4397 Commits

Author SHA1 Message Date
bors-mailu[bot]
9c0762a3a7 Try #3043: 2023-11-06 12:46:28 +00:00
Florent Daigniere
9afe2938bb log.critical() where useful 2023-11-06 13:16:03 +01:00
ctrl-i
8d0fc90fe8 Update Dockerfile
(cherry picked from commit 3a3f6d0694)
2023-11-06 12:11:19 +00:00
ctrl-i
570c98ffc3 Upgrade to roundcube 1.6.5 (fix XSS)
(cherry picked from commit b74cd17bdd)
2023-11-06 12:11:19 +00:00
bors[bot]
acacaeb459 Merge #3011
3011: Backport of #2958 r=mergify[bot] a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

Backport of #2958

### Related issue(s)
- closes #2934
- closes #2919

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2.0.31
2023-10-28 12:57:32 +00:00
Dimitri Huisman
f89c43e634 Update faq.rst that anything but bugs are handled via github discussions 2023-10-28 14:42:09 +02:00
Dimitri Huisman
518957d45a Update issue template.
From now on the issues section is only used for bug reports that follow the issue template.
All other topics (including feature requests) are discussed on the github discussions section of the project.
2023-10-28 14:42:03 +02:00
Florent Daigniere
1e42228295 Give more time to clamav 2023-10-28 11:26:00 +02:00
Florent Daigniere
46b62248f9 Update core/admin/start.py
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
2023-10-28 11:24:13 +02:00
Florent Daigniere
0373d7b925 Long term solution for helm-charts 2023-10-28 09:40:09 +02:00
Florent Daigniere
ecb79dd100 Maybe fix CI 2023-10-28 09:40:01 +02:00
Dimitri Huisman
a84ef1d6aa Rspamd executable was moved to /usr/bin
(cherry picked from commit 096c0be4f7)
2023-10-28 09:40:01 +02:00
Dimitri Huisman
b275aa019d Fix extracting of snappymail archive not working.
(cherry picked from commit ee7bb53366)
2023-10-28 09:40:01 +02:00
Florent Daigniere
382369c054 Upgrade to alpine 3.18.4
(cherry picked from commit 85cf7e6a7f)
2023-10-28 09:40:01 +02:00
bors[bot]
aa25d716d6 Merge #2991
2991: Remove IMAP ID capability from nginx r=mergify[bot] a=gaudenz

The ID capability is not supported by nginx. Advertizing it leads to problems with client which send an ID command before authenticating. Before authentication commands are not forwarded to dovecot, but directly processed by nginx.

## What type of PR?

bugfix PR

## What does this PR do?

### Related issue(s)

Closes #2938

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [X] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Gaudenz Steinlin <gaudenz@durcheinandertal.ch>
2.0.30
2023-10-19 06:39:58 +00:00
Gaudenz Steinlin
4693c22776 Remove IMAP ID capability from nginx
The ID capability is not supported by nginx. Advertizing it leads to
problems with client which send an ID command before authenticating.
Before authentication commands are not forwarded to dovecot, but
directly processed by nginx.

One notable client which hit this issue is offlineimap.

Closes #2938
2023-10-18 23:01:05 +02:00
bors[bot]
19fcd9d17a Merge #2986
2986: Roundcube 1.6.4 (backport #2985) r=nextgens a=mergify[bot]

This is an automatic backport of pull request #2985 done by [Mergify](https://mergify.com).
Cherry-pick of 2a570d0f6f has failed:
```
On branch mergify/bp/2.0/pr-2985
Your branch is up to date with 'origin/2.0'.

You are currently cherry-picking commit 2a570d0f.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   core/admin/start.py
	new file:   towncrier/newsfragments/2985.misc
	modified:   webmails/Dockerfile

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   docs/faq.rst

```


To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

---


<details>
<summary>Mergify commands and options</summary>

<br />

More conditions and actions can be found in the [documentation](https://docs.mergify.com/).

You can also trigger Mergify actions by commenting on this pull request:

- ``@Mergifyio` refresh` will re-evaluate the rules
- ``@Mergifyio` rebase` will rebase this PR on its base branch
- ``@Mergifyio` update` will merge the base branch into this PR
- ``@Mergifyio` backport <destination>` will backport this PR on `<destination>` branch

Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can:

- look at your merge queues
- generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com
</details>

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2.0.29
2023-10-16 17:25:59 +00:00
Florent Daigniere
0b0c38a455 Update faq.rst 2023-10-16 18:46:39 +02:00
Florent Daigniere
f49bbf975b Update faq.rst 2023-10-16 18:45:20 +02:00
Florent Daigniere
74e705180c Roundcube 1.6.4
(cherry picked from commit 2a570d0f6f)

# Conflicts:
#	docs/faq.rst
2023-10-16 14:27:30 +00:00
bors[bot]
ac1a65927c Merge #2978
2978: Forbidden_file_extension.map could not be overridden. (backport #2975) r=mergify[bot] a=mergify[bot]

This is an automatic backport of pull request #2975 done by [Mergify](https://mergify.com).


---


<details>
<summary>Mergify commands and options</summary>

<br />

More conditions and actions can be found in the [documentation](https://docs.mergify.com/).

You can also trigger Mergify actions by commenting on this pull request:

- ``@Mergifyio` refresh` will re-evaluate the rules
- ``@Mergifyio` rebase` will rebase this PR on its base branch
- ``@Mergifyio` update` will merge the base branch into this PR
- ``@Mergifyio` backport <destination>` will backport this PR on `<destination>` branch

Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can:

- look at your merge queues
- generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com
</details>

Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2.0.28
2023-10-10 11:46:43 +00:00
Dimitri Huisman
c4e8842dfd Forbidden_file_extension.map could not be overridden.
(cherry picked from commit 16e9d152dd)
2023-10-10 11:10:09 +00:00
bors[bot]
2499a687f1 Merge #2967
2967: Hardened malloc was not disabled for oletools when an CPU with missing flags is used (backport #2961) r=mergify[bot] a=mergify[bot]

This is an automatic backport of pull request #2961 done by [Mergify](https://mergify.com).


---


<details>
<summary>Mergify commands and options</summary>

<br />

More conditions and actions can be found in the [documentation](https://docs.mergify.com/).

You can also trigger Mergify actions by commenting on this pull request:

- ``@Mergifyio` refresh` will re-evaluate the rules
- ``@Mergifyio` rebase` will rebase this PR on its base branch
- ``@Mergifyio` update` will merge the base branch into this PR
- ``@Mergifyio` backport <destination>` will backport this PR on `<destination>` branch

Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can:

- look at your merge queues
- generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com
</details>

Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2.0.27
2023-10-08 14:10:49 +00:00
Florent Daigniere
94ac5b7366 Upgrade snappymail to v2.29.1
(cherry picked from commit a6f57ca3d4)
2023-10-08 13:42:20 +00:00
Florent Daigniere
2657d0c8bd doh2
(cherry picked from commit 037a79206e)
2023-10-08 13:42:20 +00:00
Florent Daigniere
08088c6d10 Doh
(cherry picked from commit 12e8041ba6)
2023-10-08 13:42:19 +00:00
Florent Daigniere
affd759731 There is no reason not to enable it ourselves.
(cherry picked from commit 92e861d4fa)
2023-10-08 13:42:19 +00:00
Florent Daigniere
447158a095 Maybe fix olefy
(cherry picked from commit 9e1bf76a0c)
2023-10-08 13:42:19 +00:00
Florent Daigniere
b7b291a4ab change the logic as discussed
(cherry picked from commit dd58d51156)
2023-10-08 13:42:18 +00:00
Florent Daigniere
588c5cb274 clarify
(cherry picked from commit 3985d1d044)
2023-10-08 13:42:18 +00:00
Dimitri Huisman
1614bf4e8c Update core/base/libs/socrate/socrate/system.py
Only check for avx2 is required

Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
(cherry picked from commit 0379857ab5)
2023-10-08 13:42:18 +00:00
Dimitri Huisman
646c9d2cd9 Hardened malloc also requires AVX2 cpu flag
(cherry picked from commit e70db935ec)
2023-10-08 13:42:18 +00:00
Dimitri Huisman
8db03e37b6 Hardened malloc was not disabled for oletools when an CPU with missing flags is used
(cherry picked from commit 77c4829401)
2023-10-08 13:42:17 +00:00
bors[bot]
5f9610bb86 Merge #2960
2960: Manual backport of -- Update admin password for demo server #2953  r=mergify[bot] a=Diman0

## What type of PR?
documentation

## What does this PR do?
backport of #2953 which updates the demo documentation with the new password.

### Related issue(s)
n/a

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
2.0.26
2023-10-06 08:42:06 +00:00
bors[bot]
e0a1a9fbd8 Merge #2957
2957: Remove the version pinning on hardened malloc (backport #2956) r=mergify[bot] a=mergify[bot]

This is an automatic backport of pull request #2956 done by [Mergify](https://mergify.com).


---


<details>
<summary>Mergify commands and options</summary>

<br />

More conditions and actions can be found in the [documentation](https://docs.mergify.com/).

You can also trigger Mergify actions by commenting on this pull request:

- ``@Mergifyio` refresh` will re-evaluate the rules
- ``@Mergifyio` rebase` will rebase this PR on its base branch
- ``@Mergifyio` update` will merge the base branch into this PR
- ``@Mergifyio` backport <destination>` will backport this PR on `<destination>` branch

Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can:

- look at your merge queues
- generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com
</details>

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2.0.25
2023-10-05 17:42:47 +00:00
Florent Daigniere
882566c726 Remove the version pinning on hardened malloc
(cherry picked from commit 9ae6eafb24)
2023-10-05 04:44:31 +00:00
Dimitri Huisman
b8b87b8aa1 Add changelog message for updating demo server password 2023-09-28 07:07:57 +00:00
Dimitri Huisman
70bf716f1a Update admin password for demo server 2023-09-28 07:05:25 +00:00
bors[bot]
ee78092a64 Merge #2947
2947: Upgrade webmails (backport #2945) r=mergify[bot] a=mergify[bot]

This is an automatic backport of pull request #2945 done by [Mergify](https://mergify.com).


---


<details>
<summary>Mergify commands and options</summary>

<br />

More conditions and actions can be found in the [documentation](https://docs.mergify.com/).

You can also trigger Mergify actions by commenting on this pull request:

- ``@Mergifyio` refresh` will re-evaluate the rules
- ``@Mergifyio` rebase` will rebase this PR on its base branch
- ``@Mergifyio` update` will merge the base branch into this PR
- ``@Mergifyio` backport <destination>` will backport this PR on `<destination>` branch

Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can:

- look at your merge queues
- generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com
</details>

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2.0.24
2023-09-17 06:28:20 +00:00
Florent Daigniere
9f071832c3 Upgrade webmails
roundcube 1.6.3
rcmcarddav 5.1.0
snappymail 2.28.4

(cherry picked from commit 9402a3beec)
2023-09-16 16:45:24 +00:00
bors[bot]
03a6295f4a Merge #2930
2930: Maybe fix fetchmail when used with pop3 (backport #2929) r=mergify[bot] a=mergify[bot]

This is an automatic backport of pull request #2929 done by [Mergify](https://mergify.com).


---


<details>
<summary>Mergify commands and options</summary>

<br />

More conditions and actions can be found in the [documentation](https://docs.mergify.com/).

You can also trigger Mergify actions by commenting on this pull request:

- ``@Mergifyio` refresh` will re-evaluate the rules
- ``@Mergifyio` rebase` will rebase this PR on its base branch
- ``@Mergifyio` update` will merge the base branch into this PR
- ``@Mergifyio` backport <destination>` will backport this PR on `<destination>` branch

Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can:

- look at your merge queues
- generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com
</details>

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2.0.23
2023-08-31 13:30:55 +00:00
Florent Daigniere
fb8d3f8782 as per review
(cherry picked from commit 008ff03882)
2023-08-30 19:24:52 +00:00
Florent Daigniere
4154568b6b Maybe fix fetchmail when used with pop3
(cherry picked from commit 5402d00be0)
2023-08-30 19:24:52 +00:00
bors[bot]
971de06993 Merge #2927
2927: Remove the usage of capabilities, use port 8080 for admin (backport #2924) r=mergify[bot] a=mergify[bot]

This is an automatic backport of pull request #2924 done by [Mergify](https://mergify.com).
Cherry-pick of 562cd8c135 has failed:
```
On branch mergify/bp/2.0/pr-2924
Your branch is up to date with 'origin/2.0'.

You are currently cherry-picking commit 562cd8c1.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   core/admin/Dockerfile
	modified:   core/base/Dockerfile
	modified:   core/dovecot/start.py
	modified:   core/nginx/conf/nginx.conf
	modified:   core/postfix/start.py
	modified:   core/rspamd/conf/arc.conf
	modified:   core/rspamd/conf/dkim_signing.conf
	modified:   core/rspamd/conf/multimap.conf
	modified:   core/rspamd/conf/whitelist.conf
	modified:   core/rspamd/start.py
	modified:   docs/faq.rst
	modified:   optional/fetchmail/fetchmail.py
	new file:   towncrier/newsfragments/2906.bugfix

Unmerged paths:
  (use "git add/rm <file>..." as appropriate to mark resolution)
	both modified:   core/admin/start.py
	deleted by us:   core/nginx/dovecot/login.lua

```


Cherry-pick of b2a5a80e12 has failed:
```
On branch mergify/bp/2.0/pr-2924
Your branch is ahead of 'origin/2.0' by 1 commit.
  (use "git push" to publish your local commits)

You are currently cherry-picking commit b2a5a80e.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   core/dovecot/conf/dovecot.conf
	modified:   towncrier/newsfragments/2906.bugfix

Unmerged paths:
  (use "git add/rm <file>..." as appropriate to mark resolution)
	deleted by us:   core/nginx/dovecot/proxy.conf

```


To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

---


<details>
<summary>Mergify commands and options</summary>

<br />

More conditions and actions can be found in the [documentation](https://docs.mergify.com/).

You can also trigger Mergify actions by commenting on this pull request:

- ``@Mergifyio` refresh` will re-evaluate the rules
- ``@Mergifyio` rebase` will rebase this PR on its base branch
- ``@Mergifyio` update` will merge the base branch into this PR
- ``@Mergifyio` backport <destination>` will backport this PR on `<destination>` branch

Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can:

- look at your merge queues
- generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com
</details>

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2.0.22
2023-08-29 12:12:03 +00:00
Florent Daigniere
b5c528a7a2 This is master only 2023-08-29 09:12:30 +02:00
Florent Daigniere
d88ec1cb0d Ensure that dovecot doesn't bind v6 if not required 2023-08-29 08:56:38 +02:00
Florent Daigniere
d904941599 merge 2023-08-29 08:54:58 +02:00
Florent Daigniere
dbcba4b4c8 doh
(cherry picked from commit 8d4abe55ed)
2023-08-29 06:35:06 +00:00
Florent Daigniere
45a15c56e3 Ensure that dovecot doesn't bind v6 if not required
(cherry picked from commit b2a5a80e12)

# Conflicts:
#	core/nginx/dovecot/proxy.conf
2023-08-29 06:35:06 +00:00
Florent Daigniere
2bc9405caf Remove the usage of capabilities use port 8080
In the real world users can't get them to work...

(cherry picked from commit 562cd8c135)

# Conflicts:
#	core/admin/start.py
#	core/nginx/dovecot/login.lua
2023-08-29 06:35:05 +00:00