Mailcow 2023 — Major Security Update and New Features

Mailcow releases a significant security update addressing multiple vulnerabilities including an authentication bypass in the admin panel. All Mailcow administrators must update immediately.

Vulnerabilities Fixed

• Authentication bypass in admin panel (Critical)
• SSRF vulnerability in domain validation (High)
• XSS in mailbox management interface (Medium)
• Rate limiting bypass on API endpoints (Medium)

How to Update Mailcow

cd /opt/mailcow-dockerized
sudo git pull origin master
sudo ./update.sh

New Features in 2023 Releases

• Improved Rspamd dashboard with better spam statistics
• SOGo 5.9 webmail with improved mobile interface
• Netfilter improvements for better IP blocking
• Better Let's Encrypt certificate handling
• Improved backup and restore functionality

Check Your Version

cd /opt/mailcow-dockerized
sudo git log --oneline -5

Conclusion

Mail server security requires regular updates. Our team manages Mailcow installations with automatic security updates and monitoring.