2023-07

mailcow/mailcow-dockerized2023-07Jul 28, 2023by FreddleSpl0it

AI Summary

This update brings manageable CORS settings for the JSON API and general UI improvements, alongside security enhancements like bad ASN checks and Rspamd login handling.

Key Highlights

  • CORS settings added to JSON API
  • Rspamd returns 401 on unsuccessful logins
  • Spamhaus DNSBL AS Detection implemented
  • UI fixes for Rspamd history and mobile responsiveness
  • Redis pub/sub handler for broadcasting requests

New Features

  • JSON API CORS management
  • Rspamd 401 unauthorized response
  • Redis pub/sub handler
  • UI improvements for mobile and history

Full Release Notes

## Important
~~Before updating mailcow, make sure that the `whois` package is installed on your system.~~
A remote bad ASN Check has been implemented. Simply update your mailcow again to apply it :)

## What's Changed
* [Dovecot] remove pass return in Dovecot lua auth by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/5266
* Update thollander/actions-comment-pull-request action to v2.4.0 by @renovate in https://github.com/mailcow/mailcow-dockerized/pull/5280
* Update dependency nextcloud/server to v27 by @renovate in https://github.com/mailcow/mailcow-dockerized/pull/5284
* Update nextcloud heper script to disable SMTP TLS host verification by @superpuffin in https://github.com/mailcow/mailcow-dockerized/pull/5283
* [API] Update swagger version to 5.1.0 by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/5263
* Rspamd returns 401 on unsuccesful logins by @MAGICCC in https://github.com/mailcow/mailcow-dockerized/pull/5262
* [Web] add cors to json_api by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/5213
* [Web] fix loading rspamd-history by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/5312
* [Dockerapi] add redis pubsub handler for broadcasting requests by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/5310
* [Rspamd] add dot-stuffing to bcc forwarding by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/5221
* [web] logger pdo exception handling workaround by @goodygh in https://github.com/mailcow/mailcow-dockerized/pull/5215
* [Rspamd] Native mailcow Support for Securite ClamAV Signatures by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/5316
* Fixes several instances of missing </span>, extra role='tabpanel' andโ€ฆ by @SnailShea in https://github.com/mailcow/mailcow-dockerized/pull/5315
* Update dependency nextcloud/server to v27.0.1 by @renovate in https://github.com/mailcow/mailcow-dockerized/pull/5324
* Spamhaus DNSBL AS Detection by @DerLinkman https://github.com/mailcow/mailcow-dockerized/pull/5295

## New Contributors
* @superpuffin made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/5283

**Full Changelog**: https://github.com/mailcow/mailcow-dockerized/compare/2023-05a...2023-07