We will update the following packages to the latest version.

• ops-nginx-modsecurity/unknown 1.20.2-144325 amd64 [upgradable from: 1.20.2-123834]

Start maintenance window: 02/11/2026 23:00
Stop maintenance window: 03/11/2026 02:00

We will update Nextcloud to version 35.0.2.

Reference: #935

Start maintenance window: 02/11/2026 23:00
Stop maintenance window: 03/11/2026 02:00

We will update soft- and firmware throughout our cluster. During the update, a higher disk i/o latency is to be expected.

Start maintenance window: 02/11/2026 23:00
Stop maintenance window: 03/11/2026 06:00

We will update the following packages to the latest version.

• imagemagick-7-common/stable-security 8:7.1.1.43+dfsg1-1+deb13u13 all [upgradable from: 8:7.1.1.43+dfsg1-1+deb13u12]
• imagemagick-7.q16/stable-security 8:7.1.1.43+dfsg1-1+deb13u13 amd64 [upgradable from: 8:7.1.1.43+dfsg1-1+deb13u12]
• imagemagick/stable-security 8:7.1.1.43+dfsg1-1+deb13u13 amd64 [upgradable from: 8:7.1.1.43+dfsg1-1+deb13u12]
• libmagickcore-7.q16-10-extra/stable-security 8:7.1.1.43+dfsg1-1+deb13u13 amd64 [upgradable from: 8:7.1.1.43+dfsg1-1+deb13u12]
• libmagickcore-7.q16-10/stable-security 8:7.1.1.43+dfsg1-1+deb13u13 amd64 [upgradable from: 8:7.1.1.43+dfsg1-1+deb13u12]
• libmagickwand-7.q16-10/stable-security 8:7.1.1.43+dfsg1-1+deb13u13 amd64 [upgradable from: 8:7.1.1.43+dfsg1-1+deb13u12]
• libnss3/stable-security 2:3.110-1+deb13u5 amd64 [upgradable from: 2:3.110-1+deb13u4]
• tzdata/stable-updates 2026f-0+deb13u1 all [upgradable from: 2026e-0+deb13u1]
• vim-common/stable-security 2:9.1.1230-2+deb13u1 all [upgradable from: 2:9.1.1230-2]
• vim-runtime/stable-security 2:9.1.1230-2+deb13u1 all [upgradable from: 2:9.1.1230-2]
• vim/stable-security 2:9.1.1230-2+deb13u1 amd64 [upgradable from: 2:9.1.1230-2]
• vim-tiny/stable-security 2:9.1.1230-2+deb13u1 amd64 [upgradable from: 2:9.1.1230-2]
• xxd/stable-security 2:9.1.1230-2+deb13u1 amd64 [upgradable from: 2:9.1.1230-2]

Start maintenance window: 02/11/2026 23:00
Stop maintenance window: 03/11/2026 02:00

We will update the following packages to the latest version.

• bind9-dnsutils/oldstable-security 1:9.18.49-1~deb12u3 amd64 [upgradable from: 1:9.18.49-1~deb12u2]
• bind9-host/oldstable-security 1:9.18.49-1~deb12u3 amd64 [upgradable from: 1:9.18.49-1~deb12u2]
• bind9-libs/oldstable-security 1:9.18.49-1~deb12u3 amd64 [upgradable from: 1:9.18.49-1~deb12u2]
• chromium-common/oldstable-security 156.0.8078.73-1~deb12u1 amd64 [upgradable from: 156.0.8078.47-1~deb12u1]
• chromium/oldstable-security 156.0.8078.73-1~deb12u1 amd64 [upgradable from: 156.0.8078.47-1~deb12u1]
• chromium-sandbox/oldstable-security 156.0.8078.73-1~deb12u1 amd64 [upgradable from: 156.0.8078.47-1~deb12u1]
• dnsutils/oldstable-security 1:9.18.49-1~deb12u3 all [upgradable from: 1:9.18.49-1~deb12u2]
• imagemagick-6-common/oldstable-security 8:6.9.11.60+dfsg-1.6+deb12u15 all [upgradable from: 8:6.9.11.60+dfsg-1.6+deb12u14]
• imagemagick-6.q16/oldstable-security 8:6.9.11.60+dfsg-1.6+deb12u15 amd64 [upgradable from: 8:6.9.11.60+dfsg-1.6+deb12u14]
• imagemagick/oldstable-security 8:6.9.11.60+dfsg-1.6+deb12u15 amd64 [upgradable from: 8:6.9.11.60+dfsg-1.6+deb12u14]
• libmagickcore-6.q16-6-extra/oldstable-security 8:6.9.11.60+dfsg-1.6+deb12u15 amd64 [upgradable from: 8:6.9.11.60+dfsg-1.6+deb12u14]
• libmagickcore-6.q16-6/oldstable-security 8:6.9.11.60+dfsg-1.6+deb12u15 amd64 [upgradable from: 8:6.9.11.60+dfsg-1.6+deb12u14]
• libmagickwand-6.q16-6/oldstable-security 8:6.9.11.60+dfsg-1.6+deb12u15 amd64 [upgradable from: 8:6.9.11.60+dfsg-1.6+deb12u14]
• libsasl2-2/oldstable-security 2.1.28+dfsg-10+deb12u1 amd64 [upgradable from: 2.1.28+dfsg-10]
• libsasl2-modules-db/oldstable-security 2.1.28+dfsg-10+deb12u1 amd64 [upgradable from: 2.1.28+dfsg-10]
• libsasl2-modules/oldstable-security 2.1.28+dfsg-10+deb12u1 amd64 [upgradable from: 2.1.28+dfsg-10]
• python3-aiohttp/oldstable-security 3.8.4-1+deb12u2 amd64 [upgradable from: 3.8.4-1+deb12u1]
• tzdata/oldstable-security 2026f-0+deb12u1 all [upgradable from: 2026e-0+deb12u1]

Start maintenance window: 02/11/2026 23:00
Stop maintenance window: 03/11/2026 02:00

We will update Mailpit to version 1.33.0.

Reference: #63

Start maintenance window: 02/11/2026 23:00
Stop maintenance window: 03/11/2026 02:00

To improve email deliverability, we will restrict email aliases from forwarding messages to external domains.

Why this change?

Forwarding emails to external providers can cause authentication issues (particularly SPF), resulting in messages being rejected or classified as spam.

What does this mean?

• Existing aliases will continue to work as usual, unless modified.
• Forwarding to locally hosted domains remains unaffected.
• Creating or modifying aliases to forward to external domains will be restricted.
• External forwarding will remain possible through an alternative method.

For instructions, please see our forwarding guide.

If you have any questions, do not hesitate to contact us.

Start maintenance window: 30/11/2026 23:00
Stop maintenance window: 01/12/2026 02:00