FreddleSpl0it
ff6329d01b
[Rspamd] Fix CTE and boundary prefix in domain wide footer
2026-10-06 09:41:34 +02:00
FreddleSpl0it
e8209d6504
Merge pull request #7504 from ralfbergs/fix/typo-resovler
...
Fixed typo (changing RESOVLER to RESOLVER).
2026-10-06 09:21:33 +02:00
FreddleSpl0it
626d006a3d
Merge pull request #7484 from oidipos/feat/tlspol
...
[postfix-tlspol] bump to v1.14.0
2026-10-06 09:20:47 +02:00
Ralf Bergs
e88c734d0a
Fixed typo (changing RESOVLER to RESOLVER).
2026-10-03 12:30:32 +02:00
milkmaker
86bba266f6
update postscreen_access.cidr ( #7494 )
2026-10-01 08:03:05 +02:00
oidipos
e3ed8d2fc2
bump postfix-tlspol to v1.14.0
2026-09-25 21:23:58 +02:00
FreddleSpl0it
a28fa19044
[SOGo] Update to 5.12.11
2026-09-21 08:43:16 +02:00
FreddleSpl0it
a480a96e10
[Unbound] Update to 1.26.1
2026-09-21 08:23:03 +02:00
milkmaker and Stefano
fe4e675754
[Web] Updated lang.it-it.json ( #7460 )
...
Co-authored-by: Stefano <stefano.vassena@gmail.com >
2026-09-09 22:28:28 +02:00
b05f59b705
Translations update from Weblate ( #7457 )
...
* [Web] Updated lang.si-si.json
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Updated lang.zh-cn.json
Co-authored-by: 雨 <luotianyi@luotianyi.me >
---------
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
Co-authored-by: 雨 <luotianyi@luotianyi.me >
2026-09-07 21:38:12 +02:00
milkmaker
c4d0ca56d2
update postscreen_access.cidr ( #7450 )
2026-09-01 13:07:54 +02:00
7ec61fde8a
Translations update from Weblate ( #7431 )
...
* [Web] Updated lang.it-it.json
Co-authored-by: Claudio <cb@bastard.it >
* [Web] Updated lang.si-si.json
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
---------
Co-authored-by: Claudio <cb@bastard.it >
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
2026-08-19 20:23:04 +02:00
FreddleSpl0it
d80b15b06c
Merge pull request #7376 from smpaz7467/fix/extended-sender-acl-authsource
...
[Web] show external sender addresses regardless of authsource
2026-08-18 14:41:20 +02:00
FreddleSpl0it
ed4fe41d7a
Merge pull request #7349 from smpaz7467/fix/login-redirect-deeplink
...
[Web] redirect deep links to the matching login page
2026-08-18 14:37:32 +02:00
FreddleSpl0it
6b9d875773
Merge pull request #7347 from smpaz7467/fix/dns-zonefile-absolute-rhs
...
[Web] use absolute RHS names in generated DNS zonefile
2026-08-18 14:30:50 +02:00
FreddleSpl0it
4d5b9d1c80
Merge pull request #7342 from FrauJulian/feat/show-password
...
[Web] Add show/hide password toggle on login pages
2026-08-18 14:25:22 +02:00
FreddleSpl0it
8abf453e1c
Merge pull request #7428 from mailcow/feat/forbid-external-alias
...
[Web] Add ACL + global switch to disable external alias goto
2026-08-18 14:13:39 +02:00
FreddleSpl0it
8bd9e12a73
[Web] Add ACL + global switch to disable external alias goto
2026-08-18 14:07:37 +02:00
FreddleSpl0it
c665d430de
Merge pull request #7344 from smpaz7467/fix/forced-pw-change-raw-lang-key
...
[Web] translate password errors in the forced password change modal
2026-08-18 13:31:35 +02:00
FreddleSpl0it
2195a674ff
Merge pull request #7290 from wryfi/7150-fix-passwd-verify
...
Fix #7150 : passwd-verify.lua wipes auth cache during any nginx outage
2026-08-18 13:27:01 +02:00
FreddleSpl0it
089c44aee1
Merge pull request #7334 from DerLinkman/feat/postfix-tlspol-update
...
postfix-tlspol: upgrade to trixie + 1.11.0 update
2026-08-18 13:20:16 +02:00
FreddleSpl0it
91d3b7246a
[Web] Minor hardening across web UI and nginx
2026-08-18 09:08:17 +02:00
FreddleSpl0it
feed5ad183
[Dovecot] Remove legacy DeltaChat auto-filing sieve rule
2026-08-17 08:35:53 +02:00
FreddleSpl0it
8c85044781
[SOGo] Update to 5.12.10
2026-08-17 08:20:45 +02:00
FreddleSpl0it
b5fa926bc0
[Clamd] Update to 1.4.6
2026-08-13 13:56:49 +02:00
d1a2f4e168
Translations update from Weblate ( #7400 )
...
* [Web] Updated lang.si-si.json
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
Co-authored-by: milkmaker <milkmaker@mailcow.de >
* [Web] Updated lang.pt-br.json
Co-authored-by: André Glazastov <andre@glazastov.com >
---------
Co-authored-by: Matjaž Tekavec <matjaz@moj-svet.si >
Co-authored-by: André Glazastov <andre@glazastov.com >
2026-08-04 18:37:38 +02:00
milkmaker
f7a536d634
update postscreen_access.cidr ( #7394 )
2026-08-04 18:35:48 +02:00
FreddleSpl0it
d64c923aca
[ACME] Skip mta-sts certificate request when MTA-STS is not active for a domain
2026-07-30 10:33:55 +02:00
FreddleSpl0it
2d5f166ba8
Merge pull request #7389 from mailcow/fix/default-mbox-template
...
[Web] Create default mailbox template with eas and dav access
2026-07-30 09:23:24 +02:00
FreddleSpl0it
94b5a623ab
Merge pull request #7388 from mailcow/fix/7329
...
[Web] Move mailcow update check to server side
2026-07-30 09:13:19 +02:00
FreddleSpl0it
e406ecd461
Merge pull request #7387 from mailcow/fix/mfk25
...
Hardening mailcow
2026-07-30 09:07:10 +02:00
FreddleSpl0it
7036dbf4f8
[Rspamd] update to 4.1.4
2026-07-30 08:50:18 +02:00
FreddleSpl0it
36c70db86c
[Web] harden CORS origin matching and add Vary: Origin
2026-07-30 08:37:18 +02:00
Stephen Ritz
9cd16f0001
[Web] show external sender addresses regardless of authsource
...
The extended_sender_acl field sat inside the
`{% if not result.authsource or result.authsource == 'mailcow' %}` block
that hides the local password fields for mailboxes authenticating against
an external identity provider. As a result the "External sender addresses"
input was not rendered at all for keycloak / generic-oidc / ldap mailboxes,
even for a full admin, so those addresses could neither be reviewed nor
edited in the UI while the underlying sender_acl rows stayed active.
Extended sender ACLs are unrelated to local password management. Move the
field out of that block; it stays gated by acl.extend_sender_acl as intended.
Fixes #7365
2026-07-28 07:12:17 -07:00
FreddleSpl0it
f4961c4023
Merge pull request #7333 from fallmo/fix/cors-settings-validation
...
fix: cors allowed origins settings validation
2026-07-28 15:35:29 +02:00
FreddleSpl0it
38de21592c
Merge pull request #7358 from SYNLINQ/staging
...
Fix nginx CVE-2026-42533
2026-07-28 14:40:30 +02:00
FreddleSpl0it
f44bd2f36a
[Web] document sender_acl in get/mailbox API examples
2026-07-28 14:19:45 +02:00
FreddleSpl0it
95a77f2dcb
Merge pull request #7348 from smpaz7467/fix/api-get-mailbox-sender-acl
...
[Web] return sender_acl in get/mailbox API
2026-07-28 14:12:57 +02:00
FreddleSpl0it
e856510fb2
Merge pull request #7345 from smpaz7467/fix/time-limited-alias-api
...
[Web] fix add/time_limited_alias silently discarding requests and validity
2026-07-28 13:49:37 +02:00
FreddleSpl0it
d51d06d716
Merge pull request #7343 from smpaz7467/fix/nginx-ipv6-default-server
...
[Nginx] only bind IPv6 default_server when ENABLE_IPV6 is set
2026-07-28 13:35:17 +02:00
FreddleSpl0it
54170d075a
[Web] Move mailcow update check to server side
2026-07-28 13:32:18 +02:00
FreddleSpl0it
e245ac04d9
[Web] enforce tenant boundary for SOGo SSO
2026-07-28 09:21:29 +02:00
oidipos
c877fdf0a5
fix: remove MIME decoding of JSON encoded subject
...
Since moving to rspamd's multipart metadata_exporter,
`subject` is a JSON encoded UTF-8 string and must not be MIME decoded.
2026-07-24 21:03:00 +02:00
FreddleSpl0it
fea38c8e1b
[Web] escape mailbox name
2026-07-24 11:16:39 +02:00
FreddleSpl0it
cc9af65852
[Web] remove domain admin sso token after use
2026-07-24 10:26:23 +02:00
FreddleSpl0it
92cc8bec90
[Web] Use parameterized LIKE for sogo_acl deletion
2026-07-23 15:29:41 +02:00
FreddleSpl0it
145745329e
[Web] add dot stuffing for quarantine raw release
2026-07-23 15:01:44 +02:00
FreddleSpl0it
8e72d22c56
[Web] Escape rspamd_history and rllog
2026-07-23 11:17:55 +02:00
FreddleSpl0it
ddd76d99cd
[Web] Add sogo_auth_internal nginx marker for sogo-auth.php
2026-07-23 10:10:29 +02:00
SYNLINQ
2ebd32d2ee
Update Dockerfile
...
bump nginx version to 1.30.4
2026-07-20 21:31:57 +02:00