2026-05

zarazhangrui/frontend-slides2026-05May 12, 2026by FreddleSpl0it

AI Summary

A security release addressing Postfix configuration updates and improving HTML escaping in the web interface to prevent potential injection issues.

Key Highlights

  • Updated Postfix postscreen_access.cidr configuration
  • Added HTML escaping in sieve filter edit view and queue manager
  • Updated translations from Weblate

Full Release Notes

## What's Changed
This is a small but important update that fixes a security-related issue.
We strongly recommend updating to this version.
The associated CVE identifier will be published at a later time.

* [Postfix] update postscreen_access.cidr by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7177
* [Postfix] update postscreen_access.cidr by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7209
* Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7190
* Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7218
* [Web] escape HTML in sieve filter edit view and queue manager by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/7220


**Full Changelog**: https://github.com/mailcow/mailcow-dockerized/compare/2026-03b...2026-05