Skip to content

Modoboa

Communication & Email

Mail hosting and management platform including a modern and simplified web user interface.

Python Latest 2.9.0 · 5d ago Security brief →

Features

  • Administration panel
  • Reputation protection with DNSBL checks and DMARC reporting
  • Webmail interface
  • Calendar and address book management
  • Per‑user Sieve filters and autoreply messages

Recent releases

View all 7 releases →
Upgrade now
2.9.0 Security relevant
Auth

IDOR fix

2.8.2 Bug fix

Prevent login issues in certain scenarios.

Full changelog

What's Changed

  • Bump vite from 6.4.1 to 6.4.2 in /frontend by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/4000
  • ci(mergify): upgrade configuration to current format by @mergify[bot] in https://github.com/modoboa/modoboa/pull/3999
  • Sieve filters editor fixes by @tonioo in https://github.com/modoboa/modoboa/pull/4001
  • Prevent login issue in some cases. by @tonioo in https://github.com/modoboa/modoboa/pull/4002
  • Bump django from 5.2.12 to 5.2.13 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/4003

Full Changelog: https://github.com/modoboa/modoboa/compare/2.8.1...2.8.2

2.8.1 Security relevant
Security fixes
  • Various security fixes applied (no CVE IDs provided)
Notable features
  • Use domain from headers if not available within an auth result
Full changelog

What's Changed

  • Use domain from headers if not available within an auth result. by @tonioo in https://github.com/modoboa/modoboa/pull/3853
  • Various security fixes by @tonioo in https://github.com/modoboa/modoboa/pull/3997

Full Changelog: https://github.com/modoboa/modoboa/compare/2.8.0...2.8.1

Thanks to @zwique for his contribution.

2.8.0 Breaking risk
Security fixes
  • Fixed several security issues.
Full changelog

What's Changed

  • fix: prevent http 401 on API by @kryskool in https://github.com/modoboa/modoboa/pull/3942
  • Updates for file frontend/src/locale/en/app.po in ja_JP by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3946
  • Fixed several security issues. by @tonioo in https://github.com/modoboa/modoboa/pull/3949
  • fix: rewrite port detection value by @kryskool in https://github.com/modoboa/modoboa/pull/3948
  • docs: add self signed certificate tips by @kryskool in https://github.com/modoboa/modoboa/pull/3954
  • Pin chardet version in pyproject.toml by @kryskool in https://github.com/modoboa/modoboa/pull/3958
  • Bump django from 5.2.11 to 5.2.12 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3957
  • chore(deps): update dependancies by @kryskool in https://github.com/modoboa/modoboa/pull/3952
  • Bump immutable from 5.1.4 to 5.1.5 in /frontend by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3960
  • Prevent form closing when clicking on Modify link. by @tonioo in https://github.com/modoboa/modoboa/pull/3966
  • Replaced chardet by chardet_normalizer, by @tonioo in https://github.com/modoboa/modoboa/pull/3967
  • refactor: remove six module by @kryskool in https://github.com/modoboa/modoboa/pull/3969
  • Compatibility with caldav 3.x by @tonioo in https://github.com/modoboa/modoboa/pull/3968
  • Removed useless chapter. by @tonioo in https://github.com/modoboa/modoboa/pull/3971
  • feat: add server on openapi schema by @kryskool in https://github.com/modoboa/modoboa/pull/3972
  • Make sure domain resources can be viewed/updated from the frontend by @tonioo in https://github.com/modoboa/modoboa/pull/3978
  • Make webmail menu resizable. by @tonioo in https://github.com/modoboa/modoboa/pull/3981
  • Bump caldav from 3.0.1 to 3.0.2 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3976
  • Added webmail options to ask for delivery information. by @tonioo in https://github.com/modoboa/modoboa/pull/3982
  • Migration to vuetify 4 by @tonioo in https://github.com/modoboa/modoboa/pull/3987
  • Update djangorestframework requirement from <3.17,>=3.16 to >=3.16,<3.18 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3984
  • Bump caldav from 3.0.2 to 3.1.0 by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3986
  • Bump flatted from 3.3.3 to 3.4.2 in /frontend by @dependabot[bot] in https://github.com/modoboa/modoboa/pull/3988
  • Send null values instead of empty strings for integer fields. by @tonioo in https://github.com/modoboa/modoboa/pull/3990
  • fix FutureWarning in python3.13 by @DeanHawking in https://github.com/modoboa/modoboa/pull/3980
  • Updates for file modoboa/locale/en/LC_MESSAGES/django.po in fr by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3991
  • Updates for file frontend/src/locale/en/app.po in fr by @transifex-integration[bot] in https://github.com/modoboa/modoboa/pull/3992
  • Initialize counter if key does not exist by @jwinterm in https://github.com/modoboa/modoboa/pull/3955

New Contributors

  • @DeanHawking made their first contribution in https://github.com/modoboa/modoboa/pull/3980
  • @jwinterm made their first contribution in https://github.com/modoboa/modoboa/pull/3955

Full Changelog: https://github.com/modoboa/modoboa/compare/2.7.2...2.8.0

2.7.2 Bug fix

Replies no longer load messages from the Drafts folder.

Full changelog

What's Changed

  • Do not load message from Drafts folder when replying. by @tonioo in https://github.com/modoboa/modoboa/pull/3940

Full Changelog: https://github.com/modoboa/modoboa/compare/2.7.1...2.7.2

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
3,498
Forks
465
Languages
Python Vue JavaScript

Community & Support

Open source alternatives

Beta — feedback welcome: [email protected]