Mailcow (Security-)Updates

fvbor · May 22, 2026 at 7:38 AM

Moin Leute,
in der Vergangenheit habe ich es ja schon öfter im Längsten Thread geteilt wenn es Mailcow Updates gab, nun werde ich das hier fortführen.

Ich werde dabei - soweit es geht - immer zum Blog verlinken und den Beitrag hier einmal rein kopieren.

Kurzer Disclaimer: Ich bin selbst "nur" ein Mailcow Benutzer und stehe nicht in Zusammenhang mit "The Infrastructure Company GmbH"

https://mailcow.email/posts/2026/release-2026-05/

Quote

2026-05b (Release: 21st May 2026)
This update bumps Nginx to version 1.30.1.
Bug Fixes
[Web] escape HTML in quarantine table by @FreddleSpl0it ➡️ PR #7241
Updates
[Nginx] Update to 1.30.1 by @FreddleSpl0it ➡️ PR #7240
Add Uzbek language by @Jahongir-Qurbonov ➡️ PR #7224
Translations update from Weblate by @milkmaker ➡️ PR #7228
Update devops-infra/action-pull-request action to v1.1.1 by @renovate[bot] ➡️ PR #7234
Full Changelog
https://github.com/mailcow/mailcow-dockerized/compare/2026-05a…2026-05b
2026-05a (Release: 13th May 2026)
Bug Fixes
This update bumps SOGo to version 5.12.8 and thereby addresses 4 security issues. Further details can be found in the SOGo release notes.
We strongly recommend updating to this version.
[SOGo] Update to 5.12.8 by @FreddleSpl0it ➡️ PR #7226
Full Changelog
https://github.com/mailcow/mailcow-dockerized/compare/2026-05…2026-05a
2026-05 (Release: 12th May 2026)
Moohoo everyone!
We’re presenting the 2026-05 Update! This small but important release addresses a security-related issue in the web frontend and ships the usual updates for Postscreen and our Weblate translations.
We strongly recommend updating to this version.
Important Note: The associated CVE identifier will be published separately at a later date.
Bug Fixes
[Web] escape HTML in sieve filter edit view and queue manager by @FreddleSpl0it ➡️ PR #7220
Updates
[Postfix] update postscreen_access.cidr by @milkmaker ➡️ PR #7177
[Postfix] update postscreen_access.cidr by @milkmaker ➡️ PR #7209
Translations update from Weblate by @milkmaker ➡️ PR #7190
Translations update from Weblate by @milkmaker ➡️ PR #7218
Full Changelog
https://github.com/mailcow/mailcow-dockerized/compare/2026-03b…2026-05
That’s all for this release! As always, we recommend keeping your mailcow installation up-to-date and backing up your data regularly.
Stay safe and enjoy!
Your mailcow Team from The Infrastructure Company GmbH (or shortly tinc)

Display More

fvbor · May 26, 2026 at 10:55 AM

Revision C für 2026-05 inkl. einer gefixten CVE

https://github.com/mailcow/mailcow-dockerized/releases/tag/2026-05c

Code

🐝🐮 Mooay 2026 | Just another security update - Revision C Latest
@FreddleSpl0it FreddleSpl0it released this 2 minutes ago
 2026-05c
 2ac4b1d 
What's Changed
[Nginx] Update to 1.30.2 by @FreddleSpl0it in #7259
fix unbound CVE-2026-33278 by @SYNLINQ in #7252
Update actions/stale action to v10.3.0 by @renovate[bot] in #7242
Translations update from Weblate by @milkmaker in #7245
Update devops-infra/action-pull-request action to v1.1.2 by @renovate[bot] in #7247
Update devops-infra/action-pull-request action to v1.1.3 by @renovate[bot] in #7253
Update devops-infra/action-pull-request action to v1.2.0 by @renovate[bot] in #7254

Display More

joas · July 14, 2026 at 1:23 PM New

Das Mailcow Update 2026-07 ist online!

https://mailcow.email/posts/2026/release-2026-07/

Code

🏖️🐮 Mooly 2026 | Postfix 3.10.12, Rspamd 4.1.0 & Nginx 1.30.3 Latest
@FreddleSpl0it FreddleSpl0it released this yesterday 2026-07
What's Changed
Update RSPAMD version to 4.1.0 in Dockerfile by @dragoangel in #7172
[Rspamd] Migrate metadata_exporter to multipart formatter by @FreddleSpl0it in #7283
Refresh SOGo view after mailbox activation by @ibobgunardi in #7277
Fix force_tfa not available in mailbox template #7216 by @Snafu in #7275
[SOGo] Update to 5.12.9 by @goodygh in #7267
Escape generated password in mobileconfig by @mkuron in #7212
[Nignx] Update to 1.30.3 by @FreddleSpl0it in #7305
postfix: migrate from bookworm to trixie by @DerLinkman in #7323
Update dependency composer/composer to v2.10.2 by @renovate[bot] in #7312
Update devops-infra/action-pull-request action to v1.2.1 by @renovate[bot] in #7258
Update actions/stale action to v10.4.0 by @renovate[bot] in #7322
Update devops-infra/action-pull-request action to v1.4.0 by @renovate[bot] in #7321
Update dependency php/pecl-mail-mailparse to v3.2.0 by @renovate[bot] in #7189
Update dependency composer/composer to v2.10.1 by @renovate[bot] in #7193
Update alpine Docker tag to v3.24 by @renovate[bot] in #7280
Update actions/checkout action to v7 by @renovate[bot] in #7300
Update devops-infra/action-pull-request action to v1.3.0 by @renovate[bot] in #7272
[Postfix] update postscreen_access.cidr by @milkmaker in #7269
[Postfix] update postscreen_access.cidr by @milkmaker in #7311
Translations update from Weblate by @milkmaker in #7262
Translations update from Weblate by @milkmaker in #7263
Translations update from Weblate by @milkmaker in #7302
ui, fail2ban fix german ban_list_info translation by @goodygh in #7265
Refined wording for displaying of active settings on quarantine page. by @ralfbergs in #7326
New Contributors
@ibobgunardi made their first contribution in #7277
@Snafu made their first contribution in #7275
@ralfbergs made their first contribution in #7326
Full Changelog: 2026-05c...2026-07

Display More

2026-05b (Release: 21st May 2026)

Bug Fixes

Updates

Full Changelog

2026-05a (Release: 13th May 2026)

Bug Fixes

Full Changelog

2026-05 (Release: 12th May 2026)

Bug Fixes

Updates

Full Changelog

Tags