We will update Nextcloud to version 35.0.2 and PHP to 8.4.

Reference: #944 #945

Start maintenance window: 09/11/2026 23:00 Stop maintenance window: 10/11/2026 02:00

We will update GitLab Runner to version v19.5.3.

Reference: #144

Start maintenance window: 09/11/2026 23:00
Stop maintenance window: 10/11/2026 02:00

We will update the following packages to the latest version.

• chromium-common/oldstable-security 156.0.8078.79-1~deb12u1 amd64 [upgradable from: 156.0.8078.73-1~deb12u1]
• chromium/oldstable-security 156.0.8078.79-1~deb12u1 amd64 [upgradable from: 156.0.8078.73-1~deb12u1]
• chromium-sandbox/oldstable-security 156.0.8078.79-1~deb12u1 amd64 [upgradable from: 156.0.8078.73-1~deb12u1]
• docker-ce/bookworm 5:29.9.3-1~debian.12~bookworm amd64 [upgradable from: 5:29.9.2-1~debian.12~bookworm]
• docker-ce-cli/bookworm 5:29.9.3-1~debian.12~bookworm amd64 [upgradable from: 5:29.9.2-1~debian.12~bookworm]
• docker-ce-rootless-extras/bookworm 5:29.9.3-1~debian.12~bookworm amd64 [upgradable from: 5:29.9.2-1~debian.12~bookworm]
• docker-compose-plugin/bookworm 5.7.0-1~debian.12~bookworm amd64 [upgradable from: 5.6.1-1~debian.12~bookworm]
• libtrapperkeeper-authorization-clojure/oldstable-security 1.0.0-4+deb12u1 all [upgradable from: 1.0.0-4]
• libxencall1/oldstable-security 4.17.7+13-g2445b30a44-0+deb12u1 amd64 [upgradable from: 4.17.7-0+deb12u1]
• libxendevicemodel1/oldstable-security 4.17.7+13-g2445b30a44-0+deb12u1 amd64 [upgradable from: 4.17.7-0+deb12u1]
• libxenevtchn1/oldstable-security 4.17.7+13-g2445b30a44-0+deb12u1 amd64 [upgradable from: 4.17.7-0+deb12u1]
• libxenforeignmemory1/oldstable-security 4.17.7+13-g2445b30a44-0+deb12u1 amd64 [upgradable from: 4.17.7-0+deb12u1]
• libxengnttab1/oldstable-security 4.17.7+13-g2445b30a44-0+deb12u1 amd64 [upgradable from: 4.17.7-0+deb12u1]
• libxenhypfs1/oldstable-security 4.17.7+13-g2445b30a44-0+deb12u1 amd64 [upgradable from: 4.17.7-0+deb12u1]
• libxenmisc4.17/oldstable-security 4.17.7+13-g2445b30a44-0+deb12u1 amd64 [upgradable from: 4.17.7-0+deb12u1]
• libxenstore4/oldstable-security 4.17.7+13-g2445b30a44-0+deb12u1 amd64 [upgradable from: 4.17.7-0+deb12u1]
• libxentoolcore1/oldstable-security 4.17.7+13-g2445b30a44-0+deb12u1 amd64 [upgradable from: 4.17.7-0+deb12u1]
• libxentoollog1/oldstable-security 4.17.7+13-g2445b30a44-0+deb12u1 amd64 [upgradable from: 4.17.7-0+deb12u1]
• puppet-agent/oldstable-security 7.23.0-1+deb12u1 all [upgradable from: 7.23.0-1]
• puppet/oldstable-security 7.23.0-1+deb12u1 all [upgradable from: 7.23.0-1]
• rsync/oldstable-security 3.5.0+ds1-0+deb12u1 amd64 [upgradable from: 3.2.7-1+deb12u6]

Start maintenance window: 09/11/2026 23:00
Stop maintenance window: 10/11/2026 02:00

We will update the following packages to the latest version.

• hyperv-daemons/stable-security 6.12.116-1 amd64 [upgradable from: 6.12.113-1]
• libruby3.3/stable-security 3.3.13-0+deb13u1 amd64 [upgradable from: 3.3.8-2]
• libtrapperkeeper-authorization-clojure/stable-security 2.0.1-2+deb13u1 all [upgradable from: 2.0.1-2]
• linux-image-amd64/stable-security 6.12.116-1 amd64 [upgradable from: 6.12.115-2]
• linux-libc-dev/stable-security 6.12.116-1 all [upgradable from: 6.12.115-2]
• puppet-agent/stable-security 8.10.0-5+deb13u1 all [upgradable from: 8.10.0-5]
• puppet/stable-security 8.10.0-5+deb13u1 all [upgradable from: 8.10.0-5]
• ruby3.3/stable-security 3.3.13-0+deb13u1 amd64 [upgradable from: 3.3.8-2]
• vim-common/stable-security 2:9.1.1230-2+deb13u2 all [upgradable from: 2:9.1.1230-2+deb13u1]
• vim-runtime/stable-security 2:9.1.1230-2+deb13u2 all [upgradable from: 2:9.1.1230-2+deb13u1]
• vim/stable-security 2:9.1.1230-2+deb13u2 amd64 [upgradable from: 2:9.1.1230-2+deb13u1]
• vim-tiny/stable-security 2:9.1.1230-2+deb13u2 amd64 [upgradable from: 2:9.1.1230-2+deb13u1]
• xxd/stable-security 2:9.1.1230-2+deb13u2 amd64 [upgradable from: 2:9.1.1230-2+deb13u1]
• zlib1g-dev/stable-security 1:1.3.dfsg+really1.3.1-1+deb13u1 amd64 [upgradable from: 1:1.3.dfsg+really1.3.1-1+b1]
• zlib1g/stable-security 1:1.3.dfsg+really1.3.1-1+deb13u1 amd64 [upgradable from: 1:1.3.dfsg+really1.3.1-1+b1]

Start maintenance window: 09/11/2026 23:00
Stop maintenance window: 10/11/2026 02:00

We will update Mailpit to version v1.33.1.

Reference: #64

Start maintenance window: 09/11/2026 23:00
Stop maintenance window: 10/11/2026 02:00

We will update Collabora to version 26.04.6.1.1.

Reference: #1638

Start maintenance window: 09/11/2026 23:00
Stop maintenance window: 10/11/2026 02:00

We will update LimeSurvey to version 7.9.1.

Reference: #138

Start maintenance window: 09/11/2026 23:00
Stop maintenance window: 10/11/2026 02:00

We will update Roundcube to version 1.7.6.

Reference: #137

Start maintenance window: 09/11/2026 23:00
Stop maintenance window: 10/11/2026 02:00

We will update Imaginary to version 20261109_101109.

Reference: #97

Start maintenance window: 09/11/2026 23:00
Stop maintenance window: 10/11/2026 02:00

To improve email deliverability, we will restrict email aliases from forwarding messages to external domains.

Why this change?

Forwarding emails to external providers can cause authentication issues (particularly SPF), resulting in messages being rejected or classified as spam.

What does this mean?

• Existing aliases will continue to work as usual, unless modified.
• Forwarding to locally hosted domains remains unaffected.
• Creating or modifying aliases to forward to external domains will be restricted.
• External forwarding will remain possible through an alternative method.

For instructions, please see our forwarding guide.

If you have any questions, do not hesitate to contact us.

Start maintenance window: 30/11/2026 23:00
Stop maintenance window: 01/12/2026 02:00