SOGo | BTS - Issues

0006189: Unable to enter text when composing an email in the mobile view

Thu, 02 Apr 2026 11:31:40 +0000

When composing an email in mobile view using Firefox Mobile (version 149, though this issue may also occur in older versions), the following problem arises:

It is not possible to enter text into the email text field, regardless of whether the email is being composed in plain text or HTML mode.
The keyboard appears, but no characters are entered. Interestingly, the Enter and Backspace keys still work.
The problem can be resolved by switching to the desktop view - entry is possible there (bug occurs exclusively in the mobile view).
During the initial test in the test system, input worked, but the error occurred after checking/changing/resetting the settings.
Clearing caches and cookies or using incognito mode did not resolve the issue.
Other text fields, such as the search bar in SOGo or forms on other websites, work without issues.
A test in Google Chrome did not reveal any such problems.

0006188: Sieve filter "Tagging" action with "Seen" sets custom keyword instead of \Seen system flag

Thu, 02 Apr 2026 08:50:32 +0000

When creating a mail filter in SOGo's preferences with the "Flag the message with" action set to "Seen", the message doesn't get marked as such. I'm wondering if it should be marked with "\Seen" instead?

0006187: Regression with TOTP

Thu, 02 Apr 2026 07:02:54 +0000

While working on updating the FreeBSD port of SOGo, I found a regression in the TOTP verification starting with SOGo 5.12.5 (still present with 5.12.6 and 5.12.7):

When signing-in, after typing correct username and password, a valid TOTP is rejected.
As a result, legitimate users cannot sign-in anymore.

0006186: Attachments are not displayed in the preview when forwarding

Wed, 01 Apr 2026 12:58:06 +0000

If an email is forwarded to SOGo from the “Sent” folder in Outlook, the email's content will not be displayed when forwarded from SOGo because CKEditor classifies the text as “unsafe content”

0006118: Build packages for CentOS Stream 10?

Sat, 28 Mar 2026 14:06:59 +0000

Dear all,

CentOS Stream 10 was released in Dec 2024, any plan to build packages for it?

0006185: No more arm64 packages for Ubuntu 24.04 (noble)?

Thu, 26 Mar 2026 23:24:59 +0000

It was fine with apt repo for Ubuntu 24.04:
```
deb https://packagingv2.sogo.nu/sogo-nightly-ubuntu/ noble main
```

But`apt update` reports error yesterday:

> N: Skipping acquire of configured file 'main/binary-arm64/Packages' as repository 'https://packagingv2.sogo.nu/sogo-nightly-ubuntu noble InRelease' doesn't support architecture 'arm64'

Questions:

- Did SOGo team remove the arm64 packages?
- Also, any plan to build packages for upcoming Ubuntu 26.04 (resolute)? It's scheduled to be released on April 27th.

0006184: Shortcut for sending mail

Thu, 26 Mar 2026 12:56:44 +0000

There is a nice list of keyboard shortcuts for differents jobs. But for sending a composed mail I have to click with my mouse. Is there a chance to have a shortcut? In other systems (Thunderbird) Ctl+Enter is implemented.

0006183: sending mail to all participants of an event misses organizer

Thu, 26 Mar 2026 09:29:02 +0000

When I open in the webclient an event I am invited to and use the the mail icon in this event to send a mail to all participants the organizer of the meeting is missing in the recipients list of the email. I testet this with our setup and the sogo demo server.

0006062: Repeated events - exceptions

Tue, 24 Mar 2026 10:51:05 +0000

Hello,
Some of our users have a problem with a slow calendar. I found that the problem is in recurring events witch exceptions. In the backup i found an event where there are 46513 EXDATE lines. An example is attached. The EXDATE lines are duplicated. When this user views the calendar, the sogod process consumes 6GB of RAM. Could you please tell me what is wrong a how to fix it?

0006182: Save button disabled on Mail settings page

Mon, 23 Mar 2026 15:14:18 +0000

Build version @56d874c68700 202603150806 according to devtools in prod.

In Hungarian locale the date picker creates date like this: 2026.Már.23.
The dot at the end invalidates this, I believe because of UI/WebServerResources/js/Preferences/Preferences.service.js:237 where a regex filters it. This makes the preferencesForm invalid, and thus the save button remains disabled - for the entire mail settings tab, even when the date wouldn't be relevant, because the default date there is invalid too, blocking the save button for the entire tab regardless of anything.
This would be the same for any other locales where a dot is at the end of the date.

Not sure which solution is the best:
- Either modify the regex to allow the dot (but idk if there are other reasons to invalidate a dot at the end)
- or modify the datepicker and defaults to remove the dot at the end in all relevant locales. (Not sure how to do that best, I'm not a programmer.)

0006180: HTML emails from Outlook/Word render incorrectly in SOGo webmail (mso-* CSS)

Wed, 18 Mar 2026 09:04:40 +0000

Hello,

We are running SOGo v5.12.4 as webmail for our clients and have identified a rendering issue with HTML emails generated by Microsoft Outlook/Word.

**Problem:**
Emails composed in Outlook/Word contain proprietary Microsoft CSS properties (mso-*, mso-line-height, mso-margin-top-alt, etc.) that SOGo's HTML viewer does not process.

This results in:
- Excessive whitespace / broken layout in the message body
- In some cases, the message body appears completely blank

0006168: Signature duplication when switching identities while composing email

Tue, 17 Mar 2026 07:57:35 +0000

We have identified an issue with signature management when composing emails with accounts that have multiple identities configured.

Symptoms:

- When composing a new email, the default user signature is inserted automatically
- When switching to a different identity, the new identity's signature is added to the message
- The original default signature is NOT removed, resulting in duplicate signatures
- Both the default user signature and the identity-specific signature appear in the email body

Expected behavior:
When switching to a different identity while composing an email, the previous signature should be removed and replaced with the signature associated with the newly selected identity. Only one signature should be present at any time.

0006181: SOGo OpenID Problem - Redirect URI?

Thu, 12 Mar 2026 07:35:28 +0000

Dear SOGo Team,

While setting up OpenID login for SOGo, I noticed that the required SOGo redirect URI isn't mentioned in any of the instructions. That's why I'm reporting this here, so that this information can be added to the instructions.

As an alternative, I looked up the address in the compound URL of the link that initially leads to the OpenID provider. For example, it looks like this:
"https://sogo.domain.tld/SOGo/"

Buit, isn't something missing?
Because when I access this URI, I end up, as expected, at "https://sogo.domain.tld/SOGo/so" and thus back in the SOGo login window.

And if I enter this address as the redirect URI in the OpenID provider anyway, the OpenID login process logically results in a redirect loop (which eventually terminates).

As a workaround, I then enter this address as the redirect URI in the OpenID provider.
If I add to the address, for example:
"/oauth2/callback" (found somewhere)
or "/SOGo/so/oidc/callback" (found in the mailing list),
...the redirect is rejected as invalid.

Unfortunately, I haven't found anything useful about this problem in the mailing list—only the aforementioned non-functional URIs.

Could someone please confirm what a correct redirect URI would be? Or what else should I consider?

My SOGo is version 5.12.4 (build@9a1f640bd211 202511171326) and is running as a container within a Nethserver 8 container orchestrator.

Otherwise, SOGo is a great piece of software and has been running very reliably for years—excellent!

Regards, Yummiweb

0006179: CardDAV Shared Read only Address books has empty property current-user-privilege-set in discovery

Tue, 10 Mar 2026 11:55:09 +0000

Hello Sogo Team,

I'd Like to report a bug with the CardDAV Implementation for address books that are shared with read only privileges.

System is sogo 5.9.1 using Thunderbird 148 as client.

Thunderbird will get a response in CardDAV calendar discovery that contains a empty current-user-privilege-set instead of the correct read privilege prop. That's why Thunderbird won't show this address book as "addable".

Ways to make Thundebird discover the adress book:

1) If one would override this check in the debug mode of Thunderbird by changing the variables to readable=true. It shows up and is usable perfectly fine (thus showing that it is indeed readable).

2) Also, if the property would be omitted completely (which I did also in the Thunderbird debugger) one is able to discover, add and use the address books just fine.

3) Perfectly correct would be to include the read privilege as shown below.

Example response for a "bad" read only shared address book response:

/SOGo/dav/sharinguser/Contacts/6DDF-6551C400-B-23F36E80/HTTP/1.1 200 OK

http://groupdav.org/"/> xmlns="urn:ietf:params:xml:ns:carddav"/>

Adressbook( <sharinguser@domain.de>)

/SOGo/dav/myuser

Correctly it should be:

'/SOGo/dav/sharinguser/Contacts/6DDF-6551C400-B-23F36E80/HTTP/1.1 200 OK

http://groupdav.org/"/> xmlns="urn:ietf:params:xml:ns:carddav"/>

Adressbook( <sharinguser@domain.de>)

/SOGo/dav/myuser

0006167: Email preview fails when message contains more than 250 embedded HTML tags

Tue, 10 Mar 2026 11:37:52 +0000

Symptoms:

- Email preview does not render/display correctly
- No errors are shown in the logs
- The email displays correctly when opened in edit mode
- Other email clients (Thunderbird, Roundcube) display the same emails correctly in preview mode

0006178: SOGo5 fails to build on opensuse LINUX - NON DOCKER

Fri, 06 Mar 2026 17:22:19 +0000

Hi team,

starting from version 5.12.2 the build of SOGo5 fails.
Last working version was 5.12.1

You switched to libcurl https://github.com/Alinto/sogo/commit/a782424a30cfe8e9c6f2769a45bcdd3498679237#diff-29c8fb0a4a95e2d446edfa1c9ddb2e8f2293a28c0a0d1a7498bca0d6a2772dc1 , and this causes problems here:

0006173: Contact search fails for names starting with umlauts / diacritics (e.g. Ä, Ö)

Wed, 04 Mar 2026 09:27:52 +0000

Hello,

we are seeing an issue with SOGo contact search when contact display names contain multiple umlauts/diacritics, especially when the name starts with an umlaut (e.g. Ä).

It looks like certain partial search terms do not return the expected contact, even though other partial terms or the full name work.

Expected result:
The contact should be returned for all matching partial queries (prefix / substring search), regardless of umlauts/diacritics.

Actual result:
The contact "Aböabc" can be found with:
- "Ab"
- "Abc"
- "öabc"
- "Aböabc"

But it cannot be found with:
- "Abö"
- "bö"
- "öa"
- "öab"

This is confusing but still workable because the contact can be found with the full name.

However, the issue becomes more problematic when the name starts with an umlaut:

Example contact: "Äböa"

Searching for "Äböa" does NOT return the contact.
Only the following searches return it:
- "böa"
- "öa"

0006177: List in adress book : no more autocomplete to add contact

Wed, 04 Mar 2026 09:27:29 +0000

Impossible to add a contact to a list, the member field doesn't provide autocomplete functionality.

0006002: When inviting someone to an event on someone else's calendar the organizer ir wrong

Tue, 17 Feb 2026 15:45:04 +0000

When creating an event on someone else's calendar and choosing the first attendee, the organizer is shown incorrectly.

Instead of showing the owner of the calendar as organizer, the user shown is the first in alphabetical order.

When checking the event details afterwards, the organizer is then shown correctly.

We are using LDAP authentication and feeding groups via LDAP too.

0006145: Build packages for Debian 13 (trixie)

Fri, 13 Feb 2026 10:47:16 +0000

Dear developers,

Debian 13 was released[1] on Aug 9th 2025, any plan to build packages for it?
I didn't find packages in current repos[2][3].

[1] https://www.debian.org/News/2025/20250809
[2] https://packages.sogo.nu/nightly/5/debian/dists/
[3] https://packagingv2.sogo.nu/sogo-nightly-debian/dists/index.html

0006176: Webdav PUT request fails if ICS file or VCF files containts non-ascii characters

Mon, 09 Feb 2026 08:53:25 +0000

Uploading a VCF or ICS file with non-ascii characters in its content through Webdav on SOGo results on an error.

This error is "500 Request Failed" for VCF files, and "400 Request Failed" for ICS files

This error occurs even though the VCF or ICS file was downloaded from the same SOGo server without any edit.

Removing the non-ascii characters from the ICS or VCF file and uploading it again does not generate an error.

0006073: Unsubcribing from shared calendar in Thunderbird from an admin account deletes the calendar.

Mon, 09 Feb 2026 08:03:50 +0000

When an admin account unsubscribe from a shared calendar from Thunderbird, a DELETE is sent to the sogo server, resulting in deleting the whole calendar from the database.
Hence, when the owner of the calendar tries to access it, a new empty calendar is created.

A calendar should not be able to be wholly deleted when the user is not the owner (or with sogo-tools). Unsubcribing from Thunderbird should unsubscribe and not delete the calendar.

0004600: Multiple reminders per event

Wed, 04 Feb 2026 14:03:52 +0000

I am using mailcow which implements SOGo. As of now it is not possible for me to set multiple reminders (which I can using the standard iCloud Cal).
But to be honest, I am not sure whether the problem is on iOS/MacOS, Mailcow or SOGo.

If it's the latter, it would be really great if this could be supported in the future.

0006172: HTML sanitizer removes clickable area for newsletters using wrapping
Mon, 19 Jan 2026 08:47:56 +0000
We are SOGo administrators and have received multiple user reports regarding newsletters from well-known companies and media outlets where “Read more” buttons or large clickable areas are not clickable in SOGo, while they work as expected in other mail clients such as Roundcube, Thunderbird, and Gmail.

After analysis, this behavior is caused by SOGo sanitizing HTML patterns where an element wraps a block-level

. When sanitized, the anchor is removed or neutralized, leaving visually styled buttons (usually
elements) without an actual inside, making them non-clickable.

Technically, the HTML in these newsletters is not ideal, as the button text itself is not wrapped in an anchor. Instead, the layout relies on a parent element wrapping a table. Other mail clients apply heuristic rendering and still make the area clickable. SOGo, correctly prioritizing security and standards, does not.

However, from an operational and user-experience perspective, this leads to a recurring issue:
end users cannot interact with legitimate content from widely used senders, and administrators are repeatedly asked to justify why SOGo behaves differently.

Minimal example (simplified)

">https://example.com">

Read more

After sanitization, the is removed or detached, leaving a styled without a clickable link.

0005992: Repeating events are not shown in Webmail BEFORE importing into calendar

Sun, 18 Jan 2026 13:15:08 +0000
If you get an invite for an repeating event from a companies e-mail sent by Microsoft Outlook via Exchange the preview by SoGo shows only the first occurence of the meeting but neither that's a repeating event nor the other and last occurences.
This is very annoying as the user will crosscheck with first occurence, agrees to one meeting and will learn that he accepted unintentionally a whole bunch of meetings.

A (blurred) screenshot is attached as well an excerpt of the ics file:

RRULE:FREQ=WEEKLY;UNTIL=20241119T120000Z;INTERVAL=2;BYDAY=TU;WKST=MO
DTSTART;TZID=W. Europe Standard Time:20240730T130000
DTEND;TZID=W. Europe Standard Time:20240730T140000
CLASS:PUBLIC
PRIORITY:1
DTSTAMP:20240722T114355Z
LOCATION;LANGUAGE=de-DE:Microsoft Teams-Besprechung

Currently we are looking into the *.ics file manually before accepting an event from people who want to invite us.
As this is a very hard workaround we would favour if this clould be fixed soon. Thank you very much!

The Bahnkonzept team from Dresden/Germany