Mail-in-a-Box v0.26 Release Notes

Release Date: 2018-01-18 // over 6 years ago
  • ๐Ÿ”’ Security:

    • โšก๏ธ HTTPS, IMAP, and POP's TLS settings have been updated to Mozilla's intermediate cipher list recommendation. Some extremely old devices that use less secure TLS ciphers may no longer be able to connect to IMAP/POP.
    • โšก๏ธ Updated web HSTS header to use longer six month duration.

    Mail:

    • โž• Adding attachments in Roundcube broke after the last update for some users after rebooting because a temporary directory was deleted on reboot. The temporary directory is now moved from /tmp to /var so that it is persistent.
    • X-Spam-Score header is added to incoming mail.

    Control panel:

    • RSASHA256 is now used for DNSSEC for .lv domains.
    • ๐Ÿ“š Some documentation/links improvements.

    Installer:

    • ๐Ÿ“ฆ We now run apt-get autoremove at the start of setup to clear out old packages, especially old kernels that take up a lot of space. On the first run, this step may take a long time.
    • We now fetch Z-Push from its tagged git repository, fixing an installation problem.
    • ๐Ÿ“ฆ Some old PHP5 packages are removed from setup, fixing an installation bug where Apache would get installed.
    • ๐Ÿ“ฆ Python 3 packages for the control panel are now installed using a virtualenv to prevent installation errors due to conflicts in the cryptography/openssl packages between OS-installed packages and pip-installed packages.