mailcow news

Update 2026-07a is here and fixes a non-critical NGINX CVE for mailcow, along with several mailcow-related security issues. CVE identifiers will be released next week. https://mailcow.email/posts/2026/release-2026-07/

🏖️🐮 Mooly 2026 | Postfix 3.10.12, Rspamd 4.1.0 & Nginx 1.30.3 2026-07 (Release: 13th July 2026) Moohoo everyone! https://mailcow.email/posts/2026/release-2026-07/

Update 2026-05c is here and updates Nginx to version 1.30.2 and Unbound to version 1.25.1. https://mailcow.email/posts/2026/release-2026-05/#2026-05c-release-26th-may-2026

Update 2026-05b is here and bumps Nginx to version 1.30.1 https://mailcow.email/posts/2026/release-2026-05/

https://mailcow.email/posts/2026/release-2026-05/

🐝🐮 Mooay 2026 | Just another security update 2026-05 (Release: 12th May 2026) Moohoo everyone! https://mailcow.email/posts/2026/release-2026-05/

👋 DerLinkman leaves the mailcow team Moohoo everyone. Today I want to officially announce my departure from The Infrastructure Company GmbH and thus from the mailcow team as well. Effective May 1st, 2026, I will no longer be part of the team. The past years have been a formative time for me both professionally and personally. Together with the community, contributors, and users, we were able to continuously develop and stabilize mailcow into the solution it is today. The countless deployments, discussions, issues, pull requests, and critical feedback have made the project even stronger. https://mailcow.email/posts/2026/derlinkman-leave/

https://mailcow.email/posts/2026/release-2026-03/ This important update addresses several security-related issues. We strongly recommend updating to this version.

🍀🐮 Moorch 2026 | forced 2FA, DNS-01, SOGo & Rspamd Updates 2026-03 (Release: 10th March 2026) Moohoo everyone! https://mailcow.email/posts/2026/release-2026-03/

🐄🛡️ January 2026 Update | Limited EAS/DAV Access and Restricted Alias Sending 2026-01 (Release: 29th January 2026) Moohoo everyone! https://mailcow.email/posts/2026/release-2026-01/

Release 2025-12a (Revision A) is here: https://github.com/mailcow/mailcow-dockerized/releases/tag/2025-12a It contains some smaller fixes brought with 2025-12 (e.g. improved backup script handling regarding docker image pulls) and some more.

🎄🐮 Moocember 2025 | Just another bugfix update 2025-12 (Release: 9th December 2025) Moohoo everyone! https://mailcow.email/posts/2025/release-2025-12/

Important Notice When Upgrading to Docker Compose 5.x If your OS upgrade installs Docker Compose 5.x before you update mailcow, be aware of a current limitation. While mailcow itself runs fine with Compose v5, the update script is not compatible, unless it has been manually refreshed once. This issue is caused by a soft-lock in update.sh, which fetches the module scripts after checking the Docker Compose version. The soft-lock has been fixed but will not applied automatically for users running Docker Compose Versions 5.X.X What to do: 1. Check your Docker Compose version: Run docker compose version or docker-compose version. If the output shows 5.x.x, you are affected. 2. Go to your mailcow installation directory (default: /opt/mailcow-dockerized) and run: git fetch 3. Still in the same directory, run: git checkout origin/master update.sh This pulls the patched update.sh. And if you are not (yet) affected, just perform a regular update through ./update.sh now, so you get the fix for future updates of compose ;)

🎃🐄 Mooctober 2025 Update | Rspamd 3.13.2 and Redis Security Update 2025-10 (Release: 15th October 2025) Moohoo everyone! https://mailcow.email/posts/2025/release-2025-10/

Release 2025-09c is here https://mailcow.email/posts/2025/release-2025-09/

Release 2025-09b is here. This update fixes startup issues with the NGINX container when IPv6 is disabled. https://mailcow.email/posts/2025/release-2025-09/

Release 2025-09a is here. This update fixes crashes with the create_cold_standby script, prevents the calls from update/generate-config scripts from a folder which is not mailcow root. It also improves the detection and the handling of the newly introduced ipv6 controller and is now correctly recognizing docker version higher 28 (less needed daemon.json settings). https://github.com/mailcow/mailcow-dockerized/releases/tag/2025-09a

🍂🐄 Mootember Update 2025 | MTA-STS Support, SOGo 5.12.3, Rspamd 3.12.1, and More 2025-09 (Release: 10th September 2025) Moohoo everyone! https://mailcow.email/posts/2025/release-2025-09/

mailcow now also validates MTA-STS when sending to domains that support it. DANE remains the preferred method if the destination domain is compatible.