We have just released Z-Push 2.7.6.

This release is to address CVE-2025-8264 for SQL Injection where parameters were not used.

Edit: I would also like to personally thank Lion K from Snyk for bringing this issue to my attention. I appreciate the effort in reporting this vulnerability, which helps us maintain the security and integrity of Z-Push.

This release only includes the fix for CVE-2025-8264 with

no new major features.

Install Z-Push 2.7.6 final from the repo Releases (recommended) Z-Push Releases.

Thanks a lot to all Z-Push contributors! Your contributions are highly appreciated.

Code changes since Z-Push 2.7.5: https://github.com/Z-Hub/Z-Push/compare/2.7.5...2.7.6

Please share your experiences (positive and negative) and give feedback on the discussion post!

Greetings,
Mat

We have just released Z-Push 2.7.5.

Work on 2.8.0 with AS16.1 changes is taking longer than expected.

This release includes general bugfixes with

no new major features.

Install Z-Push 2.7.5 final from the repo Releases (recommended) Z-Push Releases.

Thanks a lot to all Z-Push contributors! Your contributions are highly appreciated.

Code changes since Z-Push 2.7.4: https://github.com/Z-Hub/Z-Push/compare/2.7.4...2.7.5

Please share your experiences (positive and negative) and give feedback on the discussion post!

Greetings,
Mat

We have just released Z-Push 2.7.4.

Still working on the 2.8.0 with the start of the AS16.1 changes.

This release includes general bugfixes with

no new major features.

Install Z-Push 2.7.4 final from the repo Releases (recommended) Z-Push Releases.

Thanks a lot to all Z-Push contributors! Your contributions are highly appreciated.

Code changes since Z-Push 2.7.3: https://github.com/Z-Hub/Z-Push/compare/2.7.3...2.7.4

Please share your experiences (positive and negative) and give feedback on the discussion post!

Greetings,
Mat

We have just released Z-Push 2.7.3.

Next release will be 2.8.0 with the start of the AS16.1 changes.

This release includes general bugfixes with

no new major features.

Install Z-Push 2.7.3 final from the repo Releases (recommended) Z-Push Releases.

Thanks a lot to all Z-Push contributors! Your contributions are highly appreciated.

Code changes since Z-Push 2.7.2: https://github.com/Z-Hub/Z-Push/compare/2.7.2...2.7.3

Please share your experiences (positive and negative) and give feedback on the discussion post!

Greetings,
Mat

We have just released Z-Push 2.7.2.

This release includes general bugfixes with

no new major features.

Install Z-Push 2.7.2 final from the repo Releases (recommended) Z-Push Releases.

Thanks a lot to all Z-Push contributors! Your contributions are highly appreciated.

Code changes since Z-Push 2.7.1: https://github.com/Z-Hub/Z-Push/compare/2.7.1...2.7.2

Please share your experiences (positive and negative) and give feedback on the discussion post!

Greetings,
Mat

We have just released Z-Push 2.7.1.

This release includes general bugfixes with

no new major features.

Install Z-Push 2.7.1 final from the repo Releases (recommended) Z-Push Releases.

Thanks a lot to all Z-Push contributors! Your contributions are highly appreciated.

Code changes since Z-Push 2.7.0: https://github.com/Z-Hub/Z-Push/compare/2.7.0...2.7.1

Please share your experiences (positive and negative) and give feedback on the discussion post!

Greetings,
Mat

We have just released Z-Push 2.7.0.

This release includes support for PHP8.x.

as well as bugfixes drawn from the community.

Install Z-Push 2.7.0 final from the repo Releases (recommended) Z-Push Releases.

Thanks a lot to all Z-Push contributors! Your contributions are highly appreciated.

Code changes since Z-Push 2.6.4: https://github.com/Z-Hub/Z-Push/compare/2.6.4...2.7.0

Please share your experiences (positive and negative) and give feedback!

Greetings,
Mat

we have just released Z-Push 2.6.2 final (tag 2.6.2 commit b89d96ea4f4c494ddcb32f9447b9e3fcabd87b81).

This maintenance release includes some bug fixes.

The issue that Outlook calendar is stuck in sync has been resolved.

Merijn contributed a PHP 7.4 related fix.

Michael provided a couple IMAP and CardDav related contributions.

Install Z-Push 2.6.2 final from the final repositories (recommended) Z-Push Wiki.

Thanks a lot to Z-Push contributors Merijn and Michael! Your contributions are highly appreciated. Also thanks to everybody providing us feedback.

Tickets in Z-Push 2.6.2

Bug

[ZP-1600] – devicemanager.php:1004 Trying to access array offset on value of type bool
[ZP-1601] – IMAP_SMTP_METHOD smtp doesn’t work with self-signed certificates
[ZP-1602] – BackendCardDAV: invalid return type “false” in ChangesSink()
[ZP-1603] – Sending a meeting from a public calendar breaks Outlook sync

Code changes since Z-Push 2.6.1: https://stash.z-hub.io/projects/ZP/repos/z-push/compare/diff?targetBranch=refs%2Ftags%2F2.6.1&sourceBranch=refs%2Ftags%2F2.6.2

Please share your experiences (positive and negative) and give feedback!

Greetings,
Manfred

we have just released Z-Push 2.6.1 final (tag 2.6.1 commit 68ed439cb9a27725a65ddfe673fe06e183cf5b77).

This maintainance release includes some bug fixes and improvements.

The issue with duplicate attendees in Outlook should be fixed.

Deleted properties of a contact are now correctly picked up by the gab2contacts script.

Michele contributed state files’ write improvements on busy systems.

BackendIMAP improvements by Michael.

Some PHP 7.2 related fixes.

Install Z-Push 2.6.1 final from the final repositories (recommended) Z-Push Wiki.

Thanks a lot to Z-Push contributors Michael and Michele! Sorry if I forgot anybody, but nevertheless your contributions are highly appreciated. Also thanks to everybody providing us feedback.

For the issue list see https://forum.kopano.io/topic/3563/z-push-2-6-1-final-released/.

Code changes since Z-Push 2.6.0: https://stash.z-hub.io/projects/ZP/repos/z-push/compare/diff?targetBranch=refs%2Ftags%2F2.6.0&sourceBranch=refs%2Ftags%2F2.6.1

Please share your experiences (positive and negative) and give feedback!

Greetings,
Manfred

we have just released Z-Push 2.6.0 final (tag 2.6.0 commit 1c7338a655a2060b9ff28aa585f41ac58c510731).

This release includes a couple of new features and improvements as well as bug fixes.

It is now possible to disable a specific device using its id.

We added an option to hide group Everyone in gabsync.

This version contains several z-push-admin improvements for fixstates.

There is now an option to disable KOE handling of setting a custom sync timeframe based on the total storesize.

postinst on debian based systems now won’t execute fixstates which should update Z-Push faster.

Several IMAP backend improvements and fixes.

Several other fixes and improvements for Z-Push core as well as the backends.

Install Z-Push 2.6.0 final from the final repositories (recommended) Z-Push Wiki.

Thanks a lot to Z-Push contributors James, Michael, Michele, Simon! Sorry if I forgot anybody, but nevertheless your contributions are highly appreciated. Also thanks to everybody providing us feedback.

For the issue list see https://forum.kopano.io/topic/3470/z-push-2-6-0-final-released.

Code changes since Z-Push 2.5.2: https://stash.z-hub.io/projects/ZP/repos/z-push/compare/diff?targetBranch=refs%2Ftags%2F2.5.2&sourceBranch=refs%2Ftags%2F2.6.0

Please share your experiences (positive and negative) and give feedback!

Greetings, Manfred