از آخرین باری که ما نسخه جدید Kerio Connect رو در اختیارتون قرار دادیم، دو تا release جدید ارائه شده که به علت حجم بسیار بالای کاری ما در این مدت فرصت نشده بود که باهاتون به اشتراک بذاریم. امروز نسخه آخر از این میل سرور خوش ساخت و کاربرپسند رو در اختیارتون میذاریم.
تغییرات اتفاق افتاده از 10.0.7p1 تا به این نسخه خیلی زیاد نبوده و ما ذیلاً به نقل از وب سایت رسمی شرکت GFI این تغییرا رو براتون آوردیم.
Version 10.0.9p2
Security fixes
Closed a Webmail vulnerability where nested anchor <a> tags could be injected when rendering HREF links.
Removed the obsolete legacy “nano” Webmail interface, eliminating an unmaintained surface and its associated exposure.
Strengthened the file-system permissions on the Kerio Outlook Connector Offline Edition installer folders to close a local privilege-escalation issue.
Bug fixes
Fixed inbound delivery of duplicate messages, seen with Gmail senders when the Spam Repellent greeting delay is enabled. Inbound de-duplication of repeated messages is now enabled by default.
Fixed large-body messages not being scanned by the spam filter. The spam-filter message size limit has been raised from 1 MB to 8 MB.
Fixed calendar synchronization for the VMware Boxer app on iPhone and Android devices.
Fixed renewed Kerio Connect license activation failing with “unable to load new license file” via both registration update and license.key import, including on fresh installs.
Fixed the Spam log view displaying thousands of garbage rows after clearing the log once log rotation had occurred. The view now empties correctly without requiring a service restart.
Fixed the Agent log being impossible to clear from WebAdmin after integrating Kerio Connect with GFI AppManager.
Fixed the KOFF add-in (KoffAddin.dll) shipping without a digital signature, which caused Microsoft Outlook to display a security warning on startup.
Fixed the KOFF Windows installer being published without a digital signature; the DigiCert code-signing chain has been restored.
Fixed the KOFF default signature not being retained after saving on recent Outlook builds.
Fixed KOFF not closing cleanly during an upgrade, which could interrupt the update.
Fixed a crash when an ActiveSync client sent a malformed calendar location. Out-of-range coordinates are now handled gracefully.
Fixed the two-factor-authentication cookie verification message being logged at error level instead of debug.
Fixed the KOFF default signature not being retained after saving on recent Outlook builds (Note: Remove and recreate Outlook profile to apply this fix.)
—
Version 10.0.9
Resolved agent log locking issue
Fixed a regression with default email signatures not saving in Outlook Connector (Remove and Recreate the Profile)
Implemented TCP fallback for truncated DNS responses
Resolved misleading 2FA cookie token verification error messages
Fixed security issue where allowed relay IPs bypass spam filtering
Enhanced licensing enforcement during Active Directory synchronization
Prevented GFI Agent from auto-enabling after upgrades
Improved SMIME certificate handling for encrypted messages
Fixed calendar file (.ics) preview encoding in Outlook Connector – (Remove and Recreate the Profile)
“All Folders” Search feature fixed in New Connect UI
Removed Kerio Connect Nano
Enhanced Exchange Web Services (EWS) compatibility for third-party clients, fixing the following:
Error 108: “Not implemented only CategoryList configuration is supported” (GetUserConfiguration)
Error 339: “Only traversal type Shallow is supported” (FindItem)
Error 339: “Unsupported restriction type” (Filtering Operations)
Added RFC 8058 compliance by including List-Unsubscribe headers in DKIM signatures for one-click unsubscribe support
—
Version 10.0.8p2
Closed a Webmail cross-site scripting (XSS) vulnerability where a specially crafted SVG email attachment could execute scripts when opened. Script execution is now disabled for downloaded content
Resolved the signing of the Updater service.
Resolved the signing of KOFF Internal binaries:
DbBackup.exe
kassist.exe
KoffRtfWrapper.exe
ProfileCreator.exe
KoffBackend.exe
—
Version 10.0.8p1
Resolved issues with KerioConnect backup process
—
Version 10.0.8
macOS Compatibility Fix: Restored attachment preview functionality for macOS 12 and higher.
Security Enhancement: Patched Cross-Site Scripting (XSS) vulnerability in the web interface to strengthen security.
Firefox Display Improvement: Added missing scroll bars in the web admin logs area for better navigation.
Webmail Attachment Support: Fixed display issues with EML attachments from Mailstore in webmail.
Security Logs Stability: Resolved errors that occurred when clearing security logs.
Let’s Encrypt Certificate Management: Fixed automatic renewal issues that caused missing or duplicate certificates across multiple domains.
GFI KerioConnect Client Enhancement: Resolved issue where pasting inline images from clipboard was not functioning properly.
Calendar Event Editing: Fixed the inability to edit Calendar event descriptions in Webmail.
همون طور که قبلاً هم توی پست های نسخه های قبلی صحبت شد، توصیه ما عدم نصب و یا حذف AppManager یا همون GFI Agent هست.
اگه مایل نیستید که در طول نصب GFI Agent نصب بشه می تونید توی hosts file تون رکورد زیر رو قبل از اقدام به نصب اضافه کنید تا Installer نتونه وصل بشه و دانلودش کنه.
127.0.0.127 appmanager.gfi.com
اگه هم احیاناً فراموش کردید و نصب شده با این دستورات میتونید حذفش کنید:
Windows
"C:\Program Files\GFIAgent\GFIAgentUninstaller.exe" "kerioconnect" "C:\Program Files\Kerio\\"
Linux
/usr/local/gfiagent/GFIAgentUninstaller kerio-connect /opt/kerio/ rm -rf /opt/kerio/GFIAgent
مثل نسخه قبلی، توی این نسخه هم یه فایل README هست که نحوه کرک کردن رو توضیح داده.
بعد از اعمال کرک، فایل لایسنس رو به نرم افزار بدید تا فعال بشه.
امیدوارم که بتونه برای همراهان و همکاران عزیز مفید واقع بشه.
