, distribution-list resolving and browser-side invoice OCR without Tika.

    View source ↗