FreddleSpl0it
04c9413ed9
[Rspamd] Remove the URLhaus and MalwareBazaar maps retired by abuse.ch
2026-11-10 13:50:48 +01:00
FreddleSpl0it
5e98d8e279
Merge pull request #7581 from peterschwps/fix/trim-logs-redis-password
...
[Dovecot] Mask Redis password in trim_logs output
2026-11-10 13:43:36 +01:00
FreddleSpl0it
4caecf77e0
Merge pull request #7610 from woodfairy/fix/brotli-cve-2026-111497
...
[Nginx][Clamd][Postfix] Rebuild images for brotli CVE-2026-111497 (CISA KEV)
2026-11-10 13:40:04 +01:00
FreddleSpl0it
37d304d075
Merge pull request #7544 from jorgeavlobo/fix/keycloak-admin-token-introspect
...
[Web] Keycloak: skip introspection of an expired admin token and reuse the new one
2026-11-10 01:45:16 +01:00
FreddleSpl0it
25086a9b3f
Merge pull request #7488 from apio-sys/fix/rspamd-dqs-dbl-full-rule
...
[Rspamd] write full DBL rule when SPAMHAUS_DQS_KEY is set
2026-11-10 01:42:29 +01:00
FreddleSpl0it
7a3f1cbd41
Merge pull request #7530 from ThxGiving/fix/eas-auth-challenge
...
[Nginx] Send Basic auth challenge for unauthenticated ActiveSync requests
2026-11-10 01:39:28 +01:00
FreddleSpl0it
616717bc0d
Merge pull request #7639 from mailcow/fix/7580
...
[Rspamd] Remove MX check overrides that rspamd ignores
2026-11-10 01:28:42 +01:00
FreddleSpl0it
6fd271ee64
[Rspamd] Remove MX check overrides that rspamd ignores
2026-11-10 01:27:52 +01:00
FreddleSpl0it
7459cc046a
Merge pull request #7638 from mailcow/fix/7579
...
[Web] Template lists: sort size columns numerically
2026-11-10 01:08:36 +01:00
FreddleSpl0it
58dad73eee
[Web] Template lists: sort size columns by bytes
2026-11-10 01:07:32 +01:00
FreddleSpl0it
b21acd4787
Merge pull request #7637 from mailcow/fix/7557
...
[Web] Domain admins saw sender aliases of other domains
2026-11-10 01:02:39 +01:00
FreddleSpl0it
4ab954dcd1
[Web] Domain admins: show sender ACL and alias entries of their own domains only
2026-11-10 01:01:22 +01:00
FreddleSpl0it
eefc17274e
Merge pull request #7636 from mailcow/fix/7545
...
[Rspamd] WHITELISTED_FWD_HOST was skipped at the reject threshold
2026-11-10 00:57:45 +01:00
FreddleSpl0it
4878840bdd
[Rspamd] Forwarding hosts: check them as prefilter and scan the mail completely
2026-11-10 00:56:53 +01:00
FreddleSpl0it
869bcb3c42
Merge pull request #7635 from mailcow/fix/7518
...
[Rspamd] Domain footer broke DKIM for mail without Content-Transfer-Encoding
2026-11-09 23:36:42 +01:00
FreddleSpl0it
0bcde13500
[Rspamd] Domain footer: add the Content-Transfer-Encoding header to the delivered mail
2026-11-09 23:34:57 +01:00
FreddleSpl0it
867b9dddab
Merge pull request #7634 from mailcow/fix/7503
...
[Web] Keycloak: accept Base64-encoded mailcow_password
2026-11-09 23:30:20 +01:00
FreddleSpl0it
a4326e6642
[Web] Keycloak Mailpassword Flow: accept Base64-encoded password hashes
2026-11-09 23:28:53 +01:00
FreddleSpl0it
c5e89a9e03
Merge pull request #7633 from mailcow/fix/7501
...
[Web] Forwarding hosts: store IPv6 addresses in canonical form
2026-11-09 23:25:40 +01:00
FreddleSpl0it
45d31b3279
[Web] Forwarding hosts: store IPv6 addresses in canonical form
2026-11-09 23:24:39 +01:00
FreddleSpl0it
24780ea5fb
Merge pull request #7632 from mailcow/fix/7489
...
[Rspamd] Quarantine stored nothing without Q_EXCLUDE_DOMAINS
2026-11-09 23:22:11 +01:00
FreddleSpl0it
38b031e10c
[Rspamd] Quarantine: store mail when Q_EXCLUDE_DOMAINS is not set
2026-11-09 23:21:14 +01:00
FreddleSpl0it
e2fb833ceb
Merge pull request #7631 from mailcow/fix/7482
...
[Web] Autodiscover: no ActiveSync when autodiscoverType is imap
2026-11-09 23:18:50 +01:00
FreddleSpl0it
e27cb83326
[Web] Autodiscover: no ActiveSync when autodiscoverType is imap
2026-11-09 23:17:55 +01:00
FreddleSpl0it
f810cecd3a
Merge pull request #7630 from mailcow/fix/7476
...
[Web] force_tfa did not prevent removing 2FA
2026-11-09 23:14:38 +01:00
FreddleSpl0it
cfad223824
[Web] force_tfa: read the flag with JSON_VALUE
2026-11-09 23:13:26 +01:00
FreddleSpl0it
6d20463acb
Merge pull request #7629 from mailcow/fix/7454
...
[Nginx] Edit and quarantine links: allow a trailing slash
2026-11-09 23:09:05 +01:00
FreddleSpl0it
1a42c19050
[Nginx] Accept a trailing slash in /edit and /qhandler links
2026-11-09 23:08:14 +01:00
FreddleSpl0it
b9f8eb4c31
Merge pull request #7628 from mailcow/fix/7449
...
[Postfix-TLSPol] Update to 1.14.5
2026-11-09 23:05:35 +01:00
FreddleSpl0it
ce4150f921
[Postfix-TLSPol] Update to 1.14.5
2026-11-09 23:04:33 +01:00
FreddleSpl0it
7cc8cac705
Merge pull request #7627 from mailcow/fix/7318
...
[Rspamd] Mails between 50 and 100 MiB were deferred forever
2026-11-09 23:01:43 +01:00
FreddleSpl0it
3fd1d017cf
[Rspamd] Raise max_message above the Postfix message size limit
2026-11-09 23:00:38 +01:00
FreddleSpl0it
8597954f91
Merge pull request #7626 from mailcow/fix/7179
...
[Rspamd] Sub-addressing: read the tag from the original SMTP recipient
2026-11-09 22:55:05 +01:00
FreddleSpl0it
2b4ffe8808
[Rspamd] Sub-addressing: read the tag from the original SMTP recipient
2026-11-09 22:53:07 +01:00
FreddleSpl0it
1911847c3b
Merge pull request #7625 from mailcow/fix/6931
...
[Web] Update "Last modified" when tags of a domain or mailbox change
2026-11-09 22:48:21 +01:00
FreddleSpl0it
497872080b
[Web] Update "Last modified" when tags of a domain or mailbox change
2026-11-09 22:46:15 +01:00
FreddleSpl0it
a0dc3447f8
Merge pull request #7624 from mailcow/fix/6853
...
[Web][Dovecot] Mailbox list and API: show the last SOGo login
2026-11-09 22:42:27 +01:00
FreddleSpl0it
e0640949a2
[Web][Dovecot] Show the last SOGo login in the mailbox list and API
2026-11-09 22:39:42 +01:00
milkmaker
bf744413bd
Translations update from Weblate ( #7623 )
...
* [Web] Language file updated by 'Cleanup translation files' addon
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Language file updated by 'Cleanup translation files' addon
Co-authored-by: milkmaker <milkmaker@mailcow.de >
2026-11-09 21:41:36 +01:00
FreddleSpl0it
262de81da1
Merge pull request #7621 from mailcow/fix/7606
...
[Dockerapi] Group IMAP grants: set ACLs only on existing folders
2026-11-09 19:43:38 +01:00
FreddleSpl0it
5f13bb2046
[Dockerapi] Group IMAP grants: set ACLs only on existing folders
2026-11-09 19:41:17 +01:00
woodfairy
0a0686ef19
[Nginx][Clamd][Postfix] Rebuild images for brotli CVE-2026-111497
...
The current nginx, clamd and postfix images ship a brotli decoder in the
affected range 1.0.3 - 1.2.0 (CVE-2026-111497, CVSS 9.8, listed in CISA KEV):
- nginx:1.30.6-2 brotli-libs 1.2.0-r1 (fixed in Alpine 3.24: 1.2.1-r0)
- clamd:1.4.6-1 brotli-libs 1.2.0-r1 (fixed in Alpine 3.24: 1.2.1-r0)
- postfix:3.10.12-1 libbrotli1 1.1.0-2+b7 (fixed in trixie-security:
1.1.0-2+deb13u1, DSA-6582-1)
All other mailcow images already contain a fixed version.
clamd and postfix only need a rebuild, which pulls the fixed packages.
The postfix rebuild also picks up Debian's postfix 3.10.13, hence the
new tag postfix:3.10.13-1. The
nginx image never upgraded the packages of its base image, so it only got
fixes when nginx:<version>-alpine was republished. It now runs
apk upgrade like clamd and acme do.
2026-11-08 00:49:55 +01:00
FreddleSpl0it
329bca1d46
Merge pull request #7596 from mailcow/fix/7595
...
[Web] Mailbox protocols do not limit app passwords
2026-11-05 13:19:59 +01:00
FreddleSpl0it
6a83b9e0f0
[Web] Mailbox protocols do not limit app passwords
2026-11-05 12:46:22 +01:00
FreddleSpl0it
3ffecc505e
Merge pull request #7593 from mailcow/feat/netfilter-unban-all
...
[Web] Add Netfilter unban all button
2026-11-04 22:29:32 +01:00
FreddleSpl0it
e8f12cd061
[Web] Add Netfilter unban all button
2026-11-04 22:23:16 +01:00
FreddleSpl0it
3a4e479424
[Web] Update group info text
2026-11-04 22:16:10 +01:00
FreddleSpl0it
f1e51c0a40
[Update] Mark 2026-11 as major update
2026-11-04 17:39:22 +01:00
FreddleSpl0it
ddcba178af
Merge pull request #7590 from mailcow/feat/sogo-5.12.13
...
[SOGo] Update to 5.12.13
2026-11-04 16:55:52 +01:00
FreddleSpl0it
1752dd6ddf
[SOGo] Update to 5.12.13
2026-11-04 16:54:00 +01:00