All Versions
62
Latest Version
Avg Release Cycle
66 days
Latest Release
1481 days ago

Changelog History
Page 3

  • v0.26 Changes

    January 18, 2018

    🔒 Security:

    • ⚡️ HTTPS, IMAP, and POP's TLS settings have been updated to Mozilla's intermediate cipher list recommendation. Some extremely old devices that use less secure TLS ciphers may no longer be able to connect to IMAP/POP.
    • ⚡️ Updated web HSTS header to use longer six month duration.

    Mail:

    • ➕ Adding attachments in Roundcube broke after the last update for some users after rebooting because a temporary directory was deleted on reboot. The temporary directory is now moved from /tmp to /var so that it is persistent.
    • X-Spam-Score header is added to incoming mail.

    Control panel:

    • RSASHA256 is now used for DNSSEC for .lv domains.
    • 📚 Some documentation/links improvements.

    Installer:

    • 📦 We now run apt-get autoremove at the start of setup to clear out old packages, especially old kernels that take up a lot of space. On the first run, this step may take a long time.
    • We now fetch Z-Push from its tagged git repository, fixing an installation problem.
    • 📦 Some old PHP5 packages are removed from setup, fixing an installation bug where Apache would get installed.
    • 📦 Python 3 packages for the control panel are now installed using a virtualenv to prevent installation errors due to conflicts in the cryptography/openssl packages between OS-installed packages and pip-installed packages.

  • v0.26.c Changes

    February 13, 2018

    Setup:

    • ⬆️ Upgrades from v0.21c (February 1, 2017) or earlier were broken because the intermediate versions of ownCloud used in setup were no longer available from ownCloud.
    • Some download errors had no output --- there is more output on error now.

    Control Panel:

    • ⚡️ The background service for the control panel was not restarting on updates, leaving the old version running. This was broken in v0.26 and is now fixed.
    • Installing your own TLS/SSL certificate had been broken since v0.24 because the new version of openssl became stricter about CSR generation parameters.
    • 🛠 Fixed password length help text.

    Contacts/Calendar:

    • ⬆️ Upgraded Nextcloud from 12.0.3 to 12.0.5.

  • v0.26.b Changes

    January 25, 2018
    • 🛠 Fix new installations which broke at the step of asking for the user's desired email address, which was broken by v0.26's changes related to the control panel.
    • 🛠 Fix the provisioning of TLS certificates by pinning a Python package we rely on (acme) to an earlier version because our code isn't yet compatible with its current version.
    • ⬇️ Reduce munin's log_level from debug to warning to prevent massive log files.

  • v0.25 Changes

    November 15, 2017

    ⚡️ This update is a security update addressing CVE-2017-16651, a vulnerability in Roundcube webmail that allows logged-in users to access files on the local filesystem.

    Mail:

    • ⚡️ Update to Roundcube 1.3.3.

    Control Panel:

    • 👍 Allow custom DNS records to be set for DNS wildcard subdomains (i.e. *).

  • v0.24 Changes

    October 03, 2017

    System:

    • Install PHP7 via a PPA. Switch to the on-demand process manager.

    Mail:

    • 🚀 Updated to Roundcube 1.3.1, but unfortunately dropping the Vacation plugin because it has not been supported by its author and is not compatible with Roundcube 1.3, and updated the persistent login plugin.
    • ⚡️ Updated to Z-Push 2.3.8.
    • 👍 Dovecot now uses stronger 2048 bit DH params for better forward secrecy.

    Nextcloud:

    • ⚡️ Nextcloud updated to 12.0.3, using PHP7.

    Control Panel:

    • Nameserver (NS) records can now be set on custom domains.
    • 🛠 Fix an erroneous status check error due to IPv6 address formatting.
    • Aliases for administrative addresses can now be set to send mail to +tag administrative addresses.

  • v0.23 Changes

    May 30, 2017

    Mail:

    • 0️⃣ The default theme for Roundcube was changed to the nicer Larry theme.
    • 👍 Exchange/ActiveSync support has been replaced with z-push 2.3.6 from z-push.org (rather than z-push-contrib).

    ownCloud (now Nextcloud):

    • ownCloud is replaced with Nextcloud 10.0.5.
    • 🛠 Fixed an error in Owncloud/Nextcloud setup not updating domain when changing hostname.

    Control Panel/Management:

    • 🛠 Fix an error in the control panel showing rsync backup status.
    • 🛠 Fix an error in the control panel related to IPv6 addresses.
    • TLS certificates for internationalized domain names can now be provisioned from Let's Encrypt automatically.
    • 🍱 Third-party assets used in the control panel (jQuery/Bootstrap) are now downloaded during setup and served from the box rather than from a CDN.

    DNS:

    • ➕ Add support for custom CAA records.

  • v0.23.a Changes

    May 31, 2017

    🍱 Corrects a problem in the new way third-party assets are downloaded during setup for the control panel, since v0.23.

  • v0.22 Changes

    April 02, 2017

    Mail:

    • 🔌 The CardDAV plugin has been added to Roundcube so that your ownCloud contacts are available in webmail.
    • ⚡️ Upgraded to Roundcube 1.2.4 and updated the persistent login plugin.
    • 👍 Allow larger messages to be checked by SpamAssassin.
    • Dovecot's vsz memory limit has been increased proportional to system memory.
    • 🆕 Newly set user passwords must be at least eight characters.

    ownCloud:

    • ⬆️ Upgraded to ownCloud 9.1.4.

    Control Panel/Management:

    • 🛠 The status checks page crashed when the mailinabox.email website was down - that's fixed.
    • Made nightly re-provisioning of TLS certificates less noisy.
    • 🛠 Fixed bugs in rsync backup method and in the list of recent backups.
    • 🛠 Fixed incorrect status checks errors about IPv6 addresses.
    • 🛠 Fixed incorrect status checks errors for secondary nameservers if round-robin custom A records are set.
    • The management mail_log.py tool has been rewritten.

    DNS:

    • ➕ Added support for DSA, ED25519, and custom SSHFP records.

    System:

    • The SSH fail2ban jail was not activated.

    Installation:

    • At the end of installation, the SHA256 -- rather than SHA1 -- hash of the system's TLS certificate is shown.

  • v0.21 Changes

    November 30, 2016

    ⚡️ This version updates ownCloud, which may include security fixes, and makes some other smaller improvements.

    Mail:

    • 🛠 Header privacy filters were improperly running on the contents of forwarded email --- that's fixed.
    • We have another go at fixing a long-standing issue with training the spam filter (because of a file permissions issue).
    • Exchange/ActiveSync will now use your display name set in Roundcube in the From: line of outgoing email.

    ownCloud:

    • ⚡️ Updated ownCloud to version 9.1.1.

    Control panel:

    • Backups can now be made using rsync-over-ssh!
    • 👍 Status checks failed if the system doesn't support iptables or doesn't have ufw installed.
    • ➕ Added support for SSHFP records when sshd listens on non-standard ports.
    • 🚚 Recommendations for TLS certificate providers were removed now that everyone mostly uses Let's Encrypt.

    System:

    • ⬆️ Ubuntu's "Upgrade to 16.04" notice is suppressed since you should not do that.
    • ⚠ Lowered memory requirements to 512MB, display a warning if system memory is below 768MB.

  • v0.21.c Changes

    February 01, 2017

    ⚡️ Installations and upgrades started failing about 10 days ago with the error "ImportError: No module named 'packaging'" after an upstream package (Python's setuptools) was updated by its maintainers. The updated package conflicted with Ubuntu 14.04's version of another package (Python's pip). This update upgrades both packages to remove the conflict.

    🚀 If you already encountered the error during installation or upgrade of Mail-in-a-Box, this update may not correct the problem on your existing system. See https://discourse.mailinabox.email/t/v0-21c-release-fixes-python-package-installation-issue/1881 for help if the problem persists after upgrading to this version of Mail-in-a-Box.