mailcow-dockerized

mailcow: dockerized - ๐Ÿฎ + ๐Ÿ‹ = ๐Ÿ’•

GPL-3.0 License

Stars
8.7K

Bot releases are visible (Hide)

mailcow-dockerized - ๐Ÿ•ถ๏ธ๐Ÿ„ Moogust Update 2024 | Revision A (Dovecot CVE Fixes) Latest Release

Published by DerLinkman 2 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-08...2024-08a
Blog: https://mailcow.email/posts/2024/release-2024-08/

What's Changed

Sponsoring

Thank you to the Youth Foundation of Baden-Wรผrttemberg (Germany) for sponsoring the "Forgot Password?" feature!

New Contributors

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-07...2024-08
Blog Post for additional informations: https://mailcow.email/posts/2024/release-2024-08/

mailcow-dockerized - ๐Ÿ”ฅ๐Ÿ„ Mooly Update 2024 | Security Update

Published by FreddleSpl0it 3 months ago

โš ๏ธ Vulnerabilities fixedโš ๏ธ

CVE-2024-41958 - Two-Factor Authentication (2FA) Bypass Vulnerability
CVE-2024-41959 - XSS Vulnerability via API Logs
CVE-2024-41960 - XSS Vulnerability via Relay Hosts Configuration

What's Changed

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-06c...2024-07

mailcow-dockerized - ๐ŸŒ™๐Ÿ„ Moone Update 2024 | Revision C

Published by DerLinkman 3 months ago

What's Changed

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-06b...2024-06c

mailcow-dockerized - ๐ŸŒ™๐Ÿ„ Moone Update 2024 | Revision B

Published by DerLinkman 3 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-06a...2026-06b

mailcow-dockerized - ๐ŸŒ™๐Ÿ„ Moone Update 2024 | Revision A

Published by DerLinkman 4 months ago

What's Changed

This Release also fixes broken PHP Container, caused by broken dns resolution of curl modul. To apply simply rereun the update.sh script

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-06...2024-06a

mailcow-dockerized - ๐ŸŒ™๐Ÿ„ Moone Update 2024 | Flatcurve Update Phase I

Published by DerLinkman 4 months ago

โš ๏ธ Critical Changes โš ๏ธ

  • Postfix Upgrade: Updated to Postfix 3.7.10 and Debian 12, dropping support for TLS 1.0 and 1.1. Older TLS versions can be re-enabled as per the documentation.

  • Flatcurve FTS Engine: New experimental full-text search engine using Xapian. Activate with FLATCURVE_EXPERIMENTAL=y in mailcow.conf. Read docs

  • Nextcloud helper-script will be dropped in December 2024. More informations why, READ HERE

What else Changed?

New Contributors

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-04...2024-06

mailcow-dockerized - ๐Ÿฅš๐Ÿ„ Moopril Update 2024 | Security Update

Published by FreddleSpl0it 7 months ago

What's Changed

With the Moopril update, two security vulnerabilities in mailcow will be closed.

  1. CVE-2024-31204: XSS Vulnerability via Exception Handler
  2. CVE-2024-30270: Path Traversal and Arbitrary Code Execution Vulnerability

Thanks to Paul Gerste from Sonar for reporting the security vulnerabilities!

New Contributors

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-02...2024-04

mailcow-dockerized - ๐Ÿฅ๐Ÿ„ Febmooary 2024 Update | ClamAV Security Update

Published by FreddleSpl0it 8 months ago

What's Changed

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-01e...2024-02
Updated Blog Page here: https://mailcow.email/posts/2024/release-2024-02/

What's Changed

We are aware of the โ€œissueโ€ with SOGo and the error message in the editor. We have already reached out, and once the fix is implemented, we will seamlessly patch the provided SOGo version with the 2024-01e release. This avoids the need for a new subrelease like the current one.

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-01d...2024-01e
Updated Blog Page here: https://mailcow.email/posts/2024/release-2024-01/

mailcow-dockerized - Hotfix for 2024-01c: Dovecot Replication Error fix

Published by DerLinkman 9 months ago

If you encountered the bug that watchdog is reporting something about Dovecot replication please apply this patch.

If you have problems regarding PHP-FPM and Redis connection issues: https://github.com/mailcow/mailcow-dockerized/issues/5697 please set the DISABLE_NETFILTER_ISOLATION_RULE to y instead of n inside mailcow.conf and restart the mailcow stack with docker compose down and up -d afterwards

Issue has been fixed in: https://github.com/mailcow/mailcow-dockerized/commit/57e67ea8f79a1fe218cb0f0ea8ad95a53b9f0179 many, many thanks to @tomudding for quickly finding it!

What's Changed

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-01c...2024-01d

What's Changed

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-01c...2024-01d

โš ๏ธThis update includes a security fix, so we highly recommend that all users upgrade to this latest version to ensure the security of their systems. โš ๏ธ

Users who are unable to update and share their system with potential attackers on the same network, such as with some hosting providers, should apply the following iptables/nftables rule:

iptables:
iptables -I DOCKER-USER ! -i br-mailcow -o br-mailcow -p tcp -m multiport --dport 3306,6379,8983,12345 -j DROP

nftables:
nft insert rule ip "filter" "DOCKER-USER" iifname != "br-mailcow" oifname "br-mailcow" tcp dport {3306, 6379, 8983, 12345} counter packets 0 bytes 0 drop

Read the Security advisory here: https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-gmpj-5xcm-xxx6

What's Changed

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-01b...2024-01c
Blog: https://mailcow.email/posts/2024/release-2024-01/

mailcow-dockerized - ๐Ÿฆพ6๏ธโƒฃ4๏ธโƒฃ ๐Ÿ„ Janmooary 2024 Update | Revision B

Published by DerLinkman 9 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-01a...2024-01b
Blog Page: https://mailcow.email/de/posts/2024/release-2024-01/

mailcow-dockerized - ๐Ÿฆพ6๏ธโƒฃ4๏ธโƒฃ ๐Ÿ„ Janmooary 2024 Update | Revision A

Published by DerLinkman 9 months ago

What's Changed

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2024-01...2024-01a

โš ๏ธ DO A BACKUP BEFORE UPDATING TO BE ON THE SAFE SITE โš ๏ธ

What's Changed

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2023-12a...2024-01
Blog Post: https://mailcow.email/posts/2024/release-2024-01

mailcow-dockerized - ๐Ÿ›ท ๐Ÿ„ Moocember 2023 Update Revision A | Postfix CVE-2023-51764 Security Update

Published by FreddleSpl0it 10 months ago

What's Changed

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2023-12...2023-12a

mailcow-dockerized - ๐Ÿ›ท ๐Ÿ„ Moocember 2023 Update | Netfilter NFTables Support and Banlist Endpoint

Published by FreddleSpl0it 10 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2023-11a...2023-12

What's Changed

New Contributors

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2023-11...2023-11a

Important Information

Please update to this mailcow Version as it includes a critial fix for the mailcow Quarantine UI. If you not use the Quarantine feature within mailcow you could skip this version.

A CVE with more informations will follow this week.


What's Changed

New Contributors

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2023-10a...2023-11

mailcow-dockerized - ๐ŸŽƒ๐Ÿ„ Mooctober 2023 Update Revision A

Published by DerLinkman about 1 year ago

What's Changed

  • Fix Clamd Version image in compose in 5b8efeb
  • Reverted restart action removal in docker-compose.yml for older 2.X compose versions 99de302

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2023-10...2023-10a