Issues

• phpfpm image tag 8.2.35-1 contained PHP 8.2.34 (vulnerable) between ~15:42 and 17:25 UTC on 2026-10-21 — tag now corrected, please notify affected users

  mailcow/mailcow-dockerized#7538 · Filter by author unplugandplay opened on Oct 21, 2026

• [UPDATE NOW] PHP RCE Vulnerability (CVE-2026-109618 and CVE-2026-109619)

  enhancement
  mailcow/mailcow-dockerized#7533 · Filter by author cyberdust2k opened on Oct 21, 2026
  68

• Syncjob and delete source mails older of x days

  enhancement
  mailcow/mailcow-dockerized#7531 · Filter by author High-snoop opened on Oct 20, 2026

• [Bug]: passwd-verify.lua treats upstream HTTP errors as PASSWORD_MISMATCH causing false bans and host-wide port dropping

  mailcow/mailcow-dockerized#7528 · Filter by author JinHo-von-Choi opened on Oct 20, 2026

• Spam learning via "move to Junk" stores local fuzzy hash only half the time since 2026-07

  bug
  mailcow/mailcow-dockerized#7526 · Filter by author oidipos opened on Oct 19, 2026

• Update Dockefile phpfpm because alpine3.21 will be EOL 1st Nov 2026

  enhancement
  mailcow/mailcow-dockerized#7524 · Filter by author luckyluc74 opened on Oct 19, 2026
  4

• [Dovecot] passwd-verify.lua treats HTTP 5xx from the auth backend as a wrong password, so IMAP clients lose their credentials after every restart

  mailcow/mailcow-dockerized#7523 · Filter by author Freddy10035 opened on Oct 17, 2026

• netfilter 1.64: "mailcow isolation" DROP rule has no port match and blocks all inbound TCP; stale copies are never removed

  mailcow/mailcow-dockerized#7522 · Filter by author flynet70 opened on Oct 17, 2026

• MOO_FOOTER: missing Content-Transfer-Encoding header in delivered mail breaks DKIM (follow-up to #7480 / ff6329d0)

  mailcow/mailcow-dockerized#7518 · Filter by author phoboz01 opened on Oct 15, 2026
  1

• Rspamd history: Sync table filtering with pie chart legend toggles

  enhancement
  mailcow/mailcow-dockerized#7511 · Filter by author clk-66 opened on Oct 11, 2026

• Shared mailboxes: per-delegate INDEX= makes full-text search time out for delegates (FTS index of the owner is never used)

  mailcow/mailcow-dockerized#7510 · Filter by author madmanu47 opened on Oct 10, 2026

• Fail2Ban banning IPs because of unavailable LDAP server

  bug
  mailcow/mailcow-dockerized#7509 · Filter by author traeu opened on Oct 8, 2026

• Undefined variable warnings break JSON in WebAuthn/FIDO2 registration when registering the first credential

  mailcow/mailcow-dockerized#7508 · Filter by author ngojclee opened on Oct 8, 2026

• mailcow_password attribute from Keycloak is Base64-encoded and cannot be used for IMAP/SMTP authentication

  bug
  mailcow/mailcow-dockerized#7503 · Filter by author stefanstfnh opened on Oct 3, 2026

• Wrong IPv6 format when resolving Forwarding Hosts, WHITELISTED_FWD_HOST not applied

  bug
  mailcow/mailcow-dockerized#7501 · Filter by author 1cue-jrupp opened on Oct 2, 2026

• Quarantine, add "ban ip"

  enhancement
  mailcow/mailcow-dockerized#7499 · Filter by author ddeenniiss opened on Oct 2, 2026

• netfilter: a single non-UTF-8 log line crashes netfilter-mailcow, and the restart wipes all active and permanent bans

  bug
  mailcow/mailcow-dockerized#7498 · Filter by author zlaci42 opened on Oct 2, 2026
  1

• Feature request: per-mailbox webhook for inbound mail (next to Pushover)

  mailcow/mailcow-dockerized#7497 · Filter by author holgerquick opened on Oct 1, 2026

• Dovecot: include dovecot-gssapi to allow Kerberos (GSSAPI) authentication

  enhancement
  mailcow/mailcow-dockerized#7496 · Filter by author MAButz opened on Oct 1, 2026

• [Feature Request] ntfy or Gotify additionally to pushover for push notifications

  enhancement
  mailcow/mailcow-dockerized#7493 · Filter by author LokiLeiche opened on Sep 30, 2026

• netfilter restarts and clears all bans when F2B regex captures an IPv4 address with trailing colon

  bug
  mailcow/mailcow-dockerized#7490 · Filter by author rgngpp opened on Sep 28, 2026
  1

• Quarantine silently stores nothing when Q_EXCLUDE_DOMAINS is missing (in_array TypeError in pipe.php)

  mailcow/mailcow-dockerized#7489 · Filter by author mdb-ingenia opened on Sep 27, 2026

• Allow LDAP Authentication using samAccountName

  enhancement
  mailcow/mailcow-dockerized#7486 · Filter by author ShinyMcMartin opened on Sep 26, 2026
  1

• [Rspamd] SPAMHAUS_DQS_KEY: generated "DBL" block replaces stock DBL rule — DBL URL/email checks lost, client IPs queried against DBL

  bug
  mailcow/mailcow-dockerized#7485 · Filter by author waydenie opened on Sep 25, 2026
  2

• autodiscover-json.php ignores $autodiscover_config['autodiscoverType'], so new Outlook fails even when admins chose IMAP

  bug
  mailcow/mailcow-dockerized#7482 · Filter by author gunnie-agency opened on Sep 24, 2026