mailcow-dockerized

What's Changed

• Add new action Check PRs if on staging by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4837
• Add undocumented /api/v1/get/mailbox/all/domain.tld endpoint to docs by @jorisdrenth in https://github.com/mailcow/mailcow-dockerized/pull/4846
• Fixy comment typo by @benpro in https://github.com/mailcow/mailcow-dockerized/pull/4869
• [PHP] Update to 8.1 by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4844
• [PHP] Polish phpfpm dockerfile by @BigMichi1 in https://github.com/mailcow/mailcow-dockerized/pull/4855
• change 'return 1' to 'exit 1' by @nathanielmom in https://github.com/mailcow/mailcow-dockerized/pull/4848
• Update Simplified Chinese Translation by @yhdsl in https://github.com/mailcow/mailcow-dockerized/pull/4860
• Pushover improvements by @bluewalk in https://github.com/mailcow/mailcow-dockerized/pull/4864
• Add new action Build mailcow backup image by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4868
• [Rspamd] Update to 3.4 (fix of 3.3 Bug) by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4845
• Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/4873
• Update SOGo to 5.8.0 nightly by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/4877
• switch update.sh/check_online_status() from ping to curl to make it p… by @mitch-geht-ab in https://github.com/mailcow/mailcow-dockerized/pull/4859

New Contributors

• @jorisdrenth made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/4846
• @benpro made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/4869
• @nathanielmom made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/4848
• @yhdsl made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/4860
• @bluewalk made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/4864
• @mitch-geht-ab made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/4859

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-10a...2022-11

What's Changed

• [Compose] Use new (patched) Netfilter Image by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4820
• Update base.twig to escape simple quote by @ro78 in https://github.com/mailcow/mailcow-dockerized/pull/4769
• [RSPAMD] Downgrade to 3.2 (stable) by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4823
• Fix Error parsing Quarantine Items by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/4825

If you experienced some issues with Rspamd please update to this version before opening an issue for that.
The Rspamd issue is under investigation until we can say what caused this anomaly which didn´t affect all users.

Please read more on the Blog page about that: https://mailcow.email/posts/2022/release-2022-10a/

New Contributors

• @ro78 made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/4769

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-10...2022-10a

Stable changes (master branch)

• [Netfilter] Fix creating endless SNAT rules for ipv4 by @mnin in https://github.com/mailcow/mailcow-dockerized/pull/4724
• Update PR to nightly template by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4789
• 🌐 Add Traditional Chinese Translation by @tomy0000000 in https://github.com/mailcow/mailcow-dockerized/pull/4657
• [Backup] Swapped PIGZ instead of gzip (allow Threading) by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4806
• [RSPAMD] Update to 3.3 by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4816
• [redis] Bump Redis to version 7 by @ethrgeist in https://github.com/mailcow/mailcow-dockerized/pull/4815

Nightly changes

• [NEW] The "Previous page" button of the subpages is now also placed at the top (instead of only at the bottom)
• [NEW] There is now a " Expand/Collapse all" button in the action dropdowns, which collapses/expands the tables in the respective window (especially interesting for mobile).
• [CHANGED] The main menu item "E-Mail Configuration" and the item below it (with the same name) have been renamed to avoid duplication of names.
• [NEW] The position of the mail queue has changed. It is now located in the dropdown below the renamed item "E-Mail" (next to Quarantine).
• [FIXED] The general behavior of the various tables has been optimized.

New Contributors

• @tomy0000000 made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/4657
• @ethrgeist made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/4815

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-09a...2022-10
Documentation: https://docs.mailcow.email

What's Changed

• Update Twig to 3.4.3 by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/4772

This fixes CVE-2022-39261 (not critical for mailcow Users)

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-09...2022-09a

What's Changed in Stable Builds

• GitHub Workflows security hardening by @sashashura in https://github.com/mailcow/mailcow-dockerized/pull/4761
• Fixed small typo in escape sequence in update script by @mindsolve in https://github.com/mailcow/mailcow-dockerized/pull/4762
• Update quarantine_notify.py charset by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4758 (this fixes https://github.com/mailcow/mailcow-dockerized/issues/4743)
• Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/4765
• [API] Update swagger version by @ntimo in https://github.com/mailcow/mailcow-dockerized/pull/4763
• Improve send-as behaviour by @macwinnie in https://github.com/mailcow/mailcow-dockerized/pull/4703

CVE-2022-39258

This Update also close a security issue with the Swagger UI.
We´ve opened a GitHub Security Advisory which explains the case in more detail: https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-vjgf-cp5p-wm45

What's Changed in Nightly Builds

We´ve gathered some Feedback to the Bootstrap 5 Update (Located here: https://github.com/mailcow/mailcow-dockerized/discussions/4734) and implemented this, which is:

• [NEW] Sieve Access can now be toggled via Mass-Actions
• [NEW] Added a Loading Animation for the Container Charts
• [NEW] The Public IP-Adresses of your Mailserver (done with dig inside the containers) are now displayed on the Dashboard Page.
• [FIX] Fixed some Layout Issues (especially Color Changes)

Remember: These changes are ONLY available inside the nightly Builds.

Important Links:

• Detailed informations on our Blog: https://mailcow.email/posts/2022/release-2022-09/
• Learn how to get nightly builds: https://docs.mailcow.email/i_u_m/i_u_m_update/#how-do-i-get-nightly-updates
• Or try the nightly Demo to get a impression of the new UI: https://nightly-demo.mailcow.email (more Informations + Login Credentials located here: https://docs.mailcow.email/#demos)

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-08b...2022-09

What's Changed

• Modified branch switch in generate_config.sh by @maljes in https://github.com/mailcow/mailcow-dockerized/pull/4741
• Fix for SOGo in 2022-08 (Sieve) by @DerLinkman, @FreddleSpl0it and @andryyy in https://github.com/mailcow/mailcow-dockerized/pull/4747

View our Blog article here: https://news.mailcow.email/posts/2022/release-2022-08b/

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-08a...2022-08b

What's Changed

• Fixes the issue that older v2 Compose Plugin Versions (beginning with v in docker compose version --short were not accepted.
• Fixes the Sieve Error that IMAP Clients and SOGo cannot use Sieve Filters anymore.

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-08...2022-08a

What's Changed in Stable Builds

• Update TFA flow by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/4685
• [Update.sh] Nightly Version Switch implementation + Composev2 User Decision by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4725
• Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/4722
• Update SOGo to 5.7.1 by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4719

What's Changed in Nightly Builds

• [UI] Update to Bootstrap 5 (First Beta Release) | Redesign of mailcow UI, new Arrangement, new Stats for Stack Health
  Feedback requested. More informations here

More informations here: https://news.mailcow.email/posts/2022/release-2022-08/
Get to now how to use Nightly Builds: https://mailcow.github.io/mailcow-dockerized-docs/i_u_m/i_u_m_update/#new-get-nightly-updates

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-07a...2022-08

What's Changed

• Add Integration Tests badge by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4682
• Improve domain api schema by @l-with in https://github.com/mailcow/mailcow-dockerized/pull/4689
• Use yaml list style in workflow by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4688
• Use proper mailcow name for workflow by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4687
• [DB] Update tfa keyHandle max length to 1023 by @Erisa in https://github.com/mailcow/mailcow-dockerized/pull/4696
• [ClamAV] Update to 0.105.1 by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/commit/44a6f09a095b946487c5fa569edd6803d4754fea

ClamAV Update Advice from ClamAV Developers: https://blog.clamav.net/2022/07/clamav-01037-01041-and-01051-patch.html

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-07...2022-07a
Blog Page: https://news.mailcow.email/posts/2022/release-2022-07a/

What's Changed

• [Web] change tfa flow by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/4484
• Fix "The operation is insecure." when trying to register fido2 device. by @El-Virus in https://github.com/mailcow/mailcow-dockerized/pull/4403
• Update SOGo to 5.7.0 by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4632
• [Dovecot] Update to 2.3.19.1 by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4659
• [Sync Jobs] Remove default selection for target mailbox by @RafaelKr in https://github.com/mailcow/mailcow-dockerized/pull/4661
• Fix Docker Healthcheck for Clamd Container by @mritzmann in https://github.com/mailcow/mailcow-dockerized/pull/4634
• Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/4664
• Fix permissions of create_cold_standby.sh by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4669
• Fixed OpenAPI docs to be spec compliant by @ntimo in https://github.com/mailcow/mailcow-dockerized/pull/4670
• [CI] Added Mailcow tests & image builds by @ntimo in https://github.com/mailcow/mailcow-dockerized/pull/4673
• Removed DroneCI & Travis CI by @ntimo in https://github.com/mailcow/mailcow-dockerized/pull/4671
• fix blank page on /user when not logged by @mhofer117 in https://github.com/mailcow/mailcow-dockerized/pull/4677
• Create SECURITY.md by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4674
• [Update.sh] Added docker-compose Update prompt + Version check by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4662

Visit the Blog Post here: https://news.mailcow.email/posts/release-2022-07/

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-06b...2022-07

What's Changed

• Added auto correction of composev1 Binds in compose.yml by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4644
• Fixed IMAPSYNC when no Custom Parameter is set by @FreddleSpl0it https://github.com/mailcow/mailcow-dockerized/commit/a835419168394bcbefdafb03de50fa9e6187717a

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-06a...2022-06b

What's Changed

• Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/4638
• hotfix imapsync (IMAPSYNC Exploit hardening) by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/4629
• Docker-Compose v2 is now required to run mailcow. (Moved up, originally planned for December) by @DerLinkman
• [Web] Re-use DKIM key if available by @andryyy https://github.com/mailcow/mailcow-dockerized/commit/7ae7f25580dbab0e49ff0d208ba876be1485d468

About IMAPSYNC (SyncJobs)

It´s the second exploit in such a short time and we´re already thinking of a IMAPSYNC replacement in the near future. However with this update (2022-06a) an Administrator needs to set the SyncJob ACL whenever they create a new Mailbox user, which should be able to use the SyncJobs. This don´t affect the Admin View of course, they can create SyncJobs like they normally could without a change.

We advice you to update your mailcow in the near future. There will be a seperate CVE Number regarding this IMAPSYNC Exploit Hardening when it´s availble. We´ll create a Security Issue (like the last time) here on GitHub aswell.

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-06...2022-06a

What's Changed

• Increase Mailadmin performance by @marcojarjour in https://github.com/mailcow/mailcow-dockerized/pull/4562
• [Clamd] Update to ClamAV 0.105 by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4589
• Update swagger docs - add/app-passwd by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/4590
• Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/4591
• remove bind options from volumes by @qupfer in https://github.com/mailcow/mailcow-dockerized/pull/4577
• Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/4600
• [Web] escapehtml in mailbox.js by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4604
• [Postfix] Update to 3.5.6 (Rebase to Debian 11) by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4599
• Netfilter base image update by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4607
• acme base image update by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4612
• Dockerapi base image update by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4611
• Olefy base image update by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4610
• Watchdog base image update by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4608
• Unbound base image update by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4609
• PHP-FPM base image update by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4613
• [Compose] Update to Docker Compose v2 by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4605

Please head over to the mailcow Docs to find out how to switch to Docker Compose v2!

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-05d...2022-06

This is a security update regarding CVE-2022-31245 which is desired to be updated immediately

What's Changed

• [Imapsync] Case sensitive PIPEMESS and PIPEMES removal: https://github.com/mailcow/mailcow-dockerized/commit/8d9102aa088c780ca2f1cc0f39b224d735dc8569 by @DerLinkman
• [DB] Update DB Version to remove pipemess & pipemes parameters: https://github.com/mailcow/mailcow-dockerized/commit/552f09f48aacda3a14238101c8a0f4c922ffe65f by @DerLinkman

This is a security update which is desired to be updated immediately

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-05c...2022-05d

What's Changed

• [Web] Swagger UI: explicitly define used OpenAPI specifications by @andristeiner in https://github.com/mailcow/mailcow-dockerized/pull/4587

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-05b...2022-05c

What's Changed

• Fix for /api/v1/get/mailbox/{email} by @jkellerer in https://github.com/mailcow/mailcow-dockerized/pull/4573
• [Web] domain/mailbox tagging check for empty tags by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/4574
• [Web] change opacity of footable collapse toggle by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/4575

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-05a...2022-05b

What's Changed

• Readded .gitkeep in data/web/templates/cache by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4572 solves: https://github.com/mailcow/mailcow-dockerized/issues/4571

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-05...2022-05a

What's Changed

• [NGINX] Added new Proxy Buffers to the /SOGo Section by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4536
• [Dovecot] Disable imapsync job, when auth details are wrong. Fixes #4276 by @feldsam in https://github.com/mailcow/mailcow-dockerized/pull/4540
• [Clamd] fix whitelist by @feldsam in https://github.com/mailcow/mailcow-dockerized/pull/4541
• [Netfilter] Exclude banning IPs when dovecot server not reacheble by @dragoangel in https://github.com/mailcow/mailcow-dockerized/pull/4545
• [Web] Make TLS policy toggles accessible by @mkuron in https://github.com/mailcow/mailcow-dockerized/pull/4556
• [API] Add version endpoint by @larsl-net in https://github.com/mailcow/mailcow-dockerized/pull/4557
• Add Domain and Mailbox tagging by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/4569
• [SOGo] Update to 5.6.0 by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4570
• [Update.sh] Added skip-ping-check Variable by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4558

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-04...2022-05

What's Changed

• Update lang.en.json by @ptoone in https://github.com/mailcow/mailcow-dockerized/pull/4511
• [Web] Fix missing rspamd description by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/4512
• Enable autodiscover to work with app passwords by @mkuron in https://github.com/mailcow/mailcow-dockerized/pull/4516
• [Postfix] update postscreen access list by @AikoAppeldorn in https://github.com/mailcow/mailcow-dockerized/pull/4515
• Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/4523
• [Rspamd] Update Rspamd to 3.2.1 by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4526
• [ClamAV] Move to official ClamAV Docker container by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4525
• Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/4529
• [SOGo] Update SOGo to 5.5.1 by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4506
• 🐄🐰 Moopril 2022 - ClamAV, Rspamd, SOGo Update by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/4533

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2022-03a...2022-04

Moohoo everyone!

We have released an impromptu bug fix update that fixes a few minor bugs and graphical issues.

These are only minor changes this time, but as the saying goes, "Every little bit helps".

• We have moved the version footer back to the correct position. Faithful to the motto: Stay were you are! (Commits: https://github.com/mailcow/mailcow-dockerized/commit/d52323df2dc8689224d704e3d69f793f40ec852f https://github.com/mailcow/mailcow-dockerized/commit/a1a96bfabb62675310d4a17184fe7c0b2b0ab621 https://github.com/mailcow/mailcow-dockerized/commit/bdd8b4a5abe4f142c0e2a6a3ba12e19730538884)
• We have improved the release tag handling with the version footer. (Commits: https://github.com/mailcow/mailcow-dockerized/commit/f3f6fb890857f49a25dc675a9d327e33e8183b21 https://github.com/mailcow/mailcow-dockerized/commit/a1a96bfabb62675310d4a17184fe7c0b2b0ab621)
• The backup and restore script now uses Debian Bullseye instead of Buster. (Commit: https://github.com/mailcow/mailcow-dockerized/commit/769e08843bf733430017a4130629acc30d99cebb)
• We fixed the bug that the spam alias of an alias domain was not deleted. (Commit: https://github.com/mailcow/mailcow-dockerized/commit/b82009665670c55376d27149a25be23ed16c5814)
• We updated Twig + dependencies to 3.3.8 to close a security hole concerning Twig. (Commit: https://github.com/mailcow/mailcow-dockerized/commit/98bc947d003c70751b34ac29d2163060e9093e23)

That's about it. We hope you are all well and healthy.

See you at the next update!

Stay healthy
Niklas