diff --git a/CHANGES b/CHANGES
index 748d5aa7b..2a2f1f701 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2742,4 +2742,5 @@
 * backupcleaner: fix bug where preserved backups were removed incorrectly
 * directoryserver: cloudflare warning
 * oidc/ldap: fix display name parsing to send anything after first name as the last name
+* mail: Update haraka to 3.0.3
 
diff --git a/src/infra_version.js b/src/infra_version.js
index 6c46867e9..f44574664 100644
--- a/src/infra_version.js
+++ b/src/infra_version.js
@@ -13,7 +13,7 @@ exports = module.exports = {
     'images': {
         'base': 'registry.docker.com/cloudron/base:4.2.0@sha256:46da2fffb36353ef714f97ae8e962bd2c212ca091108d768ba473078319a47f4',
         'graphite': 'registry.docker.com/cloudron/graphite:3.4.3@sha256:75df420ece34b31a7ce8d45b932246b7f524c123e1854f5e8f115a9e94e33f20',
-        'mail': 'registry.docker.com/cloudron/mail:3.11.4@sha256:ab85a0e8b6b50c2828861e08f4df41298c1d5e15b0778eda9116d92f8cf4c292',
+        'mail': 'registry.docker.com/cloudron/mail:3.12.0@sha256:66d1c0373c5a95bdf789fdda7b405c4a07be01c60be834c38d1ff385ca5c7ca3',
         'mongodb': 'registry.docker.com/cloudron/mongodb:5.1.2@sha256:897bea3cae08c8c10f9f5adaff853be314ab94aa98d96a8d0caa502babd983aa',
         'mysql': 'registry.docker.com/cloudron/mysql:3.4.2@sha256:379749708186a89f4ae09d6b23b58bc6d99a2005bac32e812b4b1dafa47071e4',
         'postgresql': 'registry.docker.com/cloudron/postgresql:5.1.7@sha256:cd6ce14da84b3d0a6e633b53a73be4700acfda67f853990f56ecc934ca1f2ac9',