Version 10.0.8p2

Released: November 28, 2025

• Closed a Webmail cross-site scripting (XSS) vulnerability where a specially crafted SVG email attachment could execute scripts when opened. Script execution is now disabled for downloaded content
• Resolved the signing of the Updater service.
• Resolved the signing of KOFF Internal binaries:
  • DbBackup.exe
  • kassist.exe
  • KoffRtfWrapper.exe
  • ProfileCreator.exe
  • KoffBackend.exe

Version 10.0.8p1

Released: September 3, 2025

• Resolved issues with KerioConnect backup process

Version 10.0.8

Released: August 27, 2025

• macOS Compatibility Fix: Restored attachment preview functionality for macOS 12 and higher.
• Security Enhancement: Patched Cross-Site Scripting (XSS) vulnerability in the web interface to strengthen security.
• Firefox Display Improvement: Added missing scroll bars in the web admin logs area for better navigation.
• Webmail Attachment Support: Fixed display issues with EML attachments from Mailstore in webmail.
• Security Logs Stability: Resolved errors that occurred when clearing security logs.
• Let’s Encrypt Certificate Management: Fixed automatic renewal issues that caused missing or duplicate certificates across multiple domains.
• GFI KerioConnect Client Enhancement: Resolved issue where pasting inline images from clipboard was not functioning properly.
• Calendar Event Editing: Fixed the inability to edit Calendar event descriptions in Webmail.

Version 10.0.7p1

Released: April 3, 2025

• Log Warnings Resolved: Fixed warnings for meetings without attendants when using ActiveSync.
• Printing Improvement: Addressed the issue of an almost blank page when printing from Webmail.
• Read Receipt Fix: Corrected behavior in Outlook with KOFF when multiple mailboxes are configured.
• Email Deduplication: Introduced a mechanism to prevent duplicate emails for users in multiple mailing lists.
• User Interface Enhancements: Resolved errors in the domain alias menu and improved messaging consistency in Session Security settings.
• DKIM Control Added: Implemented DKIM control in the local UI to enhance email security (before exclusive only via GFI AppManager).
• Draft Notification: Added notifications for draft saving in WebMail.
• Consistency Fixes: Aligned user creation and archived folder settings between GFI AppManager and Kerio Connect local GUI

Released: January 14, 2025

• Fixed installation issues on Debian 11 (including those in 10.0.6 P1)
• Resolved an issue in the Old Webmail UI where the interface would auto-scroll to a previously selected email after closing the search bar
• Fixed the issue of unsigned executables in version 10.0.6 P2

Released: December 3, 2024

• Fixed a damaged uninstaller in Kerio 10.0.6 build 8504 for macOS, ensuring a clean and reliable software removal process.
• Resolved an issue causing duplicate email appearances in Webmail when deleting messages through Outlook IMAP, improving synchronization between clients.
• Addressed crash issues with Kerio Connect Client 10.0.6 build 19576 on macOS Monterey, ensuring a smoother user experience.
• Restricted access to the /weblib/int/help/script.js file to mitigate a potential security vulnerability by preventing direct web access to internal resources.
• Users can download the update from download.kerio.com or use the built-in product update feature available both in local GUI and in GFI AppManager.

** This is to inform you about an important update regarding the GFI AppManager agents. Effective in two weeks, all agent versions older than 1.2.62 will no longer be supported, and their connection to the platform will be refused. This change will only impact environments where older agent versions are still in use. The current agent version is 1.2.111, and we strongly encourage you to check and update any older agents to avoid potential disruptions.

Version 10.0.6p1 

Released: November 21, 2024

Email Client Enhancements

• Fixed sender name and email address display issues in KOFF 10.0.6 (8504)
• Resolved duplicate row issues in plain text emails
• Corrected missing file extensions in attachments within Kerio Connect Client

Calendar System Updates

• Fixed time discrepancy issues in Webmail calendar entries
• Resolved German character display in calendar invitations using KOFF 10.0.6
• Improved handling of single and recurring calendar invites

Version 10.0.6

Released: October 15, 2024

New Webmail Improvements:

• Enhanced visibility for unread markers
• Resolved scaling issues with webmail settings/filters on PCs
• Fixed search options not hiding on macOS Sonoma 14.5
• Added full-screen toggle button for message composition
• Added “Save Message” button in front GUI
• Added “Reply All” button in front GUI
• Fixed email display issues (overlapping at first position in inbox)
• Corrected overlapping folder names
• Fixed column display issues in filters
• Mobile view: Resolved issues with categorizing and prioritizing emails
• Mobile view: Fixed intermittent visibility of delete mail option

The new webmail can be enabled/disabled per user in the webmail configuration.

New Feature: DKIM Validation

This feature checks the validity of DKIM signatures for incoming emails.

• Configurable via mailserver.cfg or GFI AppManager
• Variables:
  • EnableDKIMValidation: Enables/disables the feature (default: disabled)
  • DKIMDomainWhiteList: Whitelist specific domains

Note: Monitor email traffic when enabling DKIM Validation to avoid service disruption, as many domains don’t support DKIM yet.

The new webmail can be enabled/disabled per user in the webmail configuration.

Security Fixes:

• Security vulnerability in file upload process: Addressed a critical security flaw that could potentially allow malicious file uploads.

Performance and Stability Improvements:

• Memory optimization in KOFF: Improved memory usage in Kerio Offline Connector (KOFF) for better performance.
• KOFF background process delay: Fixed an issue where the KOFF background process would close with a delay.
• Kerio Connect crashes after upgrading to version 10.0.5: Resolved crashes experienced by users post-upgrade.

Email and Calendar Fixes:

• Incorrect TZID in CalDAV on macOS: Corrected time zone identifiers in CalDAV client responses.
• Multiple confirmation emails in Outlook for Mac (EWS): Fixed the issue of multiple confirmation emails being sent to the meeting invite sender.
• Rejected calendar invitations not showing comments: Comments in rejected calendar invitations are now properly displayed.
• Attachments missing in public calendar invites: Restored missing attachments in public calendar invitations.
• Old calendar cancellations triggered when folder deleted: Prevented old event cancellations from being sent when a calendar folder is deleted.
• Formatting issues in Teams invites: Corrected formatting problems with Teams invitations.
• Travel duration (X-APPLE-TRAVEL-DURATION) in iCal: Fixed invalid values in the travel duration property of iCal events.
   

Webmail and Shared Folder Issues:

• Webmail not refreshing after deleting emails from shared folder: Fixed an issue where webmail wouldn’t refresh after emails were deleted from a shared user folder.
• Multiple emails deleted in shared folder: Corrected a problem where two emails were deleted when attempting to delete one from a shared folder.
• Issues deleting items from shared folders: Resolved issues when deleting items in shared folders.
• Sync issues in IMAP for shared folders (iOS): Addressed synchronization issues with shared folders over IMAP on iOS devices.
• Reply and forward emails not syncing via Exchange ActiveSync: Fixed the issue with reply and forward email synchronization through ActiveSync.
   

KOFF (Kerio Offline Connector) Enhancements:

• Support for domain aliases and additional user emails: Added support for domain aliases and multiple email addresses in KOFF.
• Email formatting issues: Fixed email formatting issues in KOFF.
• Signature formatting issues: Resolved signature formatting issues in KOFF.
• SSL certificate errors with Let’s Encrypt: Addressed SSL certificate validation errors in KOFF with Let’s Encrypt certificates.
• Name resolution for alternative email addresses: KOFF no longer resolves names for alternative email addresses unnecessarily.
• KOFF update failure: Fixed failures during KOFF update, including the Error 1722 on Terminal Server.
• Outlook search slowness in KOFF: Improved performance of Outlook searches when using KOFF.
   

HTTPS and SSL Fixes:

• HTTP to HTTPS redirection for IPv6: Fixed redirection issues when accessing Kerio Webmail or Webadmin over IPv6.
• Let’s Encrypt auto-renewal failure: Resolved issues with the auto-renewal of Let’s Encrypt certificates.
• SSL certificate validation errors: Fixed validation errors with SSL certificates, particularly affecting Let’s Encrypt.
   

User Experience and Miscellaneous Fixes:

• Send Feedback button in Webmail: Fixed the non-functioning “Send Feedback” button in Kerio Connect Webmail.
• Notarization of MacOS installers: Addressed issues with notarizing Connect installers on macOS.
• Synchronization with shared folders on IMAP for iOS: Improved the reliability of syncing shared folders on iOS devices over IMAP.
• Auto-correct altering date formats: Fixed the issue with auto-correct incorrectly changing date formats.
• Special characters in invitations: Corrected the display of special characters in invitation emails.
• Text visibility in Outlook appointments: Fixed text visibility at the bottom of appointments in series when opened individually in Outlook.
• Numbered list formatting in Webmail: Restored proper formatting of numbered lists pasted into webmail.
• Differential backup email loss: Resolved the issue of emails missing in differential backups.
• Exchange 2016 to Kerio migration issues: Fixed user migration issues from Exchange 2016 to Kerio.
   

SMTP and Rule Handling:

• Domain forwarding in SMTP rules: Resolved issues where authentication was not considered in domain forwarding with conditional sender/recipient forwarding.
• Filter rules on DSN emails: Fixed issues where filter rules were not being applied to Delivery Status Notification (DSN) emails.

Redirect rules applied to list emails: Redirect rules are now applied to users even if the email is addressed to a list they are part of.
 

Other Fixes:

• AV Engine: Fixed startup failure due to missing DLLs
• Resolved outdated “Let’s Encrypt root certificate” issue
• Fixed Kerio Offline Connector (KOFF) auto-update failure

Version 10.0.5

Released: April 17, 2024

Fixed:

• Logging in with 2FA generates errors in the logs
• KOFF Automatic Updates not working on RDS
• Some emails not opened from within Webmail
• Only the first attachment is kept on calendar events
• Attachments missing in WebMail when added from KOFF
• KOFF preview showing incorrect characters
• CalDAV client on MacOS receives wrong time zone for calendar event
• Search folder not containing correct items in KOFF
• Multiple repeated calendar event notifications via EAS
• Attachments in calendar events created through KOFF are broken on iOS devices
• Incorrect status display on GFI AppManager registration and connectivity
• AppManager registration and removal working correctly
• Shared definitions – time range groups are not synchronized from within gfi AppManager
• Memory leak fixes
• High server CPU load when using ActiveSync

Version 10.0.4

Released: January 22, 2024

New:

• GFI Agent auto-update capability on Windows and Linux

Improved:

• Updated GFI Agent for better AppManager performance and stability

Fixed:

• Archive folders can be disabled for users
• Admin interface reachable over IPv6
• WebMail: Opening an email results in error
• Events in shared and public calendars no longer require a browser refresh to be shown in the UI

Reminder for KOFF users when upgrading from versions older than 10.0.2 Patch 2. Please read our pre-installation guide for a smooth KOFF upgrade process.

Version 10.0.3 Patch 1

Released: December 20, 2023

This patch incorporates the following fixes from previous releases that were missing from the 10.0.3 version.

Fixed:

• Installation fails if the agent cannot be downloaded or gets stuck due to low download speeds.
• GFI AppManager management link from the KerioConnect admin UI should open the appliance management page in AppManager.

Version 10.0.3

Released: December 14, 2023

New:

• Older versions of KOFF are now NOT natively rejected by GFI KerioConnect 10.X mail server when configured via the new UI option.

Improved:

• Diacritic representation in KOFF client.
• KOFF now supports modern authentication in Outlook, eliminating legacy login pop-ups.
• Email loading behavior, ensuring emails open at the beginning of the body.
• Seamless application of SMTP port changes in KerioConnect.
• ActiveSync synchronizes correctly even when the connection is bad.

Fixed:

• MS Outlook not saving default signatures.
• Invalid certification errors for Let’s Encrypt certificates.
• Issues with ‘apt update’ on 9.4.2 6498 multi-server appliance disk 1 image.
• Email invitations containing Czech characters are displayed incorrectly.
• Issues with garbled invitations in certain scenarios.
• KerioConnect Client login difficulties when Domain 2FA is set to expire in 0 days.
• Inability to backup bayes.db files larger than 2GB due to ZIP limitations.
• Missing image attachments in meeting invites created from MS Outlook.
• Display issues with .csv attachments appearing as .xls in webmail.
• HTML meeting invitations are no longer converted to attachments in KOFF.
• Calendar event descriptions disappearing in Webmail when used on Firefox.
• Text attachment in a calendar event looks corrupted when viewed from Webmail.

Version 10.0.2 Patch 2

Released: November 20, 2023

Fixes:

• KOFF fails to be auto-updated when not running under admin rights.
• GFI AppManager management link from the KerioConnect admin UI should open the appliance management page in AppManager.

This patch specifically targets and resolves an issue affecting users of the Kerio Outlook Connector (KOFF) plugin for Microsoft Outlook, eliminating the need for admin credentials for all future KOFF updates.

Solution overview:

We’ve applied the fix to the service responsible for KOFF updates (KTupdateservice.exe). Once this service is updated on every workstation running KOFF, future KOFF updates won’t require admin credentials.

How to update:

Option 1: Update KTupdateservice.exe before updating the server to GFI KerioConnect 10.0.2 Patch 2. (Recommended)

• This can be done either manually on each workstation or centrally through a GPO policy.
• For detailed instructions, please refer to our Pre-Installation Guide for GFI KerioConnect 10.0.2 Patch 2.

Option 2: Update the server to GFI KerioConnect 10.0.2 Patch 2 and perform one last KOFF update with admin credentials.

• If you choose this path, admin credentials will be required once per workstation during this update. Future updates will not require admin credentials.

Version 10.0.2 Patch 1

Released: October 18, 2023

Fixes:

• Installation fails if the agent cannot be downloaded or gets stuck due to low download speeds – fixed on Windows and Linux installers
• KOFF fails to be deployed and auto-updated

Version 10.0.2

Released: October 9, 2023

New:

• GFI AppManager support

Improvements:

• New BitDefender bdcore library support
• Displaying the 2FA statuses for users within the product UI

Fixes:

• After upgrade, Virtual Appliance console is not operational and cannot see network interfaces
• Problems in handling umlaut characters in OOO (Out of Office) editor in Outlook for Mac
• The calendar is not updated in WebMail when the external attendee sends a response to an invitation that contains an .ics file
• Updates for the description field to public calendar event do not work if an event is edited in Outlook for Mac
• Numbered Lists Formatted Improperly in Webmail
• Sharing Calendar through EWS on MAC (read-only) allows the read-only user to send emails on behalf of the first user
• The app password does not work for the DAV protocols
• ALTREP is not as per RFC 5545 in events that have multipart/attachment when created using KOFF
• Trash folder isn’t sharing properly
• ICS Events with Non-Standard UIDs are not Syncing down to clients via CalDav
• Email list jumps to the beginning when a new e-mail is received in Webmail
• KOFF loses connection to RPC-server in some cases
• Outlook shows no  “Send on Behalf” Dropdown When Sending Emails
• Unable to search contacts using “Company” field in Outlook
• KoffRtfWrapper.exe performing some registry operations

Version 10.0.1

Released: April 12, 2023

Fixes:

• Disabled message in WebMail “Your email has been successfully sent”
• MS Teams account can be linked properly from GFI KerioConnect
• Lost connection to RPC server fix
• Multiple fixes on crashes by KOFF and Outlook
• Fix for KOFF high CPU use
• KOFF performance optimizations to allow faster operations with large mailboxes
• KOFF desktop notification shows a proper message when indexing finished
• Reduction of frequent desktop notifications
• Fixed search index slow performance and crashes, stability improvements
• Enhanced logging for db operations / indexing
• Fix of inaccurate search results
• Optimizations for new index search start and reindexing process
• Multiple fixes for slow Outlook start
• Fixes for Windows Terminal Server environments related to indexing and search issues
• Searchd is running as a service
• Memory usage optimization
• Fixed EAS calendar invite reminders incorrectly set on iOS devices
• Fix for EAS folder tree synchronization problem
• Fix of No “Send on Behalf” Dropdown When Sending Emails issue
• Fix for ICS events with non-standard UIDs that are not syncing down to clients via CalDav

Version 10.0.0

Released: December 12, 2022

New:

• Faster KOFF search

• Integration with MS Teams calendar

• Support for ActiveSync version 16.1: 

  • Sync email drafts including attachments on mobile and desktop/web versions

  • Sync calendar attachments with mobile devices

  • New time proposals for calendar events on mobile devices

  • Support Information Rights Management (IRM).

Fixes:

• Recurring error 0x80004005 E_Fail in KOFF

Note: The ActiveSync “Wipe” functionality is disabled in version 10.0.0. Learn more about this change here.