{"id":83679,"date":"2026-08-24T13:15:18","date_gmt":"2026-08-24T09:45:18","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/?p=83679"},"modified":"2026-08-24T13:15:18","modified_gmt":"2026-08-24T09:45:18","slug":"kerio-connect-10-0-9-patch-2-build-10320","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/kerio-connect-10-0-9-patch-2-build-10320\/","title":{"rendered":"Kerio Connect 10.0.9 Patch 2 Build 10320"},"content":{"rendered":"

\"\"<\/a><\/p>\n

Version 10.0.9p2<\/p>\n

Security fixes
\nClosed a Webmail vulnerability where nested anchor <a> tags could be injected when rendering HREF links.
\nRemoved the obsolete legacy \u201cnano\u201d Webmail interface, eliminating an unmaintained surface and its associated exposure.
\nStrengthened the file-system permissions on the Kerio Outlook Connector Offline Edition installer folders to close a local privilege-escalation issue.
\nBug fixes
\nFixed inbound delivery of duplicate messages, seen with Gmail senders when the Spam Repellent greeting delay is enabled. Inbound de-duplication of repeated messages is now enabled by default.
\nFixed large-body messages not being scanned by the spam filter. The spam-filter message size limit has been raised from 1 MB to 8 MB.
\nFixed calendar synchronization for the VMware Boxer app on iPhone and Android devices.
\nFixed renewed Kerio Connect license activation failing with \u201cunable to load new license file\u201d via both registration update and license.key import, including on fresh installs.
\nFixed the Spam log view displaying thousands of garbage rows after clearing the log once log rotation had occurred. The view now empties correctly without requiring a service restart.
\nFixed the Agent log being impossible to clear from WebAdmin after integrating Kerio Connect with GFI AppManager.
\nFixed the KOFF add-in (KoffAddin.dll) shipping without a digital signature, which caused Microsoft Outlook to display a security warning on startup.
\nFixed the KOFF Windows installer being published without a digital signature; the DigiCert code-signing chain has been restored.
\nFixed the KOFF default signature not being retained after saving on recent Outlook builds.
\nFixed KOFF not closing cleanly during an upgrade, which could interrupt the update.
\nFixed a crash when an ActiveSync client sent a malformed calendar location. Out-of-range coordinates are now handled gracefully.
\nFixed the two-factor-authentication cookie verification message being logged at error level instead of debug.
\nFixed the KOFF default signature not being retained after saving on recent Outlook builds (Note: Remove and recreate Outlook profile to apply this fix.)
\n\u2014
\nVersion 10.0.9<\/p>\n

Resolved agent log locking issue
\nFixed a regression with default email signatures not saving in Outlook Connector (Remove and Recreate the Profile)
\nImplemented TCP fallback for truncated DNS responses
\nResolved misleading 2FA cookie token verification error messages
\nFixed security issue where allowed relay IPs bypass spam filtering
\nEnhanced licensing enforcement during Active Directory synchronization
\nPrevented GFI Agent from auto-enabling after upgrades
\nImproved SMIME certificate handling for encrypted messages
\nFixed calendar file (.ics) preview encoding in Outlook Connector \u2013 (Remove and Recreate the Profile)
\n\u201cAll Folders\u201d Search feature fixed in New Connect UI
\nRemoved Kerio Connect Nano
\nEnhanced Exchange Web Services (EWS) compatibility for third-party clients, fixing the following:
\nError 108: \u201cNot implemented only CategoryList configuration is supported\u201d (GetUserConfiguration)
\nError 339: \u201cOnly traversal type Shallow is supported\u201d (FindItem)
\nError 339: \u201cUnsupported restriction type\u201d (Filtering Operations)
\nAdded RFC 8058 compliance by including List-Unsubscribe headers in DKIM signatures for one-click unsubscribe support
\n\u2014
\nVersion 10.0.8p2<\/p>\n

Closed a Webmail cross-site scripting (XSS) vulnerability where a specially crafted SVG email attachment could execute scripts when opened. Script execution is now disabled for downloaded content
\nResolved the signing of the Updater service.
\nResolved the signing of KOFF Internal binaries:
\nDbBackup.exe
\nkassist.exe
\nKoffRtfWrapper.exe
\nProfileCreator.exe
\nKoffBackend.exe
\n\u2014
\nVersion 10.0.8p1<\/p>\n

Resolved issues with KerioConnect backup process
\n\u2014
\nVersion 10.0.8<\/p>\n

macOS Compatibility Fix: Restored attachment preview functionality for macOS 12 and higher.
\nSecurity Enhancement: Patched Cross-Site Scripting (XSS) vulnerability in the web interface to strengthen security.
\nFirefox Display Improvement: Added missing scroll bars in the web admin logs area for better navigation.
\nWebmail Attachment Support: Fixed display issues with EML attachments from Mailstore in webmail.
\nSecurity Logs Stability: Resolved errors that occurred when clearing security logs.
\nLet\u2019s Encrypt Certificate Management: Fixed automatic renewal issues that caused missing or duplicate certificates across multiple domains.
\nGFI KerioConnect Client Enhancement: Resolved issue where pasting inline images from clipboard was not functioning properly.
\nCalendar Event Editing: Fixed the inability to edit Calendar event descriptions in Webmail.<\/p>\n

\u0647\u0645\u0648\u0646 \u0637\u0648\u0631 \u06a9\u0647 \u0642\u0628\u0644\u0627\u064b \u0647\u0645 \u062a\u0648\u06cc \u067e\u0633\u062a \u0647\u0627\u06cc \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0642\u0628\u0644\u06cc \u0635\u062d\u0628\u062a \u0634\u062f\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u0627 \u0639\u062f\u0645 \u0646\u0635\u0628 \u0648 \u06cc\u0627 \u062d\u0630\u0641 AppManager \u06cc\u0627 \u0647\u0645\u0648\u0646 GFI Agent \u0647\u0633\u062a.<\/p>\n

\u0627\u06af\u0647 \u0645\u0627\u06cc\u0644 \u0646\u06cc\u0633\u062a\u06cc\u062f \u06a9\u0647 \u062f\u0631 \u0637\u0648\u0644 \u0646\u0635\u0628 GFI Agent \u0646\u0635\u0628 \u0628\u0634\u0647 \u0645\u06cc \u062a\u0648\u0646\u06cc\u062f \u062a\u0648\u06cc hosts file \u062a\u0648\u0646 \u0631\u06a9\u0648\u0631\u062f \u0632\u06cc\u0631 \u0631\u0648 \u0642\u0628\u0644 \u0627\u0632 \u0627\u0642\u062f\u0627\u0645 \u0628\u0647 \u0646\u0635\u0628 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f \u062a\u0627 Installer \u0646\u062a\u0648\u0646\u0647 \u0648\u0635\u0644 \u0628\u0634\u0647 \u0648 \u062f\u0627\u0646\u0644\u0648\u062f\u0634 \u06a9\u0646\u0647.<\/p>\n

127.0.0.127 appmanager.gfi.com<\/pre>\n
\u0627\u06af\u0647 \u0647\u0645 \u0627\u062d\u06cc\u0627\u0646\u0627\u064b \u0641\u0631\u0627\u0645\u0648\u0634 \u06a9\u0631\u062f\u06cc\u062f \u0648 \u0646\u0635\u0628 \u0634\u062f\u0647 \u0628\u0627 \u0627\u06cc\u0646 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0645\u06cc\u062a\u0648\u0646\u06cc\u062f \u062d\u0630\u0641\u0634 \u06a9\u0646\u06cc\u062f:<\/p>\n
Windows<\/p>\n
\"C:Program FilesGFIAgentGFIAgentUninstaller.exe\" \"kerioconnect\" \"C:Program FilesKerio\\\"<\/pre>\n
Linux<\/p>\n
\/usr\/local\/gfiagent\/GFIAgentUninstaller kerio-connect \/opt\/kerio\/\r\nrm -rf \/opt\/kerio\/GFIAgent<\/pre>\n
 <\/p>\n
Kerio Connect \u2013 Windows 64bit<\/strong><\/p>\n
Link:<\/strong>\u00a0kerio-connect-10.0.9-10320-p2-win64-dgby.rar<\/a><\/p>\n
Size:<\/strong> 260 MB<\/p>\n
Kerio Connect \u2013 Linux 64bit (DEB)<\/strong><\/p>\n
Link:<\/strong>\u00a0kerio-connect-10.0.9-10320-p2-linux-amd64-deb-dgby.rar<\/a><\/p>\n
Size:<\/strong> 316 MB<\/p>\n
Kerio Connect \u2013 Linux 64bit (RPM)<\/strong><\/p>\n
Link:<\/strong>\u00a0kerio-connect-10.0.9-10320-p2-linux-x86_64-rpm-dgby.rar<\/a><\/p>\n
Size:<\/strong> 315 MB<\/p>\n
License Files<\/strong><\/p>\n
KCLicense-05-Windows.rar<\/a><\/p>\n
KCLicense-05-Linux.rar<\/a><\/p>\n
Password:<\/strong>\u00a0www.digiboy.ir<\/p>\n","protected":false},"excerpt":{"rendered":"
Version 10.0.9p2 Security fixes Closed a Webmail vulnerability where nested anchor <a> tags could be injected when rendering HREF links. Removed the obsolete legacy \u201cnano\u201d Webmail interface, eliminating an unmaintained surface and its associated exposure. Strengthened the file-system permissions on the Kerio Outlook Connector Offline Edition installer folders to close a local privilege-escalation issue. Bug …<\/p>\n","protected":false},"author":1,"featured_media":83680,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[28,38],"tags":[],"class_list":["post-83679","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-slide","category-server-software"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/83679","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=83679"}],"version-history":[{"count":2,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/83679\/revisions"}],"predecessor-version":[{"id":83709,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/83679\/revisions\/83709"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media\/83680"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=83679"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=83679"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=83679"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}