2025-07
mailcow/mailcow-dockerized2025-07Jul 15, 2025by FreddleSpl0it
AI Summary
Security update addressing a critical Remote Code Execution (RCE) vulnerability affecting authenticated admin users.
Key Highlights
- Fix for critical RCE vulnerability (SELinux label addition)
- Postfix postscreen_access.cidr updates
Full Release Notes
⚠️ Vulnerability fixed⚠️ --------------------------------- This update addresses a critical vulnerability that allowed Remote Code Execution (RCE) by authenticated admin users. All users are strongly advised to update. A CVE will follow the next Days. ## What's Changed * compose: add selinux label to mysql-socket-vol (permission) by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/6560 * [Postfix] update postscreen_access.cidr by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6573 * [Postfix] update postscreen_access.cidr by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6611 * [ACME] Remove deprecated ACME_CONTACT variable by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/6617 * [Dovecot] Use Jinja2 sandbox for rendering quota and quarantine notif… by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/6631 * Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6548 * Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6552 * Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6582 * Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6589 * Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6599 * Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6600 * Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6601 * Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6609 * Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6614 * Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6622 * Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/6629 **Full Changelog**: https://github.com/mailcow/mailcow-dockerized/compare/2025-05...2025-07