FreddleSpl0it
|
b5fa926bc0
|
[Clamd] Update to 1.4.6
|
2026-08-13 13:56:49 +02:00 |
|
FreddleSpl0it
|
50be483c39
|
Merge pull request #7390 from mailcow/fix/6859
[ACME] Skip mta-sts certificate request when MTA-STS is not active for a domain
|
2026-07-30 10:44:24 +02:00 |
|
FreddleSpl0it
|
d64c923aca
|
[ACME] Skip mta-sts certificate request when MTA-STS is not active for a domain
|
2026-07-30 10:33:55 +02:00 |
|
FreddleSpl0it
|
2d5f166ba8
|
Merge pull request #7389 from mailcow/fix/default-mbox-template
[Web] Create default mailbox template with eas and dav access
|
2026-07-30 09:23:24 +02:00 |
|
FreddleSpl0it
|
94b5a623ab
|
Merge pull request #7388 from mailcow/fix/7329
[Web] Move mailcow update check to server side
|
2026-07-30 09:13:19 +02:00 |
|
FreddleSpl0it
|
e406ecd461
|
Merge pull request #7387 from mailcow/fix/mfk25
Hardening mailcow
|
2026-07-30 09:07:10 +02:00 |
|
FreddleSpl0it
|
68a95c3af3
|
Merge pull request #7386 from mailcow/feat/rspamd-4.1.4
[Rspamd] update to 4.1.4
|
2026-07-30 08:59:04 +02:00 |
|
FreddleSpl0it
|
bd037d5644
|
[Nginx] Set image tag to 1.30.4-1
|
2026-07-30 08:51:21 +02:00 |
|
FreddleSpl0it
|
7036dbf4f8
|
[Rspamd] update to 4.1.4
|
2026-07-30 08:50:18 +02:00 |
|
FreddleSpl0it
|
2f10a4633f
|
Merge pull request #7385 from mailcow/fix/cors
[Web] harden CORS origin matching and add Vary: Origin
|
2026-07-30 08:41:01 +02:00 |
|
FreddleSpl0it
|
36c70db86c
|
[Web] harden CORS origin matching and add Vary: Origin
|
2026-07-30 08:37:18 +02:00 |
|
FreddleSpl0it
|
f4961c4023
|
Merge pull request #7333 from fallmo/fix/cors-settings-validation
fix: cors allowed origins settings validation
|
2026-07-28 15:35:29 +02:00 |
|
FreddleSpl0it
|
38de21592c
|
Merge pull request #7358 from SYNLINQ/staging
Fix nginx CVE-2026-42533
|
2026-07-28 14:40:30 +02:00 |
|
FreddleSpl0it
|
f44bd2f36a
|
[Web] document sender_acl in get/mailbox API examples
|
2026-07-28 14:19:45 +02:00 |
|
FreddleSpl0it
|
95a77f2dcb
|
Merge pull request #7348 from smpaz7467/fix/api-get-mailbox-sender-acl
[Web] return sender_acl in get/mailbox API
|
2026-07-28 14:12:57 +02:00 |
|
FreddleSpl0it
|
e856510fb2
|
Merge pull request #7345 from smpaz7467/fix/time-limited-alias-api
[Web] fix add/time_limited_alias silently discarding requests and validity
|
2026-07-28 13:49:37 +02:00 |
|
FreddleSpl0it
|
d51d06d716
|
Merge pull request #7343 from smpaz7467/fix/nginx-ipv6-default-server
[Nginx] only bind IPv6 default_server when ENABLE_IPV6 is set
|
2026-07-28 13:35:17 +02:00 |
|
FreddleSpl0it
|
54170d075a
|
[Web] Move mailcow update check to server side
|
2026-07-28 13:32:18 +02:00 |
|
FreddleSpl0it
|
2e5a29bf69
|
Merge pull request #7367 from oidipos/fix/quarantine-subject
fix: restore subject display in quarantine overview
|
2026-07-28 10:54:23 +02:00 |
|
FreddleSpl0it
|
e245ac04d9
|
[Web] enforce tenant boundary for SOGo SSO
|
2026-07-28 09:21:29 +02:00 |
|
FreddleSpl0it
|
fea38c8e1b
|
[Web] escape mailbox name
|
2026-07-24 11:16:39 +02:00 |
|
FreddleSpl0it
|
cc9af65852
|
[Web] remove domain admin sso token after use
|
2026-07-24 10:26:23 +02:00 |
|
FreddleSpl0it
|
92cc8bec90
|
[Web] Use parameterized LIKE for sogo_acl deletion
|
2026-07-23 15:29:41 +02:00 |
|
FreddleSpl0it
|
145745329e
|
[Web] add dot stuffing for quarantine raw release
|
2026-07-23 15:01:44 +02:00 |
|
FreddleSpl0it
|
8e72d22c56
|
[Web] Escape rspamd_history and rllog
|
2026-07-23 11:17:55 +02:00 |
|
FreddleSpl0it
|
ddd76d99cd
|
[Web] Add sogo_auth_internal nginx marker for sogo-auth.php
|
2026-07-23 10:10:29 +02:00 |
|
FreddleSpl0it
|
4b62af9d02
|
update README.md sponsors
|
2026-07-15 08:29:46 +02:00 |
|
FreddleSpl0it
|
c1d75cf808
|
Merge pull request #7312 from mailcow/renovate/composer-composer-2.x
Update dependency composer/composer to v2.10.2
|
2026-07-13 09:40:58 +02:00 |
|
FreddleSpl0it
|
473fe2885d
|
Merge pull request #7326 from ralfbergs/fix/quarantine-text-refining
Refined wording for displaying of active settings on quarantine page.
|
2026-07-13 09:40:24 +02:00 |
|
FreddleSpl0it
|
31e1550668
|
[Postfix] change postscreen blacklist_action to denylist_action
|
2026-07-13 08:45:56 +02:00 |
|
FreddleSpl0it
|
315f55bc65
|
Merge pull request #7323 from DerLinkman/feat/postfix-deb13
postfix: migrate from bookworm to trixie
|
2026-07-13 08:23:57 +02:00 |
|
FreddleSpl0it
|
99768e16f5
|
Merge pull request #7305 from mailcow/feat/nginx-1.30.3
[Nignx] Update to 1.30.3
|
2026-06-25 12:20:25 +02:00 |
|
FreddleSpl0it
|
1f8b4679cc
|
[Nignx] Update to 1.30.3
|
2026-06-25 12:17:37 +02:00 |
|
FreddleSpl0it
|
fa154c71f3
|
[PHP] Rebuild Image
|
2026-06-11 10:29:01 +02:00 |
|
FreddleSpl0it
|
83a045ed3e
|
Merge pull request #7193 from mailcow/renovate/composer-composer-2.x
Update dependency composer/composer to v2.10.1
|
2026-06-11 10:07:19 +02:00 |
|
FreddleSpl0it
|
064817ac70
|
Merge pull request #7189 from mailcow/renovate/php-pecl-mail-mailparse-3.x
Update dependency php/pecl-mail-mailparse to v3.2.0
|
2026-06-11 10:06:49 +02:00 |
|
FreddleSpl0it
|
2bd7a24b8c
|
Merge pull request #7212 from mailcow/mkuron-patch-mobileconfig
Escape generated password in mobileconfig
|
2026-06-11 10:05:17 +02:00 |
|
FreddleSpl0it
|
ecc2462e4c
|
Merge pull request #7267 from goodygh/7249-update-sogo
[SOGo] Update to 5.12.9
|
2026-06-11 10:04:30 +02:00 |
|
FreddleSpl0it
|
2d8db72d46
|
Merge pull request #7275 from Snafu/fix/admin-mailbox-tfa-missing
Fix force_tfa not available in mailbox template #7216
|
2026-06-11 10:03:39 +02:00 |
|
FreddleSpl0it
|
277a307fb9
|
[Web] Fix refresh SOGo view on mailbox deletion
|
2026-06-11 09:55:32 +02:00 |
|
FreddleSpl0it
|
d455555621
|
Merge pull request #7277 from ibobgunardi/bobi/mailcow-7136-sogo-active-refresh
Refresh SOGo view after mailbox activation
|
2026-06-11 09:53:30 +02:00 |
|
FreddleSpl0it
|
9ea2ff1dff
|
Merge pull request #7283 from mailcow/feat/update-metadata-exporter
[Rspamd] Migrate metadata_exporter to multipart formatter
|
2026-06-11 09:40:34 +02:00 |
|
FreddleSpl0it
|
24cc369d84
|
[Rspamd] Migrate metadata_exporter to multipart formatter
|
2026-06-11 09:34:27 +02:00 |
|
FreddleSpl0it
|
5f5367f2f9
|
Merge pull request #7172 from mailcow/dragoangel-patch-4
Update RSPAMD version to 4.1.0 in Dockerfile
|
2026-06-11 09:04:19 +02:00 |
|
FreddleSpl0it
|
faac56a611
|
[Unbound] Change version tag
|
2026-05-26 10:43:25 +02:00 |
|
FreddleSpl0it
|
be37bc5a68
|
Merge pull request #7252 from SYNLINQ/staging
fix unbound CVE-2026-33278
|
2026-05-26 10:41:52 +02:00 |
|
FreddleSpl0it
|
b227c76156
|
Merge pull request #7259 from mailcow/feat/nginx-1.30.2
[Nginx] Update to 1.30.2
|
2026-05-26 10:37:57 +02:00 |
|
FreddleSpl0it
|
db4e3b4d54
|
[Nginx] Update to 1.30.2
|
2026-05-26 10:36:39 +02:00 |
|
FreddleSpl0it
|
22ae1f5363
|
Merge pull request #7241 from mailcow/fix/quarantinetable
escape HTML in quarantine table
|
2026-05-20 18:02:19 +02:00 |
|
FreddleSpl0it
|
c9cf8d7f38
|
Merge pull request #7240 from mailcow/feat/nginx1.30.1
[Nginx] Update to 1.30.1
|
2026-05-20 17:58:29 +02:00 |
|
FreddleSpl0it
|
cbd3d8b9bc
|
escape HTML in quarantine table
|
2026-05-20 17:53:47 +02:00 |
|
FreddleSpl0it
|
f553f38635
|
[Nginx] Update to 1.30.1
|
2026-05-20 17:24:41 +02:00 |
|
FreddleSpl0it
|
9175e5f086
|
Merge pull request #7226 from mailcow/feat/sogo-5.12.8
[SOGo] Update to 5.12.8
|
2026-05-13 10:34:50 +02:00 |
|
FreddleSpl0it
|
ff3d571054
|
[SOGo] Update to 5.12.8
|
2026-05-13 10:31:23 +02:00 |
|
FreddleSpl0it
|
a8e945f3da
|
Merge pull request #7220 from mailcow/fix/06052026
[Web] escape HTML in sieve filter edit view and queue manager
|
2026-05-12 08:36:36 +02:00 |
|
FreddleSpl0it
|
33547d1d73
|
[Web] escape HTML in sieve filter edit view and queue manager
|
2026-05-12 08:31:51 +02:00 |
|
FreddleSpl0it
|
8ead057ce9
|
[Web] Create default mailbox template with eas and dav access
|
2026-04-15 09:33:23 +02:00 |
|
FreddleSpl0it
|
ec24825280
|
Merge pull request #7173 from mailcow/fix/escaping
[Web][Dovecot] Improve input validation and escaping
|
2026-03-31 09:45:23 +02:00 |
|
FreddleSpl0it
|
5a00b5124b
|
[Web][Dovecot] Add parameterized queries and input validation for quarantine_category
|
2026-03-29 12:08:45 +02:00 |
|
FreddleSpl0it
|
8c039f694f
|
Improve template URI escaping and parameter handling
|
2026-03-19 12:48:43 +01:00 |
|
FreddleSpl0it
|
95bf46c1e4
|
escape HTML in autodiscover logs
|
2026-03-19 12:44:50 +01:00 |
|
FreddleSpl0it
|
edde35156d
|
escape HTML in qitem details
|
2026-03-19 12:44:30 +01:00 |
|
FreddleSpl0it
|
84e3c32f13
|
escape HTML in last logins
|
2026-03-19 12:44:00 +01:00 |
|
FreddleSpl0it
|
ecb848493b
|
add missing object-level access control
|
2026-03-19 12:42:45 +01:00 |
|
FreddleSpl0it
|
8a65b9d1c6
|
add missing access control
|
2026-03-19 12:41:47 +01:00 |
|
FreddleSpl0it
|
ed9264fd2a
|
[Web] Allow force_tfa for LDAP and Keycloak users
|
2026-03-13 14:13:25 +01:00 |
|
FreddleSpl0it
|
7817dda43f
|
[ACME] Skip subdomains covered by wildcards (DNS-01 challenge only)
|
2026-03-13 13:08:18 +01:00 |
|
FreddleSpl0it
|
018e292854
|
Merge pull request #7134 from mailcow/fix/7112-2
[ACME] Skip autodiscover/mta-sts subdomains covered by wildcard certificates
|
2026-03-13 12:39:10 +01:00 |
|
FreddleSpl0it
|
127fb1e8f5
|
[ACME] Skip autodiscover/mta-sts subdomains covered by wildcard certificates
|
2026-03-13 12:35:22 +01:00 |
|
FreddleSpl0it
|
d4bf377a96
|
Merge pull request #7121 from rezzorix/fix/theme-localstorage-staging
Fix theme localStorage collision with rspamd UI
|
2026-03-12 07:47:03 +01:00 |
|
FreddleSpl0it
|
abd6fe8c79
|
Merge pull request #7124 from mailcow/fix/7112
[ACME] Fix wildcard certificate conflict with MAILCOW_HOSTNAME
|
2026-03-12 07:46:02 +01:00 |
|
FreddleSpl0it
|
5f8382ef44
|
Merge pull request #7123 from mailcow/fix/7115
[Web] Fix LDAP/Keycloak login TypeError - missing JSON decode for attributes
|
2026-03-12 07:45:06 +01:00 |
|
FreddleSpl0it
|
1da8d1c894
|
[ACME] Fix wildcard certificate conflict with MAILCOW_HOSTNAME
|
2026-03-11 09:33:16 +01:00 |
|
FreddleSpl0it
|
d1feebf164
|
[Web] Fix LDAP/Keycloak login TypeError - missing JSON decode for attributes
|
2026-03-11 09:18:03 +01:00 |
|
FreddleSpl0it
|
1e0850193a
|
Merge pull request #7111 from mailcow/fix/7110
[SOGo] Add ActiveSync support
|
2026-03-10 13:37:58 +01:00 |
|
FreddleSpl0it
|
33acf56526
|
[SOGo] Add ActiveSync support
|
2026-03-10 13:13:00 +01:00 |
|
FreddleSpl0it
|
bea9ad7e8f
|
Merge pull request #7108 from mailcow/fix/7105
[SOGo] Fix draft folder creation by adding /var/spool/sogo directory
|
2026-03-10 10:38:50 +01:00 |
|
FreddleSpl0it
|
e7ea3aa608
|
[SOGo] Fix draft folder creation by adding /var/spool/sogo directory
|
2026-03-10 10:31:50 +01:00 |
|
FreddleSpl0it
|
5888e248c3
|
Merge pull request #7103 from mailcow/fix/7102
[Watchdog] Fix Nagios MariaDB client SSL compatibility with Alpine 3.23
|
2026-03-10 10:04:18 +01:00 |
|
FreddleSpl0it
|
2e176339ba
|
[Watchdog] Fix Nagios MariaDB client SSL compatibility with Alpine 3.23
|
2026-03-10 10:01:18 +01:00 |
|
FreddleSpl0it
|
8f883f3d37
|
Rename dns-101 to dns-01
|
2026-03-09 15:27:33 +01:00 |
|
FreddleSpl0it
|
709117fe19
|
prevent false positives in option detection in new_options.sh
|
2026-03-09 15:19:46 +01:00 |
|
FreddleSpl0it
|
82ea418423
|
Extend --dev flag to skip _modules update
|
2026-03-09 15:13:36 +01:00 |
|
FreddleSpl0it
|
fd24163c6e
|
prevent false positives in option detection in new_options.sh
|
2026-03-09 15:13:13 +01:00 |
|
FreddleSpl0it
|
3caef45a12
|
Merge pull request #7100 from mailcow/feat/rspamd-3.14.3
[Rspamd] Update to 3.14.3-1
|
2026-03-09 08:15:10 +01:00 |
|
FreddleSpl0it
|
8760e7e5db
|
[Rspamd] Update to 3.14.3-1
|
2026-03-09 07:59:34 +01:00 |
|
FreddleSpl0it
|
e848226062
|
[SOGo] Update paths from /usr/lib/ to /usr/local/lib/
|
2026-03-06 16:26:13 +01:00 |
|
FreddleSpl0it
|
efaeb77e13
|
Merge pull request #7093 from mailcow/fix/7054
[SOGo][Web] use incremental updates for mailbox/alias/resource sync in sogo_static_view
|
2026-03-06 09:23:00 +01:00 |
|
FreddleSpl0it
|
569b4cf985
|
Merge pull request #7098 from mailcow/feat/sogo-5.12.5
[SOGo] Update to 5.12.5
|
2026-03-06 09:21:09 +01:00 |
|
FreddleSpl0it
|
6c857243ec
|
[SOGo] Update to 5.12.5
|
2026-03-06 09:18:10 +01:00 |
|
FreddleSpl0it
|
fe71f84c82
|
[SOGo] Fix custom UI patches after moving to source-compiled SOGo
|
2026-03-04 14:55:52 +01:00 |
|
FreddleSpl0it
|
763ecbc93e
|
Update image tags
|
2026-03-04 13:38:16 +01:00 |
|
FreddleSpl0it
|
97312c1a9d
|
Update alpine images to 3.23
|
2026-03-04 13:35:11 +01:00 |
|
FreddleSpl0it
|
dcbea71e67
|
[ACME] auto-create DNS-01 config template on startup
|
2026-03-04 11:42:40 +01:00 |
|
FreddleSpl0it
|
524f19ff77
|
Update Docker Images
|
2026-03-04 11:36:09 +01:00 |
|
FreddleSpl0it
|
4e33c7143f
|
[SOGo][Web] use incremental updates for mailbox/alias/resource sync in sogo_static_view
|
2026-03-04 11:16:48 +01:00 |
|
FreddleSpl0it
|
ddc2309f1e
|
Merge pull request #7089 from mailcow/fix/7039
[Web] switch from GET to POST for datatable requests
|
2026-03-03 15:07:17 +01:00 |
|
FreddleSpl0it
|
bccfcefd17
|
Merge pull request #7088 from mailcow/fix/7043
[Web] Add missing EAS and DAV protocol options to mailbox bulk actions
|
2026-03-03 14:42:47 +01:00 |
|
FreddleSpl0it
|
d40252ccce
|
[Web] Add missing EAS and DAV protocol options to mailbox bulk actions
|
2026-03-03 14:39:41 +01:00 |
|
FreddleSpl0it
|
4abb5cbfab
|
Merge pull request #7086 from mailcow/feat/sogo-build
[SOGo] Build SOGo from source with security patches
|
2026-03-03 14:24:29 +01:00 |
|