Commit Graph

541 Commits

Author SHA1 Message Date
Maurus Decimus 2cb7b4e4b6 WebDAV fixes 2026-08-16 16:41:55 +02:00
Maurus Decimus 57e2f94254 ASN and GeoIP default location update 2026-08-16 15:23:14 +02:00
Maurus Decimus d104d7a3cf Fix Sieve: include statements fail to find system and user global scripts whose name contains uppercase characters 2026-08-16 11:23:37 +02:00
Maurus Decimus a48f89eb1d Fix Vapid: Normalize contact URI 2026-08-15 00:04:48 +02:00
Maurus Decimus 73d27006e1 HTTP: Shared reqwest clients 2026-08-14 18:24:55 +02:00
Maurus Decimus 520b1889ab Fix WebPush: Validate push URL and use application/octet-stream as Content-Type for encrypted payloads 2026-08-14 15:54:09 +02:00
Maurus Decimus d2d16a0186 Reporting: inboundReportMaxSize setting, which bounds the size of a decompressed inbound DMARC or TLS report 2026-08-12 16:37:16 +02:00
Maurus Decimus bfac527732 Fix JMAP: Setting uploadTtl to 1ms triggers panic 2026-08-11 08:50:24 +02:00
Maurus Decimus 5cc9e10b00 IMAP: Implement UIDBATCHES, UIDONLY and MESSAGELIMIT extensions 2026-08-10 19:33:18 +02:00
Maurus Decimus 36eca8c938 Fix Sharing: Accounts holding the impersonate permission never have their ACL grants collected, so shared items are never listed in JMAP sessions, CalDAV/CardDAV discovery or IMAP 2026-08-09 07:46:28 +02:00
Maurus Decimus 61df5a1857 Bump dependencies 2026-08-03 18:11:26 +02:00
Maurus Decimus 8565216198 Fix Windows: Listeners bound to the unspecified IPv6 address ([::]), including all defaults, refuse IPv4 connections such as 127.0.0.1, since IPV6_V6ONLY is enabled by default on Windows. 2026-08-02 16:48:57 +02:00
Maurus Decimus 920253ee4c Fix Logging: The systemd journal tracer omits the parent span fields 2026-08-02 16:42:04 +02:00
Maurus Decimus 8fdd639f62 Fix Recovery mode: Download WebUI if missing 2026-08-02 16:40:30 +02:00
Maurus Decimus c5541d6b32 Fix Calendar: iMIP and alarm notification messages embed the default logo using bare LF line endings, producing a single 4247 octet line that strict SMTP relays reject with line too long 2026-08-02 12:33:35 +02:00
Maurus Decimus 092c3217e4 JMAP Email Delivery Push Notifications 2026-07-29 18:41:21 +02:00
Maurus Decimus c8f46f3276 Fix Migration: Abort --import when the target already contains data in the key range being imported 2026-07-26 16:56:21 +02:00
Maurus Decimus 2114e45eb4 Fix JMAP: CalendarEvent/set does not refresh the updated property (iCalendar DTSTAMP) on create or update 2026-07-26 16:22:51 +02:00
Maurus Decimus 462390be89 Fix MTA: Panic when MTA-STS is disabled and a remote MTA fetched /.well-known/mta-sts.txt 2026-07-26 16:14:31 +02:00
Maurus Decimus 14feec6950 Fix Web Push: Valid VAPID keys are rejected when PEM-encoded with explicit EC parameters, in SEC1 (EC PRIVATE KEY) format, or with a leading byte-order mark 2026-07-26 12:39:48 +02:00
Maurus Decimus 57b913d54e Fix Cache: Account caches silently discard entries larger than a single quick-cache shard, causing constant database rebuilds 2026-07-26 12:09:27 +02:00
Maurus Decimus aa9f47cdb6 Fix Auth: Scoped credentials with SysApiKeyCreate or SysApiKeyUpdate permissions can regain its own accounts full rights 2026-07-23 15:49:30 +02:00
Maurus Decimus 425d034ae7 Use of Voluntary Application Server Identification (VAPID) in JMAP Web Push 2026-07-20 13:55:00 +02:00
Maurus Decimus 2553d8ee4c Fix Telemetry: Tasks are serialized to the wrong store when using separate stores for telemetry and data 2026-07-20 11:35:46 +02:00
Maurus Decimus 152db36247 Fix HTTP: Disable allowedEndpoints expression in recovery mode 2026-07-19 22:09:17 +02:00
Maurus Decimus 6076659e4d Fix Calendar: Scheduling invitations on a shared, non-owned calendar fail with MAIL FROM unauthorized 2026-07-19 12:19:50 +02:00
Maurus Decimus 764c2c1e1c v0.16.13 2026-07-12 19:18:29 +02:00
Maurus Decimus 602025464b Fix Sieve: add Received headers to auto-generated messages and detect loops 2026-07-12 16:03:53 +02:00
Maurus Decimus ca5971e9a1 Fix Misconfigured in-memory store cannot be recovered in recovery mode 2026-07-12 16:02:28 +02:00
Maurus Decimus 8d54d0b44c Fix Directory: Update local groups only when the external directory includes a group attribute 2026-07-12 15:34:04 +02:00
Maurus Decimus f7e82c3fbc Fix Branding: Custom logos for domains do not work 2026-07-12 15:04:26 +02:00
Maurus Decimus b17da02d3e Fix JMAP: Return RFC-3339-conformant UTCDate literals in capabilities: min 0001-01-01T00:00:00Z, max 9999-12-31T23:59:59Z 2026-07-12 14:58:31 +02:00
Maurus Decimus e21fc8bc9d Clippy fixes 2026-07-09 15:26:03 +02:00
Maurus Decimus e2d0505013 Disable DANE when there are no TCP resolvers configured 2026-07-09 09:48:05 +02:00
Maurus Decimus fb993f0cc1 Cluster: Broadcast MTA queue refresh events to all nodes 2026-07-05 12:05:46 +02:00
Maurus Decimus aad2cbcde1 Fix Network listener: Accept loop spins all CPU cores with no back-off when the process hits EMFILE (too many open files) 2026-07-05 12:02:26 +02:00
Maurus Decimus 5325b57dff Fix Calendar scheduling: Wrong RSVP base URL is used 2026-07-05 11:44:56 +02:00
Maurus Decimus eb42a8272d Fix Auto-ban: IP block expiration ignores per-reason ban durations 2026-07-05 10:26:18 +02:00
Maurus Decimus fb6f0c65a2 Fix Directory: Removing a user from all groups does not sync the changes correctly 2026-07-05 10:12:02 +02:00
Maurus Decimus 4b8ea03e7e Masked emails: Return UnknownRecipient only for disabled or expired masked emails 2026-07-05 09:56:35 +02:00
Maurus Decimus 00ca557340 Fix OIDC: Allow ports in redirect_uri for loopback addresses 2026-07-04 07:39:16 +02:00
Maurus Decimus 186d9feecb DKIM2 verification 2026-07-01 16:20:02 +02:00
Maurus Decimus e3c6f95bfd Bump to mail-auth 0.11 2026-06-30 11:53:55 +02:00
Maurus Decimus 0c8e567888 Fix OIDC: ECDSA private key support for SEC1 format. 2026-06-28 18:35:12 +02:00
Maurus Decimus 0eb08b9fb3 Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks 2026-06-25 19:24:10 +02:00
Maurus Decimus ab7d81e486 Encryption-at-rest: Support for AES-256-GCM and ChaCha20-Poly1305 for S/MIME (closes #161) 2026-06-25 09:53:07 +02:00
Maurus Decimus 14593e6f72 TLS: Update search index when file-backed certificates are refreshed 2026-06-23 17:58:04 +02:00
Maurus Decimus 46f03f7dad DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records 2026-06-23 11:09:43 +02:00
Maurus Decimus df164e07c8 DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records 2026-06-22 23:13:45 +02:00
Maurus Decimus 097e3ffe94 Fix Cache: Invalidate negative email caches when an account is created 2026-06-20 09:38:59 +02:00