Starstruk Logo MarkStarstruk

2022-09

mailcow/mailcow-dockerized2022-09Sep 27, 2022by DerLinkman

AI Summary

A comprehensive update addressing security vulnerabilities in Swagger UI, fixing quarantine notification issues, and improving the 'send-as' feature.

Key Highlights

  • Hardening of GitHub Workflows
  • Fixed quarantine_notify.py charset issue
  • Security Advisory for Swagger UI (CVE-2022-39258)
  • Nightly builds receive Bootstrap 5 updates and new dashboard features

New Features

  • Sieve Access toggle via Mass-Actions (Nightly)
  • Loading Animation for Container Charts (Nightly)
  • Public IP Addresses display on Dashboard (Nightly)

Full Release Notes

## What's Changed in Stable Builds
* GitHub Workflows security hardening by @sashashura in https://github.com/mailcow/mailcow-dockerized/pull/4761
* Fixed small typo in escape sequence in update script by @mindsolve in https://github.com/mailcow/mailcow-dockerized/pull/4762
* Update quarantine_notify.py charset by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/4758 (this fixes https://github.com/mailcow/mailcow-dockerized/issues/4743)
* Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/4765
* [API] Update swagger version by @ntimo in https://github.com/mailcow/mailcow-dockerized/pull/4763
* Improve send-as behaviour by @macwinnie in https://github.com/mailcow/mailcow-dockerized/pull/4703

### CVE-2022-39258

This Update also close a security issue with the Swagger UI.
We´ve opened a GitHub Security Advisory which explains the case in more detail: https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-vjgf-cp5p-wm45

## What's Changed in Nightly Builds
We´ve gathered some Feedback to the Bootstrap 5 Update (Located here: https://github.com/mailcow/mailcow-dockerized/discussions/4734) and implemented this, which is:

* [NEW] Sieve Access can now be toggled via Mass-Actions
* [NEW] Added a Loading Animation for the Container Charts
* [NEW] The Public IP-Adresses of your Mailserver (done with dig inside the containers) are now displayed on the Dashboard Page.
* [FIX] Fixed some Layout Issues (especially Color Changes)

**Remember: These changes are ONLY available inside the nightly Builds.**

---

### Important Links:
- Detailed informations on our Blog: [https://mailcow.email/posts/2022/release-2022-09/](https://mailcow.email/posts/2022/release-2022-09/)
- Learn how to get nightly builds: https://docs.mailcow.email/i_u_m/i_u_m_update/#how-do-i-get-nightly-updates
- Or try the nightly Demo to get a impression of the new UI: https://nightly-demo.mailcow.email (more Informations + Login Credentials located here: https://docs.mailcow.email/#demos)

**Full Changelog**: https://github.com/mailcow/mailcow-dockerized/compare/2022-08b...2022-09