Tags

v7.5.0

v7.4.5

v7.4.4

v7.4.3

v7.4.2

v7.4.1

v7.4.0

- Do not require SSL/TLS/STARTTLS for submission-relay and submission services; those are the downstream connections anyway which may be protected by the underlying infrastructure (e.g. istio), so enforcing this is not necessary; the SSL for incoming connections from the Internet is still required

v7.3.0

- Enable the `editheader` sieve extension

v7.2.0

- Introduce the "probe" script for K8s probes

v7.1.0

- Bump to Dovecot v2.3.21

v7.0.0

- Allow to define the full endpoint URL for the auth-policy server
- Breaking change: the ENV variable renamed from `DOVECOT_AUTH_POLICY_HOST` to `DOVECOT_AUTH_POLICY_ENDPOINT`

v6.3.1

- Resolve various security vulnerabilities

v6.3.0

- Switch to FTS-Flatcurve as the search plugin
- Build own Dovecot in order to meet Flatcurve's requirements (enable stemmer and textcat)

v6.2.3

- BUGFIX: cron did not log to stdout properly

v6.2.2

- Fix various CVEs in OpenSSL prior to v3.0.7

v6.2.1

- Upgrade to Dovecot v2.3.20 (Pigeon v0.5.20)

v6.2.0

- Flagged virtual folder containing all flagged messages (except for messages from Trash)
- Option not to fix the permissions on the /var/mail folder to shorten startup time

v6.1.2

- BUGFIX: `login_trusted_networks` should always contain "127.0.0.1" as the Dovecot local proxy needs to present the client IPs
- Resolves security vulnerability CVE-2022-40674

v6.1.1

- Resolves security vulnerabilities CVE-2018-25032, CVE-2022-2097, CVE-2022-3209, CVE-2022-29458, CVE-2022-30065, CVE-2022-32081, CVE-2022-32082, CVE-2022-32084, CVE-2022-32089, CVE-2022-32091, CVE-2022-37434

v6.1.0

- Change the default VSZ_LIMIT to 1 GB to avoid OOM for certain IMAP mailboxes