Tämä on vanhempi versio. Uusin versio on 1.33.0. Mailpit 1.33.0 · Julkaistu:
Asennustiedostot 1.31.1
| Arkkitehtuuri | Tyyppi | Laajuus | Tiedostokoko | Lataus | SHA256 |
|---|---|---|---|---|---|
| 64-bittinen | ZIP → Portable | — | — | github.com | VirusTotal |
| ARM64 | ZIP → Portable | — | — | github.com | VirusTotal |
Linkki ja SHA256-tiiviste ovat peräisin Windows Package Managerin yhteisön manifestista. Vertaa ladatun tiedoston tiivistettä ennen kuin suoritat sen.
Muutosloki
This release adds an optional feature to mitigate DNS rebinding attacks ([read more](https://mailpit.axllent.org/docs/configuration/http/#dns-rebinding-mitigation)), as well as other hardening fixes.
### Security
• Add `--allowed-hosts` flag to mitigate DNS rebinding against the API
### Chore
• Update Go dependencies
• Update node dependencies
• Update Github Actions
### Fix
• Block Azure WireServer, IPv4-translated prefix and additional reserved ranges in SSRF deny-list
• Pass line-boundary state to drainData to prevent SMTP desync
• Allow SP inside quoted local-parts per RFC 5321 ([#731](https://github.com/axllent/mailpit/issues/731))
• Bound header-rewrite scanner to header block and fail closed on missing header
• Prevent quadratic CPU in proxy CSS rewriter via O(1) asset dedup
