1
0
mirror of https://github.com/Mailu/Mailu.git synced 2025-08-10 22:31:47 +02:00
Commit Graph

166 Commits

Author SHA1 Message Date
Florent Daigniere
188c1f08eb doh
(cherry picked from commit a0558bf5c0)
2025-01-01 01:36:25 +00:00
Florent Daigniere
ea8026ba00 Add the mariadb connector as per 3449
(cherry picked from commit adc8ef9aba)
2025-01-01 01:36:25 +00:00
bors-mailu[bot]
cfae470cbb Merge #3623
3623: alpine 3.20.3 (backport #3622) r=mergify[bot] a=mergify[bot]

## What type of PR?

bug-fix

## What does this PR do?

Upgrade from alpine 3.20.0 to alpine 3.20.3 ; We need a fix for [CVE-2024-5535](https://security.alpinelinux.org/vuln/CVE-2024-5535)

### Related issue(s)


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.
<hr>This is an automatic backport of pull request #3622 done by [Mergify](https://mergify.com).

Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2024-10-21 21:26:20 +00:00
Florent Daigniere
5b2456cc8e alpine 3.20.3
(cherry picked from commit 152b45a0e9)
2024-10-21 10:33:17 +00:00
Alexander Graf
9dae649f31 Flush buffer on flush() and flush explicitely after subprocess has ended
(cherry picked from commit f16467b984)
2024-10-17 15:36:22 +00:00
Alexander Graf
5e8fdd4c9e Filter logs line based and in binary mode without decoding utf-8
(cherry picked from commit 4a49234afa)
2024-10-17 15:36:21 +00:00
Florent Daigniere
0bdb9e1cea Apply suggestions from code review
Co-authored-by: Alexander Graf <ghostwheel42@users.noreply.github.com>
(cherry picked from commit cdf8ee8820)
2024-09-12 15:34:09 +00:00
Florent Daigniere
80427fb77c Fix #3450
(cherry picked from commit a875d7fe6a)
2024-09-12 15:34:09 +00:00
Florent Daigniere
0e9721b7f9 Untested code that may fix the following:
Exception in thread Thread-2 (forward_text_lines):
Traceback (most recent call last):
  File "/usr/lib/python3.12/threading.py", line 1073, in _bootstrap_inner
    self.run()  File "/usr/lib/python3.12/threading.py", line 1010, in run
    self._target(*self._args, **self._kwargs)
  File "/app/venv/lib/python3.12/site-packages/socrate/system.py", line 155, in forward_text_lines
    current_line = src.readline()
                   ^^^^^^^^^^^^^^
  File "<frozen codecs>", line 322, in decode
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xa8 in position 166: invalid start byte

This was reported in #3398

(cherry picked from commit 61812ac32a)
2024-09-07 18:45:50 +00:00
Florent Daigniere
6fc97ee2cb doh2
(cherry picked from commit 1917bf7ee4)
2024-08-11 16:43:16 +00:00
Florent Daigniere
7556df2fa7 Fix CI
(cherry picked from commit 616376eb5a)
2024-08-11 16:43:16 +00:00
Florent Daigniere
b36018e0c1 Handle the case where PROXY_PROTOCOL_25 is set
(cherry picked from commit 0ff18c6079)
2024-08-11 16:43:16 +00:00
Florent Daigniere
2d2e9c4d8a another
(cherry picked from commit c0d0dcf713)
2024-06-19 17:00:57 +00:00
Florent Daigniere
6dbceeeefa doh 2024-05-27 15:43:50 +02:00
Florent Daigniere
eddcedf5cf Alpine 3.20 2024-05-27 15:34:53 +02:00
Florent Daigniere
a55a9d89ba Update all dependencies 2024-05-20 11:08:03 +02:00
Florent Daigniere
5b5d526d79 Fix CVE-2024-1135 2024-05-08 16:10:10 +02:00
Dimitri Huisman
b6743019e8 Address CVE-2024-23829 (CVE for aiohttp) 2024-03-18 14:28:53 +00:00
Florent Daigniere
851c4f8403 Alpine 3.19.1 2024-03-10 16:44:18 +01:00
Florent Daigniere
494147eedf Need newer cryptography 2024-03-10 16:17:49 +01:00
Alexander Graf
a1e395c581 Update dependencies and re-enable flask toolbar 2024-01-21 18:42:51 +01:00
Florent Daigniere
0e522fceb7 Upgrade alpine, node, PHP and snappymail 2023-12-20 14:08:49 +01:00
Florent Daigniere
ffe823d6bc Upgrade to WTForms==3.1.1 2023-11-14 14:47:16 +01:00
Florent Daigniere
38b6d360d3 Update system.py
promote to log.critical()
2023-11-09 10:26:04 +01:00
Florent Daigniere
e75834f746 Update system.py
143 is the standard following SIGTERM
2023-11-09 10:20:42 +01:00
Florent Daigniere
1c26368b37 Add a sigterm handler to make docker go faster 2023-11-07 16:55:24 +01:00
Dimitri Huisman
5bee3c031b Update all dependencies.
All changes were recreated due to deprecated functionalities introduced
by updating the dependencies
2023-10-31 19:55:58 +00:00
Dimitri Huisman
60b9ff0090 Fixed log filter not filtering out log messages for dovecot/nginx/postfix.
Fixed postfix not logging to standard out.
Fixed not all containers logging to journald.
Removed POSTFIX_LOG_FILE functionality. Added documentation on how to achieve the same (log to file) via journald & rsyslogd (see new FAQ entry 'How can I view and export the logs of a Mailu container?').
2023-10-27 14:10:13 +00:00
Florent Daigniere
054fde8ac1 Tika v1 2023-10-11 15:49:04 +02:00
bors[bot]
26e1077bd8 Merge #2950
2950: Upgrade snuffleupagus r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Upgrade snuffleupagus

### Related issue(s)

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-10-09 07:24:09 +00:00
bors[bot]
04d69141c3 Merge #2961
2961: Hardened malloc was not disabled for oletools when an CPU with missing flags is used r=Diman0 a=Diman0

## What type of PR?
bug fix

## What does this PR do?
Updates oletools to also disable hardened malloc when used CPU misses flags

### Related issue(s)
- closes #2959 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [n/a ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Dimitri Huisman <diman@huisman.xyz>
Co-authored-by: Dimitri Huisman <52963853+Diman0@users.noreply.github.com>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-10-08 13:14:28 +00:00
Florent Daigniere
92e861d4fa There is no reason not to enable it ourselves. 2023-10-07 10:09:04 +02:00
Florent Daigniere
dd58d51156 change the logic as discussed 2023-10-07 09:45:59 +02:00
Florent Daigniere
3985d1d044 clarify 2023-10-06 14:00:58 +02:00
Dimitri Huisman
0379857ab5 Update core/base/libs/socrate/socrate/system.py
Only check for avx2 is required

Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2023-10-06 13:51:05 +02:00
Dimitri Huisman
e70db935ec Hardened malloc also requires AVX2 cpu flag 2023-10-06 10:27:31 +00:00
Florent Daigniere
85cf7e6a7f Upgrade to alpine 3.18.4 2023-10-05 18:55:33 +02:00
Florent Daigniere
9ae6eafb24 Remove the version pinning on hardened malloc 2023-10-04 17:13:56 +02:00
Florent Daigniere
83fd29c597 Upgrade snuffleupagus 2023-09-20 18:00:36 +02:00
bors[bot]
585549ce92 Merge #2924
2924: Remove the usage of capabilities, use port 8080 for admin r=nextgens a=nextgens

## What type of PR?

bug-fix

## What does this PR do?

In the real world users can't get them to work... I wonder if they use patched-up kernels or if xattrs are lost somehow... in any case, we can do without capabilities so let's do that.

Ensure that dovecot doesn't attempt to bind a v6 socket if SUBNET6 is not configured

Also, document that systemd-resolve may cause trouble with DNSSEC.

### Related issue(s)
- closes #2906
- closes #2913

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-08-29 06:19:42 +00:00
Florent Daigniere
bbed508e8b As per review 2023-08-28 11:49:42 +02:00
Florent Daigniere
562cd8c135 Remove the usage of capabilities use port 8080
In the real world users can't get them to work...
2023-08-28 11:34:51 +02:00
Florent Daigniere
367fd247cb Move the cleanup to socrate 2023-08-25 14:38:14 +02:00
Alexander Graf
2d9b348eb0 Update python deps to fix CVEs and build 2023-08-06 17:03:51 +02:00
Florent Daigniere
21982478fb warning is enough 2023-04-20 18:01:16 +02:00
Florent Daigniere
281800d946 Try to do the same for ARM64, log a message if we do 2023-04-20 17:59:14 +02:00
Florent Daigniere
ede331f657 LD_PRELOAD may not be in ENV 2023-04-20 17:46:27 +02:00
Florent Daigniere
b6ed4fd83e fix #2764 2023-04-14 10:09:51 +02:00
Florent Daigniere
7b08232049 Sanitize logs as appropriate 2023-04-13 14:46:12 +02:00
Dimitri Huisman
5f14c8ced1 Fix unmet dependency 2023-04-04 12:51:59 +00:00