Hello everyone,
we have released a new maintenance and Security relaease 26.8.20260804.
.
Release notes:
- SECURITY: this release fixes multiple high level security vulnerabilities, everyone is strongly adviced to update to it!
- Admin: really fix lost background image, if config from apps like calendar or addressbook is saved
- CalDAV/Calendar: fix EX/RDATE were exported wrong (timezone shifted) for server-timezones NOT UTC
- Customfields: fix multiline text and richtext CFs collapsing to almost nothing in Firefox
- Invoices: export exemption reason (code) to XML and automatic fill it for category-code âAEâ with âReverse chargeâ and âVATEX-EU-AEâ
- OpenID: bump to current upstream (league v9, steverhoades v3, Slim 4, lcobucci/jwt 5)
- OpenIDConnect/Authentication: fix inverted email_verified check and config key mismatch
- Status/Jitsi: tolerate legacy too-short secrets, validate new ones in admin config
- WebAuthN: former EPL app allowing to use WebAuthN as 2nd factor either with passkeys, platform authenticators (e.g. Windows Hello) or hardware tokens like Yubikeys
- PHP: Update to Version 8.5.9 (Security Release)
This Maintenance update is provided via Docker container.
If you have problems with this update, you can easily revert to the previous version:
Manual (container) update/downgrade in a Docker installation
Manuelles (Container)-Update/Downgrade in einer Docker-Installation
New functions / preferences or other important things:
- SECURITY: this release fixes multiple high level security vulnerabilities, everyone is strongly adviced to update to it!
This update is also a security update!
Please be sure to check whether the automatic update worked, or trigger it manually if necessary or desired.
You can find the version here:
https://help.egroupware.org/t/where-can-i-find-the-egroupware-version-number/79853
- WebAuthN: former EPL app allowing to use WebAuthN as 2nd factor either with passkeys, platform authenticators (e.g. Windows Hello) or hardware tokens like Yubikeys
We have now made the 
âWeb Authenticationâ feature available in the Community version. The feature is now freely available!
This means that, in the Community Edition too, it is possible to secure the login process using passkeys, platform authentication (such as Windows Hello) or hardware tokens (from Nitrokey or Yubikey, for example).
An additional tab has been added under âSecurity & Passwordâ:
- PHP: Update to Version 8.5.9 (Security Release)
We have upgraded PHP to version 8.5.9, as this is a security release:
https://www.php.net/archive/2026.php#2026-07-30-2
The update information is collected in the following topic
https://help.egroupware.org/t/new-features-preferences-or-other-important-things-since-release-of-egroupware-26/79581
in reverse chronological order.
Please follow us, give us likes or stars: 
Kind regards
Your EGroupware team
