⚠️ CVE-2023-34108 : Manipulation of Internal Dovecot Variables in mailcow via crafted Passwords ⚠️
Moohoo everyone!
As announced in the last blog entry (dated 30.05.2023), here is the detailed CVE for security patch 2023-05a.
If you have not yet updated, you should do so as soon as possible, because an exploit is now publicly available on the Internet that could be exploited by authenticated users on your mail server.
https://mailcow.email/posts/2023/cve-2023-34108/
Moohoo everyone!
As announced in the last blog entry (dated 30.05.2023), here is the detailed CVE for security patch 2023-05a.
If you have not yet updated, you should do so as soon as possible, because an exploit is now publicly available on the Internet that could be exploited by authenticated users on your mail server.
https://mailcow.email/posts/2023/cve-2023-34108/
🍒 🐄 Mooly Update 2023 - Manageable CORS Settings and UI Improvements
Moohoo everyone! Important Before updating mailcow, make sure that the whois package is installed on your system. New Feature: Manage CORS Settings administrators can now manage CORS (Cross-Origin Resource Sharing) settings via the web UI for API access. This allows for better control and enhanced security when handling data exchange between different origins. CORS - Why Is It Needed? Under normal circumstances, when a script runs in the user’s browser, it primarily needs to access resources from the same origin.
https://mailcow.email/posts/2023/release-2023-07/
Moohoo everyone! Important Before updating mailcow, make sure that the whois package is installed on your system. New Feature: Manage CORS Settings administrators can now manage CORS (Cross-Origin Resource Sharing) settings via the web UI for API access. This allows for better control and enhanced security when handling data exchange between different origins. CORS - Why Is It Needed? Under normal circumstances, when a script runs in the user’s browser, it primarily needs to access resources from the same origin.
https://mailcow.email/posts/2023/release-2023-07/
🛑📜 Spamhaus DNS Blocklist changes since 2023-07
Moohoo everyone!
With the mailcow update 2023-07, there’s a somewhat significant change regarding Spamhaus DNS blocklists.
This blog post is here to provide information for those interested.
https://mailcow.email/posts/2023/spamhaus-dnsblocklist/
Moohoo everyone!
With the mailcow update 2023-07, there’s a somewhat significant change regarding Spamhaus DNS blocklists.
This blog post is here to provide information for those interested.
https://mailcow.email/posts/2023/spamhaus-dnsblocklist/
🤔🐮 What's up? - ARM64 Integration
Moohoo everyone! More than a month we have not heard from us and today just like that a shadowdrop as an update. Since we have some things to discuss and also want to communicate directly in the future, we have come up with a section that we call What’s up?. Today we start directly with the first topic, namely ARM64: We had originally announced to make mailcow ARM64 ready by June 2023.
https://mailcow.email/posts/whats-up-arm64/
Moohoo everyone! More than a month we have not heard from us and today just like that a shadowdrop as an update. Since we have some things to discuss and also want to communicate directly in the future, we have come up with a section that we call What’s up?. Today we start directly with the first topic, namely ARM64: We had originally announced to make mailcow ARM64 ready by June 2023.
https://mailcow.email/posts/whats-up-arm64/
mailcowNews
🍒 🐄 Mooly Update 2023 - Manageable CORS Settings and UI Improvements Moohoo everyone! Important Before updating mailcow, make sure that the whois package is installed on your system. New Feature: Manage CORS Settings administrators can now manage CORS (Cross…
Blogpost updated alongside the new 2023-07a Release:
https://mailcow.email/posts/2023/release-2023-07/#2023-07a-release-31th-july-2023
https://mailcow.email/posts/2023/release-2023-07/#2023-07a-release-31th-july-2023
mailcow.email
🍒 🐄 Mooly Update 2023 - Manageable CORS Settings and UI Improvements
Moohoo everyone!
Important Before updating mailcow, make sure that the whois package is installed on your system.
New Feature: Manage CORS Settings administrators can now manage CORS (Cross-Origin Resource Sharing) settings via the web UI for API access.…
Important Before updating mailcow, make sure that the whois package is installed on your system.
New Feature: Manage CORS Settings administrators can now manage CORS (Cross-Origin Resource Sharing) settings via the web UI for API access.…
🌻 🐄 Moogust Update 2023 - Spamhaus DQS Hotfixes
2023-08 (Release 3rd August 2023) Moohoo everyone! I hope you are not tired yet of performing updates. The 2023-08 Release is here, and it contains some hotfixes for the new Spamhaus DQS feature. If you are not using Spamhaus DQS and haven’t experienced any issues with the 2023-07 update, you don’t have to install this update. As this release only contains hotfixes, there is not much to say about it, except for one thing.
https://mailcow.email/posts/2023/release-2023-08/
2023-08 (Release 3rd August 2023) Moohoo everyone! I hope you are not tired yet of performing updates. The 2023-08 Release is here, and it contains some hotfixes for the new Spamhaus DQS feature. If you are not using Spamhaus DQS and haven’t experienced any issues with the 2023-07 update, you don’t have to install this update. As this release only contains hotfixes, there is not much to say about it, except for one thing.
https://mailcow.email/posts/2023/release-2023-08/
💪🐮6️⃣4️⃣ mailcow: dockerized (ARM64) is now in open Beta (inside nightly builds)
Moohoo everyone!
No you are not dreaming, yes you are awake and no this is no joke:
mailcow’s ARM64 support can now be tested in nightly as BETA!
https://mailcow.email/posts/2023/arm64-open-beta/
Moohoo everyone!
No you are not dreaming, yes you are awake and no this is no joke:
mailcow’s ARM64 support can now be tested in nightly as BETA!
https://mailcow.email/posts/2023/arm64-open-beta/
🔒🔑 External Identity Providers for User authentication
Moohoo - Good News, everyone! With the Nightly Branch, it is now possible to use an external Identity Provider as an additional authentication source. mailcow utilizes the OIDC (OpenID Connect) protocol to authenticate only mailbox users. To enable this, we have made some changes to the way authentication works. Let’s talk about what has changed, what we had in mind, and what we plan to add in the future. Of course, we will also show you how to use the new feature.
https://mailcow.email/posts/2023/mailcow-idp/
Moohoo - Good News, everyone! With the Nightly Branch, it is now possible to use an external Identity Provider as an additional authentication source. mailcow utilizes the OIDC (OpenID Connect) protocol to authenticate only mailbox users. To enable this, we have made some changes to the way authentication works. Let’s talk about what has changed, what we had in mind, and what we plan to add in the future. Of course, we will also show you how to use the new feature.
https://mailcow.email/posts/2023/mailcow-idp/
🔥🐄 Hotfix Update September 2023 (SOGo 5.9.0)
2023-09 Moohoo everyone! We are back with a tiny mailcow update that solves the problems with macOS 14 (Sonoma) and SOGo. That’s all there is this month. More content will come in early October with update 2023-10. Changelog [SOGo] Update to 5.9.0 The full changelog, including the individual commits, is available on GitHub at any time for those interested: https://github.com/mailcow/mailcow-dockerized/releases/tag/2023-09 As always, a huge thank you to our great mailcow community for your continued support and valuable feedback.
https://mailcow.email/posts/2023/release-2023-09/
2023-09 Moohoo everyone! We are back with a tiny mailcow update that solves the problems with macOS 14 (Sonoma) and SOGo. That’s all there is this month. More content will come in early October with update 2023-10. Changelog [SOGo] Update to 5.9.0 The full changelog, including the individual commits, is available on GitHub at any time for those interested: https://github.com/mailcow/mailcow-dockerized/releases/tag/2023-09 As always, a huge thank you to our great mailcow community for your continued support and valuable feedback.
https://mailcow.email/posts/2023/release-2023-09/
2023-10 will be released today! Stay tuned for more informations..
🎃🐄 Mooctober 2023 Update | Domainwide Footer, cURL Fixes and more
2023-10 (Released 12th October 2023)
MooBoo hoo everyone!
It’s spooky season again and we hope you’re all ready to celebrate the Halloween season this year.
However mailcow is also delivering you with some treats (tricks “sold” seperately and not included in this update) regarding the stack.
This time it’s quite huge!
https://mailcow.email/posts/2023/release-2023-10/
2023-10 (Released 12th October 2023)
MooBoo hoo everyone!
It’s spooky season again and we hope you’re all ready to celebrate the Halloween season this year.
However mailcow is also delivering you with some treats (tricks “sold” seperately and not included in this update) regarding the stack.
This time it’s quite huge!
https://mailcow.email/posts/2023/release-2023-10/
We've just released 2023-10a.
Check our blog to see what has been fixed:
https://mailcow.email/posts/2023/release-2023-10/
Check our blog to see what has been fixed:
https://mailcow.email/posts/2023/release-2023-10/
mailcow.email
🎃🐄 Mooctober 2023 Update | Domainwide Footer, cURL Fixes and more
2023-10 (Released 12th October 2023)
MooBoo hoo everyone!
It’s spooky season again and we hope you’re all ready to celebrate the Halloween season this year.
However mailcow is also delivering you with some treats (tricks “sold” seperately and not included…
MooBoo hoo everyone!
It’s spooky season again and we hope you’re all ready to celebrate the Halloween season this year.
However mailcow is also delivering you with some treats (tricks “sold” seperately and not included…
💪🐮6️⃣4️⃣ mailcow: dockerized (ARM64) development stagnates. Will no longer release as stable in 2023
Moohoo everyone!
We are back with new information on the current ARM64 topic.
Unfortunately, it’s not good news, as you might have guessed from the headline…
https://mailcow.email/posts/2023/arm64-delay/
Moohoo everyone!
We are back with new information on the current ARM64 topic.
Unfortunately, it’s not good news, as you might have guessed from the headline…
https://mailcow.email/posts/2023/arm64-delay/
🏮🐄 Moovember 2023 Update | Quarantine Hotfix (Security), Rspamd 3.7.4, Synchronization Jobs, and Domain Wide Footer Fixes
Moo hoo everyone!
The holiday season is slowly approaching, and here we are with another update at our doorstep.
First things first: It’s advisable to update (especially if using Quarantine) due to a critical security patch. A specific CVE number will follow soon.
https://mailcow.email/posts/2023/release-2023-11/
Moo hoo everyone!
The holiday season is slowly approaching, and here we are with another update at our doorstep.
First things first: It’s advisable to update (especially if using Quarantine) due to a critical security patch. A specific CVE number will follow soon.
https://mailcow.email/posts/2023/release-2023-11/
🛷 🐄 Moocember 2023 Update | Netfilter NFTables Support and Banlist Endpoint
2023-12 (Release 19th December 2023)
Moo hoo zusammen!
We have some new Netfilter features for you before the holidays. In addition, the watchdog can now send notifications via webhooks. To do this, simply configure the variables
https://mailcow.email/posts/2023/release-2023-12/
2023-12 (Release 19th December 2023)
Moo hoo zusammen!
We have some new Netfilter features for you before the holidays. In addition, the watchdog can now send notifications via webhooks. To do this, simply configure the variables
WATCHDOG_NOTIFY_WEBHOOK and WATCHDOG_NOTIFY_WEBHOOK_BODY in mailcow.conf accordingly.https://mailcow.email/posts/2023/release-2023-12/
mailcow.email
🛷 🐄 Moocember 2023 Update | Netfilter NFTables Support and Banlist Endpoint
2023-12 (Release 19th December 2023)
Moo hoo zusammen!
We have some new Netfilter features for you before the holidays.
In addition, the watchdog can now send notifications via webhooks. To do this, simply configure the variables WATCHDOG_NOTIFY_WEBHOOK and…
Moo hoo zusammen!
We have some new Netfilter features for you before the holidays.
In addition, the watchdog can now send notifications via webhooks. To do this, simply configure the variables WATCHDOG_NOTIFY_WEBHOOK and…
Hello everyone! We hope you had a great start in 2024!
Today we're happy to announce the Release Date of the ARM64 Update (2024-01) which will be January 17th, 2024.
We hope you look forward to it as we do :)
Today we're happy to announce the Release Date of the ARM64 Update (2024-01) which will be January 17th, 2024.
We hope you look forward to it as we do :)
🦾6️⃣4️⃣ 🐄 Janmooary 2024 Update | The Multiarch (x86 + ARM64) & Performance Update
Moohoo everyone!
We hope you had a good start into the young 2024. As already announced in advance on social media (X/Twitter: @mailcow_email, Mastodon: @doncow@mailcow.social), the long-awaited ARM64 or Multiarch update is finally being released today which we have been working on for a long time with ups and downs.
https://mailcow.email/posts/2024/release-2024-01/
Moohoo everyone!
We hope you had a good start into the young 2024. As already announced in advance on social media (X/Twitter: @mailcow_email, Mastodon: @doncow@mailcow.social), the long-awaited ARM64 or Multiarch update is finally being released today which we have been working on for a long time with ups and downs.
https://mailcow.email/posts/2024/release-2024-01/
If you encounter the problem that the mailcow containers are stuck during boot (e.g. Waiting for XXX...) try removing the search parameter inside your /etc/resolv.conf file on the host and restart the mailcow stack. This issue is already adressed and fixed at the submodule from curl causing this problem (see: https://github.com/c-ares/c-ares/issues/683) but the release has not been done yet.
Once the fix is implemented we'll push new images including this fix.
Once the fix is implemented we'll push new images including this fix.
GitHub
`curl` with `c-ares 1.22.1-r0` doesn't accept some DNS responses · Issue #683 · c-ares/c-ares
Hello! I downloaded curl on alpine:3.19 with apk add curl fetch https://dl-cdn.alpinelinux.org/alpine/v3.19/main/x86_64/APKINDEX.tar.gz fetch https://dl-cdn.alpinelinux.org/alpine/v3.19/community/x...