Starstruk Logo MarkStarstruk

2023-02a

mailcow/mailcow-dockerized2023-02aFeb 17, 2023by DerLinkman

AI Summary

An update addressing critical ClamAV security vulnerabilities (RCE) and fixing Netfilter IPv4 subrouting issues.

Key Highlights

  • ClamAV updated to 1.0.1 (fixes RCE issues)
  • Netfilter fix for IPv4 subrouting
  • FIDO2 login button change
  • Nextcloud bzip2 package addition

New Features

  • ClamAV security update
  • Netfilter IPv4 fix
  • FIDO2 UI update

Full Release Notes

⚠️**Within the 2023-02a Update we have updated ClamAV which had two RCE (Remote Code execution) security issues. We highly advise you to update or disable ClamAV if you don’t need it to close this possible security issue within ClamAV.** ⚠️

---

Moohoo, everyone!

Update 2023-02a or Update II of 2023-02 is here.

This time and in the future different then before. We wan't to make sure that we release fixes/improvements in a shorter time period and not bundled on one big patchday a month.

It allows us to release more updates to you with newer updates for our components for example.

The name scheme will keep the same (2023-02, 2023-02a,b,c etc.) but the amount of sub updates may differ per month.

We hope it's clear why we did this in the first place.

---

## What's Changed
* Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/5046
* Update devops-infra/action-pull-request action to v0.5.5 by @renovate in https://github.com/mailcow/mailcow-dockerized/pull/5060
* Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/5061
* [CLAMAV] Update to 1.0.1 by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/5064
* [web] Change FIDO2 login to independent button by @tomy0000000 & @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/5059
* [Web] fix mbox percentage sorting by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/commit/e1cd719a178b77a388662a9ec50b1e8faf118ea6
* Update dependency composer/composer to v2.5.4 by @renovate in https://github.com/mailcow/mailcow-dockerized/pull/5048
* [Nextcloud] Added bzip2 as required package by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/commit/7f0dd7d0d7a52115c3b97bb8c634b4b67d0693bb
* [Netfilter] Fix IPv4 Subrouting not added properly by @DerLinkman & @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/5070


**Full Changelog**: https://github.com/mailcow/mailcow-dockerized/compare/2023-02...2023-02a