🏮🐄 Moovember | Mailbox Rename, SOGo 5.11.1, Rspamd 3.10.2, and More | Revision B

Note

This Release Marks Revision B for 2024-11 and is fixing some bugs from 2024-11(a)

What's Changed

• mysql: increased thread_stack to 192k since 10.5.27 by @DerLinkman in d10d64d
• [Web] broadcast maildir move to dovecot containers on mailbox_rename by @FreddleSpl0it in 6d1f748
• [Web] update _sogo_static_view on password reset by @FreddleSpl0it in b9f52df

Full Changelog: 2024-11a...2024-11b

🏮🐄 Moovember | Mailbox Rename, SOGo 5.11.1, Rspamd 3.10.2, and More | Revision A

Note

This Release Marks Revision A for 2024-11 and is fixing some critical bugs from 2024-11

What's Changed

• update.sh: precaution ask for deletion of dns_blocklists.cf if old format by @DerLinkman in #6154
• [Web] Updated lang.zh-cn.json by @milkmaker in #6151
• compose: bump sogo version to include 5.11.2 by @DerLinkman in #6156
• php: use correct php image + workaround of #6149 by @DerLinkman & @FreddleSpl0it in #6159

Full Changelog: 2024-11...2024-11a

🏮🐄 Moovember | Mailbox Rename, SOGo 5.11.1, Rspamd 3.10.2, and More

Caution

We got some reports of postfix not starting correctly (see #6143) before update delete the dns_blocklists.cf file in your data/conf/postfix folder to make sure this file is properly regenerated.

What's Changed

• Translations update from Weblate by @milkmaker in #6039
• Translations update from Weblate by @milkmaker in #6049
• Translations update from Weblate by @milkmaker in #6053
• [Postfix] update postscreen_access.cidr by @milkmaker in #6056
• feat: Added check for newer version tags on remote by @Finnlife in #6054
• chore(deps): update peter-evans/create-pull-request action to v7 by @renovate in #6059
• compose: added clamd as depends_on to rspamd by @DerLinkman in #6062
• [PHP-FPM] Use redis as session store by @FreddleSpl0it in #6044
• [SOGo] Fix vacation auto reply date shifting by @FreddleSpl0it in #6057
• show last sso login in mailbox table by @q16marvin in #5724
• feat/nginx-mailcow_brazilian-translations by @airon-assustadus in #6048
• Translations update from Weblate by @milkmaker in #6064
• Add missing Russian translation by @h3ssan in #6065
• fix: added tls1.0/1.1 patch for openssl when using older tls versions… by @DerLinkman in #6105
• chore(deps): update thollander/actions-comment-pull-request action to v3 by @renovate in #6102
• [Postfix] update postscreen_access.cidr by @milkmaker in #6093
• chore(deps): update dependency nextcloud/server to v28.0.11 by @renovate in #6101
• chore(deps): update dependency phpredis/phpredis to v6.1.0 by @renovate in #6098
• chore(deps): update dependency php/pecl-mail-mailparse to v3.1.8 by @renovate in #6096
• chore(deps): update dependency krakjoe/apcu to v5.1.24 by @renovate in #6087
• sogo: upgrade to 5.11.1 by @DerLinkman in #6109
• postfix: add X-Original-To header per default by @DerLinkman in #6110
• php: upgrade to alpine 3.20 (base os) by @DerLinkman in #6106
• Update dependency twig/twig to v3.14.0 by @MAGICCC in #6071
• dovecot: activate lazy_expunge plugin per default (unconfigured) by @DerLinkman in #6112
• Update mime_types.conf configuration by @patschi in #6013
• lang.zh-tw.json "memory" translation fix by @SamWang8891 in #6114
• rspamd: update to 3.10.1 by @DerLinkman in #6115
• Translations update from Weblate by @milkmaker in #6120
• Feat/rspamd 3.10.2 by @DerLinkman in #6122
• Translations update from Weblate by @milkmaker in #6123
• [Web][DockerApi] Add Feature to Rename Email Addresses by @FreddleSpl0it in #6045
• chore(deps): update thollander/actions-comment-pull-request action to v3.0.1 by @renovate in #6130
• [Postfix] update postscreen_access.cidr by @milkmaker in #6129
• fix: broken sogo cron notifications (for appointments etc.) by @DerLinkman in #6128
• Translations update from Weblate by @milkmaker in #6140

New Contributors

• @Finnlife made their first contribution in #6054
• @q16marvin made their first contribution in #5724
• @airon-assustadus made their first contribution in #6048
• @SamWang8891 made their first contribution in #6114

Full Changelog: 2024-08a...2024-11

🕶️🐄 Moogust Update 2024 | Revision A (Dovecot CVE Fixes)

What's Changed

• fix: 🚑 Fixed version parsing of docker by @jkrgr0 in #6016
• Refactor/Change Dockerfiles cmd from shell to exec form by @h3ssan in #6019
• dovecot: added timeout option when sa-rules cannot be downloaded by @DerLinkman in #6025
• containers: use mariadb-admin instead of deprecated mysqladmin by @DerLinkman in #6026
• Fix: bash variables are not quoted by @h3ssan in #6022
• Replace weird character to the correct ' by @h3ssan in #6029
• Pushover/Quarantine utf 8 fix - fixes #6028 by @bluewalk in #6031
• 2024-08a by @DerLinkman in #6033
• Fix: Escape a ' character in update.sh by @h3ssan in #6034

New Contributors

• @jkrgr0 made their first contribution in #6016

Full Changelog: 2024-08...2024-08a
Blog: https://mailcow.email/posts/2024/release-2024-08/

🕶️🐄 Moogust Update 2024 | Forgot Password?, SOGo 5.11, Rspamd 3.9.1 and More

What's Changed

• Translations update from Weblate by @milkmaker in #5980
• Allow prompt-less install on low-resource systems by @Ayowel in #5804
• dovecot: fix precompiling of sieve scripts by @DerLinkman in #5983
• Greek names of dovecot folders by @rallisf1 in #5972
• ui: added enotify and mime as valid options for ui by @DerLinkman in #5985
• Bug Fix: Check mailcow.conf exists before work with it by @h3ssan in #5987
• Fix typo in update.sh: word Proceeding by @h3ssan in #5989
• Fix LABEL in Dockerfile, should be key=value by @h3ssan in #5990
• fix: change internal urls for containers using curl on alpine by @Doozy134 in #5967
• rspamd: upgrade to rspamd 3.9.1 by @DerLinkman in #5661
• Refactor: update.sh script with --help should exit with status code 0 by @h3ssan in #5991
• [Fix] Watchdog: escape subject and body for webhooks by @mrclschstr in #5773
• Translations update from Weblate by @milkmaker in #5995
• Filter to limit ofelia scope by @Kitof in #5776
• restore: remove tty requirement from restore process to allow for automated restores by @muhlba91 in #5934
• Translations update from Weblate by @milkmaker in #5999
• [Rspamd] Fix bayes config by @dragoangel in #6000
• sogo: update to 5.11.0 + Rebase on Bookworm by @DerLinkman in #6002
• unbound: fix healthcheck logging + added fail tolerance to checks by @DerLinkman in #6004
• flatcurve-fts: limit tokenizers size in e-mail adress by @DerLinkman in #6006
• [Web] Add a forgot password flow by @FreddleSpl0it in #6009
• .github: Add pull_request_template.md by @DerLinkman in #6011

Sponsoring

Thank you to the Youth Foundation of Baden-Württemberg (Germany) for sponsoring the "Forgot Password?" feature!

New Contributors

• @Ayowel made their first contribution in #5804
• @rallisf1 made their first contribution in #5972
• @h3ssan made their first contribution in #5987
• @SailReal made their first contribution in #5945
• @Doozy134 made their first contribution in #5967
• @mrclschstr made their first contribution in #5773
• @Kitof made their first contribution in #5776
• @muhlba91 made their first contribution in #5934

Full Changelog: 2024-07...2024-08
Blog Post for additional informations: https://mailcow.email/posts/2024/release-2024-08/

🔥🐄 Mooly Update 2024 | Security Update

⚠️ Vulnerabilities fixed⚠️

CVE-2024-41958 - Two-Factor Authentication (2FA) Bypass Vulnerability
CVE-2024-41959 - XSS Vulnerability via API Logs
CVE-2024-41960 - XSS Vulnerability via Relay Hosts Configuration

What's Changed

• Do not add MAILCOW_WHITE on failed DMARC by @dragoangel in #5971
• [Postfix] update postscreen_access.cidr by @milkmaker in #5974
• Security fixes by @FreddleSpl0it in #5976

Full Changelog: 2024-06c...2024-07

🌙🐄 Moone Update 2024 | Revision C

What's Changed

• Revert "Update debug.twig to include a link to the git project URL for the mailcow version tag" by @DerLinkman in #5955
• Revert "php: Rebase on Debian 12" by @DerLinkman in #5956

Full Changelog: 2024-06b...2024-06c

🌙🐄 Moone Update 2024 | Revision B

What's Changed

• Enhanced regular expression for THREADS parameter by @torzech in #5634
• php: Rebase on Debian 12 to fix DNS Resolution bug (for now) by @DerLinkman in #5951
• web: remove WIP notice for ARM64 from ui by @DerLinkman in fc7ea7a
• [Postfix] update postscreen_access.cidr by @milkmaker in #5930

New Contributors

• @torzech made their first contribution in #5634

Full Changelog: 2024-06a...2026-06b

🌙🐄 Moone Update 2024 | Revision A

What's Changed

• Revert "Translations update from Weblate" by @DerLinkman in #5925

This Release also fixes broken PHP Container, caused by broken dns resolution of curl modul. To apply simply rereun the update.sh script

Full Changelog: 2024-06...2024-06a

🌙🐄 Moone Update 2024 | Flatcurve Update Phase I

⚠️ Critical Changes ⚠️

• Postfix Upgrade: Updated to Postfix 3.7.10 and Debian 12, dropping support for TLS 1.0 and 1.1. Older TLS versions can be re-enabled as per the documentation.

• Flatcurve FTS Engine: New experimental full-text search engine using Xapian. Activate with FLATCURVE_EXPERIMENTAL=y in mailcow.conf. Read docs

• Nextcloud helper-script will be dropped in December 2024. More informations why, READ HERE

What else Changed?

• Translations update from Weblate by @milkmaker in #5824
• Translations update from Weblate by @milkmaker in #5835
• Update lang.pt-pt.json by @7zx in #5832
• Translations update from Weblate by @milkmaker in #5839
• Improve Dutch translation by @mitchellvanbijleveld in #5840
• Translations update from Weblate by @milkmaker in #5862
• Update lang.ru-ru.json by @RakhimovRamis in #5865
• Translations update from Weblate by @milkmaker in #5873
• Translations update from Weblate by @milkmaker in #5876
• chore(deps): update alpine docker tag to v3.20 by @renovate in #5883
• Update debug.twig to include a link to the git project URL for the mailcow version tag by @CallMeLeon167 in #5875
• [Postfix] update postscreen_access.cidr by @milkmaker in #5863
• Switch IP2Country lookup backend to shortened version by @Thomas2500 in #5886
• os: updated all Alpine containers to 3.20 by @DerLinkman in #5893
• Fix unbound healthcheck.sh to log all messages to logfile by @DocFraggle in #5750
• remove version from docker-compose.yml by @iamspido in #5845
• Remove discontinued SORBS DNSBL by @mkuron in #5901
• Add switch to skip fetching certificates auto{config,discover} subdomains by @schichtnudelauflauf in #5838
• Fix blocking last logins fetching by @PierrePlt in #5880
• chore(deps): update dependency nextcloud/server to v28.0.6 by @renovate in #5690
• nextcloud: add deprecation notice once script start by @DerLinkman in #5902
• Remove unnecessary log lines in Postfix's log by @SwissOS in #5817
• Translations update from Weblate by @milkmaker in #5908
• chore(deps): update docker/build-push-action action to v6 by @renovate in #5910
• [Rspamd] Delete overriding obsolete rspamd plugin by @realizelol in #5900
• Translations update from Weblate by @milkmaker in #5912
• [Postfix] Upgrade to Deb12 + PF to 3.7.10 & Drop TLS 1.0/1.1 per default by @DerLinkman in #5635
• dovecot: add Flatcurve FTS Engine as EXPERIMENTAL by @DerLinkman in #5920

New Contributors

• @7zx made their first contribution in #5832
• @mitchellvanbijleveld made their first contribution in #5840
• @RakhimovRamis made their first contribution in #5865
• @CallMeLeon167 made their first contribution in #5875
• @iamspido made their first contribution in #5845
• @schichtnudelauflauf made their first contribution in #5838
• @PierrePlt made their first contribution in #5880
• @SwissOS made their first contribution in #5817

Full Changelog: 2024-04...2024-06