mailcow
Dockerized groupware and mail server suite with webmail
Alternative to: google workspace, gmail, microsoft 365, zoho mail, fastmail
About
Versions (90)
2023-05a
2023-05-30What’s Changed
- Update dependency nextcloud/server to v26.0.2 by @renovate in https://github.com/mailcow/mailcow-dockerized/pull/5254
- [Dovecot] remove pass return in Dovecot lua auth by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/commit/67510adb9e0e354d0d16564a5156e3167bc28f8b
- [Dovecot] Update to 1.24 by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/commit/f82aba3e26a58c018283524098dc373ca6273172
- Changed maintainers to tinc (Dockerfiles) by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/commit/70aab7568e7eea15d5d1777781bdcdfee06dbacd
Information about 2023-05a
This update contains a fix for a critical password change vulnerability in Dovecot (IMAP/POP3). We will release an official CVE in a few days (up to a week from now) with a detailed explanation and proof of concept for exploiting this desired security issue.
We strongly recommend that you update to 2023-05a ASAP as this problem persists for a longer period of time (before 2020).
Please check the linked CVE regarding this issue: CVE-2023-34108
Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2023-05…2023-05a