mailcow-dockerized

v2026-07 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 14d Communication & Email

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

acme clamav docker dovecot groupware imap

+9 more

mail mailcow mailserver olefy postfix rspamd servercow smtp sogo

Affected surfaces

auth

ReleasePort's take

Moderate signal

editorial:auto 13d

This release updates several components (RSPAMD, SOGo, Nginx, Alpine) and migrates the Postfix container base image from bookworm to trixie.

Why it matters: Postfix must migrate from bookworm to trixie; failure triggers runtime incompatibility. All other component upgrades are routine maintenance.

Summary

AI summary

Minor fixes and improvements.

Changes in this release

Type	Severity	Summary	CVE
Breaking	High	postfix: migrate from bookworm to trixie. postfix: migrate from bookworm to trixie. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Medium	[Rspamd] Migrate metadata_exporter to multipart formatter. [Rspamd] Migrate metadata_exporter to multipart formatter. Source: llm_adapter@2026-07-13 Confidence: high	—
Dependency
Dependency	Low	Update RSPAMD version to 4.1.0 in Dockerfile. Update RSPAMD version to 4.1.0 in Dockerfile. Source: llm_adapter@2026-07-13 Confidence: high	—
Dependency	Low	[SOGo] Update to version 5.12.9. [SOGo] Update to version 5.12.9. Source: llm_adapter@2026-07-13 Confidence: high	—
Dependency	Low	[Nignx] Update to version 1.30.3. [Nignx] Update to version 1.30.3. Source: llm_adapter@2026-07-13 Confidence: high	—
Dependency	Low	Update dependency composer/composer to v2.10.2. Update dependency composer/composer to v2.10.2. Source: llm_adapter@2026-07-13 Confidence: high	—
Dependency	Low	Update dependency php/pecl-mail-mailparse to v3.2.0. Update dependency php/pecl-mail-mailparse to v3.2.0. Source: llm_adapter@2026-07-13 Confidence: high	—
Dependency	Low	Update Alpine Docker tag to v3.24. Update Alpine Docker tag to v3.24. Source: llm_adapter@2026-07-13 Confidence: high	—
Bugfix	Medium	Fix force_tfa not available in mailbox template. Fix force_tfa not available in mailbox template. Source: llm_adapter@2026-07-13 Confidence: high	—
Bugfix	Medium	Escape generated password in mobileconfig. Escape generated password in mobileconfig. Source: llm_adapter@2026-07-13 Confidence: high	—

Full changelog

What's Changed

Update RSPAMD version to 4.1.0 in Dockerfile by @dragoangel in https://github.com/mailcow/mailcow-dockerized/pull/7172
[Rspamd] Migrate metadata_exporter to multipart formatter by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/7283
Refresh SOGo view after mailbox activation by @ibobgunardi in https://github.com/mailcow/mailcow-dockerized/pull/7277
Fix force_tfa not available in mailbox template #7216 by @Snafu in https://github.com/mailcow/mailcow-dockerized/pull/7275
[SOGo] Update to 5.12.9 by @goodygh in https://github.com/mailcow/mailcow-dockerized/pull/7267
Escape generated password in mobileconfig by @mkuron in https://github.com/mailcow/mailcow-dockerized/pull/7212
[Nignx] Update to 1.30.3 by @FreddleSpl0it in https://github.com/mailcow/mailcow-dockerized/pull/7305
postfix: migrate from bookworm to trixie by @DerLinkman in https://github.com/mailcow/mailcow-dockerized/pull/7323
Update dependency composer/composer to v2.10.2 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7312
Update devops-infra/action-pull-request action to v1.2.1 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7258
Update actions/stale action to v10.4.0 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7322
Update devops-infra/action-pull-request action to v1.4.0 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7321
Update dependency php/pecl-mail-mailparse to v3.2.0 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7189
Update dependency composer/composer to v2.10.1 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7193
Update alpine Docker tag to v3.24 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7280
Update actions/checkout action to v7 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7300
Update devops-infra/action-pull-request action to v1.3.0 by @renovate[bot] in https://github.com/mailcow/mailcow-dockerized/pull/7272
[Postfix] update postscreen_access.cidr by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7269
[Postfix] update postscreen_access.cidr by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7311
Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7262
Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7263
Translations update from Weblate by @milkmaker in https://github.com/mailcow/mailcow-dockerized/pull/7302
ui, fail2ban fix german ban_list_info translation by @goodygh in https://github.com/mailcow/mailcow-dockerized/pull/7265
Refined wording for displaying of active settings on quarantine page. by @ralfbergs in https://github.com/mailcow/mailcow-dockerized/pull/7326

New Contributors

@ibobgunardi made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/7277
@Snafu made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/7275
@ralfbergs made their first contribution in https://github.com/mailcow/mailcow-dockerized/pull/7326

Full Changelog: https://github.com/mailcow/mailcow-dockerized/compare/2026-05c...2026-07

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track mailcow-dockerized

Get notified when new releases ship.

About mailcow-dockerized

mailcow: dockerized - + =

All releases →