 FreddleSpl0it
|
4caecf77e0
|
Merge pull request #7610 from woodfairy/fix/brotli-cve-2026-111497
[Nginx][Clamd][Postfix] Rebuild images for brotli CVE-2026-111497 (CISA KEV)
|
2026-11-10 13:40:04 +01:00 |
|
|
FreddleSpl0it
|
37d304d075
|
Merge pull request #7544 from jorgeavlobo/fix/keycloak-admin-token-introspect
[Web] Keycloak: skip introspection of an expired admin token and reuse the new one
|
2026-11-10 01:45:16 +01:00 |
|
|
FreddleSpl0it
|
25086a9b3f
|
Merge pull request #7488 from apio-sys/fix/rspamd-dqs-dbl-full-rule
[Rspamd] write full DBL rule when SPAMHAUS_DQS_KEY is set
|
2026-11-10 01:42:29 +01:00 |
|
|
FreddleSpl0it
|
7a3f1cbd41
|
Merge pull request #7530 from ThxGiving/fix/eas-auth-challenge
[Nginx] Send Basic auth challenge for unauthenticated ActiveSync requests
|
2026-11-10 01:39:28 +01:00 |
|
|
FreddleSpl0it
|
616717bc0d
|
Merge pull request #7639 from mailcow/fix/7580
[Rspamd] Remove MX check overrides that rspamd ignores
|
2026-11-10 01:28:42 +01:00 |
|
|
FreddleSpl0it
|
6fd271ee64
|
[Rspamd] Remove MX check overrides that rspamd ignores
|
2026-11-10 01:27:52 +01:00 |
|
|
FreddleSpl0it
|
7459cc046a
|
Merge pull request #7638 from mailcow/fix/7579
[Web] Template lists: sort size columns numerically
|
2026-11-10 01:08:36 +01:00 |
|
|
FreddleSpl0it
|
58dad73eee
|
[Web] Template lists: sort size columns by bytes
|
2026-11-10 01:07:32 +01:00 |
|
|
FreddleSpl0it
|
b21acd4787
|
Merge pull request #7637 from mailcow/fix/7557
[Web] Domain admins saw sender aliases of other domains
|
2026-11-10 01:02:39 +01:00 |
|
|
FreddleSpl0it
|
4ab954dcd1
|
[Web] Domain admins: show sender ACL and alias entries of their own domains only
|
2026-11-10 01:01:22 +01:00 |
|
|
FreddleSpl0it
|
eefc17274e
|
Merge pull request #7636 from mailcow/fix/7545
[Rspamd] WHITELISTED_FWD_HOST was skipped at the reject threshold
|
2026-11-10 00:57:45 +01:00 |
|
|
FreddleSpl0it
|
4878840bdd
|
[Rspamd] Forwarding hosts: check them as prefilter and scan the mail completely
|
2026-11-10 00:56:53 +01:00 |
|
|
FreddleSpl0it
|
869bcb3c42
|
Merge pull request #7635 from mailcow/fix/7518
[Rspamd] Domain footer broke DKIM for mail without Content-Transfer-Encoding
|
2026-11-09 23:36:42 +01:00 |
|
|
FreddleSpl0it
|
0bcde13500
|
[Rspamd] Domain footer: add the Content-Transfer-Encoding header to the delivered mail
|
2026-11-09 23:34:57 +01:00 |
|
|
FreddleSpl0it
|
867b9dddab
|
Merge pull request #7634 from mailcow/fix/7503
[Web] Keycloak: accept Base64-encoded mailcow_password
|
2026-11-09 23:30:20 +01:00 |
|
|
FreddleSpl0it
|
a4326e6642
|
[Web] Keycloak Mailpassword Flow: accept Base64-encoded password hashes
|
2026-11-09 23:28:53 +01:00 |
|
|
FreddleSpl0it
|
c5e89a9e03
|
Merge pull request #7633 from mailcow/fix/7501
[Web] Forwarding hosts: store IPv6 addresses in canonical form
|
2026-11-09 23:25:40 +01:00 |
|
|
FreddleSpl0it
|
45d31b3279
|
[Web] Forwarding hosts: store IPv6 addresses in canonical form
|
2026-11-09 23:24:39 +01:00 |
|
|
FreddleSpl0it
|
24780ea5fb
|
Merge pull request #7632 from mailcow/fix/7489
[Rspamd] Quarantine stored nothing without Q_EXCLUDE_DOMAINS
|
2026-11-09 23:22:11 +01:00 |
|
|
FreddleSpl0it
|
38b031e10c
|
[Rspamd] Quarantine: store mail when Q_EXCLUDE_DOMAINS is not set
|
2026-11-09 23:21:14 +01:00 |
|
|
FreddleSpl0it
|
e2fb833ceb
|
Merge pull request #7631 from mailcow/fix/7482
[Web] Autodiscover: no ActiveSync when autodiscoverType is imap
|
2026-11-09 23:18:50 +01:00 |
|
|
FreddleSpl0it
|
e27cb83326
|
[Web] Autodiscover: no ActiveSync when autodiscoverType is imap
|
2026-11-09 23:17:55 +01:00 |
|
|
FreddleSpl0it
|
f810cecd3a
|
Merge pull request #7630 from mailcow/fix/7476
[Web] force_tfa did not prevent removing 2FA
|
2026-11-09 23:14:38 +01:00 |
|
|
FreddleSpl0it
|
cfad223824
|
[Web] force_tfa: read the flag with JSON_VALUE
|
2026-11-09 23:13:26 +01:00 |
|
|
FreddleSpl0it
|
6d20463acb
|
Merge pull request #7629 from mailcow/fix/7454
[Nginx] Edit and quarantine links: allow a trailing slash
|
2026-11-09 23:09:05 +01:00 |
|
|
FreddleSpl0it
|
1a42c19050
|
[Nginx] Accept a trailing slash in /edit and /qhandler links
|
2026-11-09 23:08:14 +01:00 |
|
|
FreddleSpl0it
|
b9f8eb4c31
|
Merge pull request #7628 from mailcow/fix/7449
[Postfix-TLSPol] Update to 1.14.5
|
2026-11-09 23:05:35 +01:00 |
|
|
FreddleSpl0it
|
ce4150f921
|
[Postfix-TLSPol] Update to 1.14.5
|
2026-11-09 23:04:33 +01:00 |
|
|
FreddleSpl0it
|
7cc8cac705
|
Merge pull request #7627 from mailcow/fix/7318
[Rspamd] Mails between 50 and 100 MiB were deferred forever
|
2026-11-09 23:01:43 +01:00 |
|
|
FreddleSpl0it
|
3fd1d017cf
|
[Rspamd] Raise max_message above the Postfix message size limit
|
2026-11-09 23:00:38 +01:00 |
|
|
FreddleSpl0it
|
8597954f91
|
Merge pull request #7626 from mailcow/fix/7179
[Rspamd] Sub-addressing: read the tag from the original SMTP recipient
|
2026-11-09 22:55:05 +01:00 |
|
|
FreddleSpl0it
|
2b4ffe8808
|
[Rspamd] Sub-addressing: read the tag from the original SMTP recipient
|
2026-11-09 22:53:07 +01:00 |
|
|
FreddleSpl0it
|
1911847c3b
|
Merge pull request #7625 from mailcow/fix/6931
[Web] Update "Last modified" when tags of a domain or mailbox change
|
2026-11-09 22:48:21 +01:00 |
|
|
FreddleSpl0it
|
497872080b
|
[Web] Update "Last modified" when tags of a domain or mailbox change
|
2026-11-09 22:46:15 +01:00 |
|
|
FreddleSpl0it
|
a0dc3447f8
|
Merge pull request #7624 from mailcow/fix/6853
[Web][Dovecot] Mailbox list and API: show the last SOGo login
|
2026-11-09 22:42:27 +01:00 |
|
|
FreddleSpl0it
|
e0640949a2
|
[Web][Dovecot] Show the last SOGo login in the mailbox list and API
|
2026-11-09 22:39:42 +01:00 |
|
|
FreddleSpl0it
|
262de81da1
|
Merge pull request #7621 from mailcow/fix/7606
[Dockerapi] Group IMAP grants: set ACLs only on existing folders
|
2026-11-09 19:43:38 +01:00 |
|
|
FreddleSpl0it
|
5f13bb2046
|
[Dockerapi] Group IMAP grants: set ACLs only on existing folders
|
2026-11-09 19:41:17 +01:00 |
|
|
FreddleSpl0it
|
329bca1d46
|
Merge pull request #7596 from mailcow/fix/7595
[Web] Mailbox protocols do not limit app passwords
|
2026-11-05 13:19:59 +01:00 |
|
|
FreddleSpl0it
|
6a83b9e0f0
|
[Web] Mailbox protocols do not limit app passwords
|
2026-11-05 12:46:22 +01:00 |
|
|
FreddleSpl0it
|
3ffecc505e
|
Merge pull request #7593 from mailcow/feat/netfilter-unban-all
[Web] Add Netfilter unban all button
|
2026-11-04 22:29:32 +01:00 |
|
|
FreddleSpl0it
|
e8f12cd061
|
[Web] Add Netfilter unban all button
|
2026-11-04 22:23:16 +01:00 |
|
|
FreddleSpl0it
|
3a4e479424
|
[Web] Update group info text
|
2026-11-04 22:16:10 +01:00 |
|
|
FreddleSpl0it
|
f1e51c0a40
|
[Update] Mark 2026-11 as major update
|
2026-11-04 17:39:22 +01:00 |
|
|
FreddleSpl0it
|
ddcba178af
|
Merge pull request #7590 from mailcow/feat/sogo-5.12.13
[SOGo] Update to 5.12.13
|
2026-11-04 16:55:52 +01:00 |
|
|
FreddleSpl0it
|
1752dd6ddf
|
[SOGo] Update to 5.12.13
|
2026-11-04 16:54:00 +01:00 |
|
|
FreddleSpl0it
|
adb1c74ce3
|
Merge pull request #7589 from mailcow/fix/rework-bugs
Fixes for the reworks: imapsync, logins/netfilter, groups, startup, hardening
|
2026-11-04 16:32:46 +01:00 |
|
|
FreddleSpl0it
|
716f67844d
|
[Web] mobileconfig: Wait for a pending account setup
|
2026-11-04 15:44:57 +01:00 |
|
|
FreddleSpl0it
|
a2ab4301e7
|
[Web][Dovecot][Compose] Keep group shares on Enter, no restarts while waiting for the schema, run sync crons on master only
|
2026-11-04 15:10:40 +01:00 |
|
|
FreddleSpl0it
|
52f28025a5
|
[Web][Dovecot] imapsync: Block skipmess in custom params
|
2026-11-04 12:02:18 +01:00 |
|
|
FreddleSpl0it
|
3c03f8e567
|
Merge branch 'fix/sec' into fix/rework-bugs
|
2026-11-04 11:46:47 +01:00 |
|
|
FreddleSpl0it
|
72613e7e2b
|
[Dovecot][Watchdog] Limit the wait for the schema update to 5 minutes
|
2026-11-04 11:29:00 +01:00 |
|
|
FreddleSpl0it
|
9293e4ce43
|
[Web][Dovecot] Do not count denied logins as failed logins
|
2026-11-04 10:39:32 +01:00 |
|
|
FreddleSpl0it
|
a8d1121f0e
|
[Dovecot][Web] imapsync: verify certificates against the source host, make the check optional per source
|
2026-11-03 09:31:16 +01:00 |
|
|
FreddleSpl0it
|
a4b60ae26f
|
[Netfilter][Dovecot] Count failed master logins, log the client address of successful logins
|
2026-11-02 14:55:42 +01:00 |
|
|
FreddleSpl0it
|
e96fb24a67
|
[Nginx][Web] Pass the client address to sogo-auth for EAS/DAV logins
|
2026-11-02 14:44:09 +01:00 |
|
|
FreddleSpl0it
|
5c762d9949
|
[Dovecot][Netfilter] Report failed logins from mailcowauth.php, anchor default rules
|
2026-11-02 14:11:56 +01:00 |
|
|
FreddleSpl0it
|
06cbdc4409
|
[Dockerapi] Pass "--" before positional arguments of doveadm
|
2026-11-02 10:03:30 +01:00 |
|
|
FreddleSpl0it
|
7c73199bde
|
[Web] Groups: limit changes of domain admins to their domains
|
2026-11-02 10:01:43 +01:00 |
|
|
FreddleSpl0it
|
4b7ebab8f3
|
[Web] Mask IdP secrets for read-only API keys, deny sync job OAuth to read-only and pending sessions
|
2026-11-02 09:56:24 +01:00 |
|
|
FreddleSpl0it
|
5eb3148bd5
|
[Web] OIDC/LDAP: check the OAuth state, keep the mailbox on token refresh, require unique IdP users
|
2026-11-02 09:54:54 +01:00 |
|
|
FreddleSpl0it
|
41467dc47f
|
[Web] imapsync: change the server of a sync source only with access to all its sync jobs
|
2026-11-02 09:50:24 +01:00 |
|
|
FreddleSpl0it
|
a1cbd51d70
|
[Dovecot][Web] imapsync: restrict custom parameters and source hosts, verify certificates
|
2026-11-02 09:49:03 +01:00 |
|
|
FreddleSpl0it
|
510674ee67
|
[Web] Pending account setup adjustments
|
2026-10-28 17:11:25 +01:00 |
|
|
FreddleSpl0it
|
a21604cd7b
|
[Web][Rspamd] Quarantine link adjustments
|
2026-10-28 17:06:17 +01:00 |
|
|
FreddleSpl0it
|
4c7e2ec036
|
[Nginx] Limit request body size, configurable via NGINX_MAX_BODY_SIZE
|
2026-10-28 16:54:26 +01:00 |
|
|
FreddleSpl0it
|
085d10118d
|
[Nginx][Web] Client address and autodiscover adjustments
|
2026-10-28 16:36:16 +01:00 |
|
|
FreddleSpl0it
|
1b6fec6a89
|
[Web] Hide the sync job form without the syncjobs ACL
|
2026-10-28 16:24:37 +01:00 |
|
|
FreddleSpl0it
|
9eb3a79f3b
|
[Web] Quarantine list adjustments
|
2026-10-28 16:16:00 +01:00 |
|
|
FreddleSpl0it
|
d5e3de3ae8
|
[Web] Add TFA Ratelimit
|
2026-10-28 16:04:45 +01:00 |
|
|
FreddleSpl0it
|
e986803980
|
[Rspamd] Render domain footers without the template engine
|
2026-10-28 15:50:56 +01:00 |
|
|
FreddleSpl0it
|
44429fa0d0
|
[Web] App password and API adjustments
|
2026-10-28 15:29:55 +01:00 |
|
|
FreddleSpl0it
|
bab03ed88b
|
[ACME][Dockerapi][Dovecot][Olefy][PHP][Rspamd][SOGo][Unbound][Watchdog][Netfilter] Update image tags (#7572)
* Update image tags
|
2026-10-28 13:08:22 +01:00 |
|
|
FreddleSpl0it
|
0cd71c7a00
|
Merge pull request #7569 from mailcow/feat/rspamd-4.2.3
[Rspamd] Update to 4.2.3
|
2026-10-28 12:22:43 +01:00 |
|
|
FreddleSpl0it
|
92ad6c5e6d
|
[Rspamd] Update to 4.2.3
|
2026-10-28 12:19:53 +01:00 |
|
|
FreddleSpl0it
|
aa7388810c
|
Merge pull request #7568 from mailcow/feat/compose-update
[Web] Update composer libraries
|
2026-10-28 12:01:04 +01:00 |
|
|
FreddleSpl0it
|
4dd7aead73
|
[Web] Store PKCE data of OAuth2 authorization codes
|
2026-10-28 11:57:46 +01:00 |
|
|
FreddleSpl0it
|
bd8c784118
|
[Web] Update composer libraries
|
2026-10-28 11:56:29 +01:00 |
|
|
FreddleSpl0it
|
9cc8ac2908
|
Merge pull request #7567 from mailcow/feat/netfilter-rework
[Netfilter] Rework: robust bans, no restart loops, identity provider outages are no failed logins
|
2026-10-28 11:24:29 +01:00 |
|
|
FreddleSpl0it
|
002400315d
|
Merge pull request #7566 from mailcow/feat/groups
[Web][Dovecot][SOGo][DockerApi] Add mailbox groups, shared mailboxes and identity provider sync
|
2026-10-28 11:21:58 +01:00 |
|
|
FreddleSpl0it
|
8934a84d18
|
Merge pull request #7547 from mailcow/feat/apikey-rework
[Web] Rework API keys: multiple keys + locked service keys from mailcow.conf
|
2026-10-28 11:18:47 +01:00 |
|
|
FreddleSpl0it
|
5ce88b5795
|
Merge pull request #7546 from mailcow/feat/imapsync-rework
[Web][Dovecot] Rework imapsync: sync sources, OAuth2, Python runner
|
2026-10-28 11:17:09 +01:00 |
|
|
FreddleSpl0it
|
b2b21b1a85
|
Merge pull request #7551 from mailcow/renovate/tianon-gosu-1.x
Update dependency tianon/gosu to v1.20
|
2026-10-28 09:05:19 +01:00 |
|
|
FreddleSpl0it
|
4b1b9362f3
|
Merge pull request #7555 from mailcow/renovate/redis-7.x
Update redis Docker tag to v7.4.12
|
2026-10-28 09:04:55 +01:00 |
|
|
FreddleSpl0it
|
fb32d8d345
|
Merge pull request #7563 from mailcow/feat/alpine3.24
Feat/alpine3.24
|
2026-10-28 09:04:34 +01:00 |
|
|
FreddleSpl0it
|
af5d0e3d29
|
[Dovecot] Update base to Alpine 3.24, build Dovecot 2.3 from Alpine 3.21 packaging
|
2026-10-28 09:00:45 +01:00 |
|
|
FreddleSpl0it
|
4884ed0cbf
|
[Olefy] Update base to Alpine 3.24, fix event loop for Python 3.14
|
2026-10-28 08:51:33 +01:00 |
|
|
FreddleSpl0it
|
8aaf68ffb5
|
[Unbound] Update to 1.26.2, base Alpine 3.24
|
2026-10-28 08:50:42 +01:00 |
|
|
FreddleSpl0it
|
503e64fe85
|
[ACME][Dockerapi][Netfilter][Watchdog] Update base to Alpine 3.24
|
2026-10-28 08:49:57 +01:00 |
|
|
FreddleSpl0it
|
ba034568e0
|
[Web] Add identity provider outage translation, remove unused needs_restart
|
2026-10-27 12:55:24 +01:00 |
|
|
FreddleSpl0it
|
b7d24881b1
|
[Netfilter][Tests] Add netfilter unit tests and identity provider outage tests
|
2026-10-27 12:54:45 +01:00 |
|
|
FreddleSpl0it
|
1c7c328a2a
|
[Web][Netfilter] Fix netban limits, no negative ban times, save lists atomically, check banlist id
|
2026-10-27 12:53:01 +01:00 |
|
|
FreddleSpl0it
|
7457fd59aa
|
[Web][Dovecot] Do not count logins as failed while the identity provider is unavailable
|
2026-10-27 12:46:24 +01:00 |
|
|
FreddleSpl0it
|
60177720ed
|
[Netfilter] Rework: keep bans across restarts, repair chain order instead of restarting, one isolation rule per port
|
2026-10-27 12:35:07 +01:00 |
|
|
FreddleSpl0it
|
15042e5921
|
[Web] Add mailbox group and identity provider translations
|
2026-10-27 10:21:11 +01:00 |
|
|
FreddleSpl0it
|
3959e311a0
|
[Web] Add API Documentation for mailbox groups and identity provider sync
|
2026-10-27 10:20:24 +01:00 |
|
|
FreddleSpl0it
|
ad86403b87
|
[Web][Tests] Add mailbox group, identity sync, auth, Dovecot and SOGo module tests
|
2026-10-27 10:15:00 +01:00 |
|
|
FreddleSpl0it
|
2c5718c9c9
|
[Web][Dovecot][SOGo][DockerApi] Add mailbox groups, shared mailboxes and identity provider sync
|
2026-10-27 10:01:33 +01:00 |
|
|
FreddleSpl0it
|
7d27460fee
|
Merge branch 'staging' into feat/imapsync-rework
|
2026-10-23 11:49:45 +02:00 |
|
|
FreddleSpl0it
|
8bc8fbdd2c
|
[Web] Add API Documentation for API keys
|
2026-10-23 11:23:38 +02:00 |
|