diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13.tar.gz b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13.tar.gz
deleted file mode 100644
index b1b9c1475..000000000
Binary files a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13.tar.gz and /dev/null differ
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13_all.deb b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13_all.deb
deleted file mode 100644
index 8c18d402d..000000000
Binary files a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13_all.deb and /dev/null differ
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13_amd64.changes b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13_amd64.changes
deleted file mode 100644
index 4cd05ed0c..000000000
--- a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13_amd64.changes
+++ /dev/null
@@ -1,73 +0,0 @@
-Format: 1.8
-Date: Tue, 15 Sep 2026 21:19:14 +0200
-Source: linuxmuster-api7
-Binary: linuxmuster-api7
-Built-For-Profiles: noudeb
-Architecture: source all
-Version: 7.4.13
-Distribution: lmn74
-Urgency: medium
-Maintainer: Arnaud Kientz <arnaud@linuxmuster.net>
-Changed-By: Arnaud Kientz <arnaud@linuxmuster.net>
-Description:
- linuxmuster-api7 - Api for the linuxmuster.net 7 server.
-Changes:
- linuxmuster-api7 (7.4.13) lmn74; urgency=medium
- .
-   * [security] A host key can be restricted to a list of endpoints with a
-     new optional "scope" in its host_keys entry. Without one, nothing
-     changes: the key keeps reaching the whole API with the LDAP role of
-     its user. A scope only ever narrows, the role is still checked behind
-     it. Entries read "<METHOD> <path>" and are matched against the path
-     as it appears on the wire, without the /v1 prefix, with "*" for one
-     path segment and "**" for the rest of the path. An entry matching no
-     route of the API is logged as a warning at startup and never allows
-     anything.
-   * [security] The rate limit of GET /v1/auth/ is configurable through a
-     new rate_limit section (requests, window, whitelist) instead of being
-     fixed at 5 requests per 60 s. The counter stays per client address,
-     which a front-end signing all its users in from one address would
-     spend on the first few of them: such an address can now be
-     whitelisted. Setting requests to 0 or less disables the limiter.
-     Callers on the host itself are still never counted. Fix #41, reported
-     by @Pasemesan.
-   * [linbo] Three routes for a group's VDI config, read, written and
-     deleted at /v1/linbo/startconfs/{group_id}/vdi. Not to be confused
-     with an image's .vdi sidecar. Fix #38, reported by @TomlDev.
-   * [linbo] The start.conf backups the server already keeps are exposed:
-     list, restore and delete under
-     /v1/linbo/startconfs/{group_id}/backups. A restore backs the current
-     file up before overwriting it. Fix #39, reported by @TomlDev.
-   * [linbo] GET /v1/linbo/iso downloads linbo.iso, GET /v1/linbo/examples
-     lists the example configs shipped with the server and
-     /v1/linbo/examples/{name} returns one of them. See #39.
-   * [linbo] School-administrators reach the LINBO routes, which were
-     global-admin only while the Schulkonsole has always granted them the
-     same access. Routes acting on machines (wol, boot logs) are filtered
-     to the school of the caller through devices.csv; the ones reading
-     /srv/linbo address a flat, server-wide set of files and each
-     dangerous endpoint says so in its description. Per-school LINBO files
-     are the real fix and are planned separately. Only /server-info stays
-     global-admin only. Fix #37, reported by @TomlDev.
-   * [linbo] The startconfs and configs routes no longer take a school
-     parameter: group_id addresses one server-wide set of files and the
-     parameter was only validated, never used.
-   * [packaging] postinst: the deprecated venv migration is dropped, and a
-     new linuxmuster-venv dpkg trigger reinstalls the API requirements
-     when linuxmuster-tools7 rebuilds the shared venv after a Python
-     upgrade.
-Checksums-Sha1:
- 4098bf1102978d631bb580c7dfdd82b712ee00f3 571 linuxmuster-api7_7.4.13.dsc
- 148ec390f552cc9662b0788b351d21bc9440e6ae 149367 linuxmuster-api7_7.4.13.tar.gz
- adc0f208415a76e329f50859e3f182c4b46b6400 112548 linuxmuster-api7_7.4.13_all.deb
- 303bd9738a1dadb8f944c5ddaca043a93b6f9146 7738 linuxmuster-api7_7.4.13_amd64.buildinfo
-Checksums-Sha256:
- 3b01f726d07324b58fc36e5f72eab69da4ffd71a61f4a9f041061bd742b79c6b 571 linuxmuster-api7_7.4.13.dsc
- 7e364c3a19fc6823651a37c38d0b36a933dd8e7c05717bbed9c2c9e070533787 149367 linuxmuster-api7_7.4.13.tar.gz
- 9bea15b1989eb085373057b8284b9c6e4978516bdf462dbf0733cc435a0e4de0 112548 linuxmuster-api7_7.4.13_all.deb
- d31057dcd3cbb970298dec1b42242ee0c83676e950fcf42f2b935e44de7079d5 7738 linuxmuster-api7_7.4.13_amd64.buildinfo
-Files:
- 644c83882479f5fb7b256c4393a8aeac 571 linuxmuster optional linuxmuster-api7_7.4.13.dsc
- 7a2df56c2dcfe636b093882927dfee0e 149367 linuxmuster optional linuxmuster-api7_7.4.13.tar.gz
- 5fc016bca1ec0a5c8e7ddfc01685a66d 112548 linuxmuster optional linuxmuster-api7_7.4.13_all.deb
- d0580e6819c9b613e6f8019e39553ac0 7738 linuxmuster optional linuxmuster-api7_7.4.13_amd64.buildinfo
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13.dsc b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14.dsc
similarity index 53%
rename from packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13.dsc
rename to packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14.dsc
index 395d2b87e..f8b26cfe8 100644
--- a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13.dsc
+++ b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14.dsc
@@ -2,15 +2,15 @@ Format: 1.0
 Source: linuxmuster-api7
 Binary: linuxmuster-api7
 Architecture: all
-Version: 7.4.13
+Version: 7.4.14
 Maintainer: Arnaud Kientz <arnaud@linuxmuster.net>
 Standards-Version: 5.0.0
 Build-Depends: debhelper (>= 5.0.0)
 Package-List:
  linuxmuster-api7 deb linuxmuster optional arch=all
 Checksums-Sha1:
- 148ec390f552cc9662b0788b351d21bc9440e6ae 149367 linuxmuster-api7_7.4.13.tar.gz
+ 4329c8ac8ff000d5bf1dcdcf6748de576a9e69a7 156094 linuxmuster-api7_7.4.14.tar.gz
 Checksums-Sha256:
- 7e364c3a19fc6823651a37c38d0b36a933dd8e7c05717bbed9c2c9e070533787 149367 linuxmuster-api7_7.4.13.tar.gz
+ e9b507285353c6379a253ca6da460f57c69f67b0387343f9dd77994dad52e3e2 156094 linuxmuster-api7_7.4.14.tar.gz
 Files:
- 7a2df56c2dcfe636b093882927dfee0e 149367 linuxmuster-api7_7.4.13.tar.gz
+ cc2ffaacc0a72b3b5f52f621c8426ba8 156094 linuxmuster-api7_7.4.14.tar.gz
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14.tar.gz b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14.tar.gz
new file mode 100644
index 000000000..83006a9b7
Binary files /dev/null and b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14.tar.gz differ
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14_all.deb b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14_all.deb
new file mode 100644
index 000000000..19b2f79d7
Binary files /dev/null and b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14_all.deb differ
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13_amd64.buildinfo b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14_amd64.buildinfo
similarity index 86%
rename from packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13_amd64.buildinfo
rename to packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14_amd64.buildinfo
index 14aa6434a..8056ab729 100644
--- a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.13_amd64.buildinfo
+++ b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14_amd64.buildinfo
@@ -2,19 +2,19 @@ Format: 1.0
 Source: linuxmuster-api7
 Binary: linuxmuster-api7
 Architecture: all source
-Version: 7.4.13
+Version: 7.4.14
 Checksums-Md5:
- 644c83882479f5fb7b256c4393a8aeac 571 linuxmuster-api7_7.4.13.dsc
- 5fc016bca1ec0a5c8e7ddfc01685a66d 112548 linuxmuster-api7_7.4.13_all.deb
+ d62a13941d30add06f7ddc01687d00a1 571 linuxmuster-api7_7.4.14.dsc
+ a425e6b7db6b691c175d9f82dde2f58d 116238 linuxmuster-api7_7.4.14_all.deb
 Checksums-Sha1:
- 4098bf1102978d631bb580c7dfdd82b712ee00f3 571 linuxmuster-api7_7.4.13.dsc
- adc0f208415a76e329f50859e3f182c4b46b6400 112548 linuxmuster-api7_7.4.13_all.deb
+ 14f9bdab2a77fdd04e125da3252ef3e9547e0403 571 linuxmuster-api7_7.4.14.dsc
+ 658534d38772c22cf6cc442884db8d6fcff98b63 116238 linuxmuster-api7_7.4.14_all.deb
 Checksums-Sha256:
- 3b01f726d07324b58fc36e5f72eab69da4ffd71a61f4a9f041061bd742b79c6b 571 linuxmuster-api7_7.4.13.dsc
- 9bea15b1989eb085373057b8284b9c6e4978516bdf462dbf0733cc435a0e4de0 112548 linuxmuster-api7_7.4.13_all.deb
+ e07e520962564d6b30726ed69b0eff9b01ce0d1443b9fd78769222db8c6d077f 571 linuxmuster-api7_7.4.14.dsc
+ 3d6a4938239df76964861287aca1ff07f7aeaf27804f433e9b5c03413107e961 116238 linuxmuster-api7_7.4.14_all.deb
 Build-Origin: Ubuntu
 Build-Architecture: amd64
-Build-Date: Tue, 15 Sep 2026 19:25:57 +0000
+Build-Date: Sun, 11 Oct 2026 08:47:28 +0000
 Build-Tainted-By:
  merged-usr-via-aliased-dirs
  usr-local-has-includes
@@ -88,16 +88,16 @@ Installed-Build-Depends:
  libasan8 (= 14.2.0-4ubuntu2~24.04.1),
  libatomic1 (= 14.2.0-4ubuntu2~24.04.1),
  libattr1 (= 1:2.5.2-1ubuntu0.1),
- libaudit-common (= 1:3.1.2-2.1build1.1),
- libaudit1 (= 1:3.1.2-2.1build1.1),
+ libaudit-common (= 1:3.1.2-2.1ubuntu0.1),
+ libaudit1 (= 1:3.1.2-2.1ubuntu0.1),
  libbinutils (= 2.42-4ubuntu2.10),
  libblkid1 (= 2.39.3-9ubuntu6.6),
  libbsd0 (= 0.12.1-1build1.1),
  libbz2-1.0 (= 1.0.8-5.1ubuntu0.1),
- libc-bin (= 2.39-0ubuntu8.8),
- libc-dev-bin (= 2.39-0ubuntu8.8),
- libc6 (= 2.39-0ubuntu8.8),
- libc6-dev (= 2.39-0ubuntu8.8),
+ libc-bin (= 2.39-0ubuntu8.9),
+ libc-dev-bin (= 2.39-0ubuntu8.9),
+ libc6 (= 2.39-0ubuntu8.9),
+ libc6-dev (= 2.39-0ubuntu8.9),
  libcap-ng0 (= 0.8.4-2build2),
  libcap2 (= 1:2.66-5ubuntu2.4),
  libcc1-0 (= 14.2.0-4ubuntu2~24.04.1),
@@ -159,7 +159,7 @@ Installed-Build-Depends:
  libpam-runtime (= 1.5.3-5ubuntu5.7),
  libpam0g (= 1.5.3-5ubuntu5.7),
  libpcre2-8-0 (= 10.42-4ubuntu2.1),
- libperl5.38t64 (= 5.38.2-3.2ubuntu0.4),
+ libperl5.38t64 (= 5.38.2-3.2ubuntu0.6),
  libpipeline1 (= 1.5.7-2),
  libquadmath0 (= 14.2.0-4ubuntu2~24.04.1),
  libreadline8t64 (= 8.2-4build1),
@@ -168,7 +168,7 @@ Installed-Build-Depends:
  libsframe1 (= 2.42-4ubuntu2.10),
  libsigsegv2 (= 2.14-1ubuntu2),
  libsmartcols1 (= 2.39.3-9ubuntu6.6),
- libssl3t64 (= 3.0.13-0ubuntu3.15),
+ libssl3t64 (= 3.0.13-0ubuntu3.16),
  libstdc++-13-dev (= 13.3.0-6ubuntu2~24.04.1),
  libstdc++6 (= 14.2.0-4ubuntu2~24.04.1),
  libsub-override-perl (= 0.10-1),
@@ -181,9 +181,9 @@ Installed-Build-Depends:
  libudev1 (= 255.4-1ubuntu8.17),
  libunistring5 (= 1.1-2build1.1),
  libuuid1 (= 2.39.3-9ubuntu6.6),
- libxml2 (= 2.9.14+dfsg-1.3ubuntu3.8),
+ libxml2 (= 2.9.14+dfsg-1.3ubuntu3.9),
  libzstd1 (= 1.5.5+dfsg2-2build1.1),
- linux-libc-dev (= 6.8.0-139.139),
+ linux-libc-dev (= 6.8.0-146.146),
  llvm-16-linker-tools (= 1:16.0.6-23ubuntu4),
  llvm-17-linker-tools (= 1:17.0.6-9ubuntu1),
  llvm-18-linker-tools (= 1:18.1.3-1ubuntu1),
@@ -196,9 +196,9 @@ Installed-Build-Depends:
  ncurses-base (= 6.4+20240113-1ubuntu2.2),
  ncurses-bin (= 6.4+20240113-1ubuntu2.2),
  patch (= 2.7.6-7build3),
- perl (= 5.38.2-3.2ubuntu0.4),
- perl-base (= 5.38.2-3.2ubuntu0.4),
- perl-modules-5.38 (= 5.38.2-3.2ubuntu0.4),
+ perl (= 5.38.2-3.2ubuntu0.6),
+ perl-base (= 5.38.2-3.2ubuntu0.6),
+ perl-modules-5.38 (= 5.38.2-3.2ubuntu0.6),
  po-debconf (= 1.0.21+nmu1),
  readline-common (= 8.2-4build1),
  rpcsvc-proto (= 1.4.2-0ubuntu7),
@@ -214,4 +214,4 @@ Environment:
  DEB_BUILD_PROFILES="noudeb"
  LANG="C.UTF-8"
  MAKEFLAGS=""
- SOURCE_DATE_EPOCH="1789499954"
+ SOURCE_DATE_EPOCH="1791707400"
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14_amd64.changes b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14_amd64.changes
new file mode 100644
index 000000000..762f677a4
--- /dev/null
+++ b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.14_amd64.changes
@@ -0,0 +1,61 @@
+Format: 1.8
+Date: Sun, 11 Oct 2026 10:30:00 +0200
+Source: linuxmuster-api7
+Binary: linuxmuster-api7
+Built-For-Profiles: noudeb
+Architecture: source all
+Version: 7.4.14
+Distribution: lmn74
+Urgency: medium
+Maintainer: Arnaud Kientz <arnaud@linuxmuster.net>
+Changed-By: Arnaud Kientz <arnaud@linuxmuster.net>
+Description:
+ linuxmuster-api7 - Api for the linuxmuster.net 7 server.
+Changes:
+ linuxmuster-api7 (7.4.14) lmn74; urgency=medium
+ .
+   * [security] Basic auth accepts non-ASCII credentials, decoded as UTF-8
+     with a Latin-1 fallback. FastAPI only decoded ASCII, so a password
+     accepted by set-current-password, like one with umlauts, ß or €,
+     could never be used to log in. Fix #47, reported by @TomlDev.
+   * [groups] PATCH /groups/{group} only writes the flags it is sent. The
+     schema defaulted join to True and hide, mailalias and maillist to
+     False, so a patch only renaming a group also unhid it and made it
+     joinable. Fix #49, reported by @Maddi02, whose tests were taken
+     over.
+   * [devices] PATCH /devices/{device} passes the school when writing the
+     credentials of a device, which were looked for in default-school
+     only. Thanks to @amolani (#42).
+   * [linbo] New POST /linbo/restart-services, restarting linbo-multicast
+     and linbo-torrent after a change on an image. The services are
+     global: a school-administrator restarts them for every school.
+     Fix #43, reported by @TomlDev.
+   * [linbo] New GET /linbo/sync/onboot, GET and DELETE
+     /linbo/sync/onboot/{hostname}, to list, read and withdraw the
+     commands waiting for a host's next boot. A school-administrator
+     only sees the hosts of their school. Fix #44, reported by @TomlDev.
+   * [linbo] POST /linbo/hosts/query, GET /linbo/configs and POST
+     /linbo/hosts/scan return an empty list instead of a 404 when
+     nothing matches. Fix #45, reported by @TomlDev.
+   * [linbo] GET /linbo/changes no longer misses a change made in the
+     same second as the cursor. The deletedHosts and deletedStartConfs
+     fields, always empty, are removed. See linuxmuster-tools#38.
+   * [sessions] Session members are sorted in natural order.
+   * [devices] GET /devices/roles reads the computer roles from the new
+     SophomorixIni.computer_roles.
+   * [packaging] Depends on linuxmuster-tools7 (>= 7.4.19).
+Checksums-Sha1:
+ 14f9bdab2a77fdd04e125da3252ef3e9547e0403 571 linuxmuster-api7_7.4.14.dsc
+ 4329c8ac8ff000d5bf1dcdcf6748de576a9e69a7 156094 linuxmuster-api7_7.4.14.tar.gz
+ 658534d38772c22cf6cc442884db8d6fcff98b63 116238 linuxmuster-api7_7.4.14_all.deb
+ 30ceda32e6d237c07992ae6042d6a8db4b2179ba 7740 linuxmuster-api7_7.4.14_amd64.buildinfo
+Checksums-Sha256:
+ e07e520962564d6b30726ed69b0eff9b01ce0d1443b9fd78769222db8c6d077f 571 linuxmuster-api7_7.4.14.dsc
+ e9b507285353c6379a253ca6da460f57c69f67b0387343f9dd77994dad52e3e2 156094 linuxmuster-api7_7.4.14.tar.gz
+ 3d6a4938239df76964861287aca1ff07f7aeaf27804f433e9b5c03413107e961 116238 linuxmuster-api7_7.4.14_all.deb
+ 7aa6d3fe1fec189673924ab07ac1ce14bd76230030d445895e09376b6be4ef38 7740 linuxmuster-api7_7.4.14_amd64.buildinfo
+Files:
+ d62a13941d30add06f7ddc01687d00a1 571 linuxmuster optional linuxmuster-api7_7.4.14.dsc
+ cc2ffaacc0a72b3b5f52f621c8426ba8 156094 linuxmuster optional linuxmuster-api7_7.4.14.tar.gz
+ a425e6b7db6b691c175d9f82dde2f58d 116238 linuxmuster optional linuxmuster-api7_7.4.14_all.deb
+ 549bf7e2a83fcdb6ea611ec0c1549e03 7740 linuxmuster optional linuxmuster-api7_7.4.14_amd64.buildinfo