Security update of the groupware service leads to restrictions in the web interface (OWA)

2024/03/14

Due to highly classified security vulnerabilities, a security update of the groupware service is being carried out. Temporarily, downloads of attachments and the display of images in the groupware web interface (OWA) are not possible.

On 14/03/2024, a newly released security patch will be installed due to very highly rated security vulnerabilities.

Once the installation is complete, there will be restrictions in the groupware web interface (OWA): no file attachments can be downloaded and no images (inline images) can be displayed in the email. You can still access e-mails and their attachments with an e-mail programme (Outlook, Thunderbird, MacMail etc.).

Microsoft is working on eliminating these restrictions. However, there is no estimate yet as to when this correction will be published by Microsoft. In order to ensure the security of communication and emails at TU Darmstadt, the installation of the patch is urgently required.

We will inform you as soon as a new update is installed and the restriction is resolved.

Technical details from Microsoft can be found on the following websites:

KB5036386

CVE-2024-26198

Download domains don't work after installing the Su version from March 2024