diff --git a/CHANGES b/CHANGES
index 164accc63..8102ee0c2 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2935,4 +2935,5 @@
 * domains: vanity nameservers
 * token: access can by restricted by ip range(s)
 * sendmail: requiresValidCertificate option for using mail server domain
+* mail: update haraka to 3.1.0
 
diff --git a/src/infra_version.js b/src/infra_version.js
index d8c065d9e..fbaeca805 100644
--- a/src/infra_version.js
+++ b/src/infra_version.js
@@ -13,7 +13,7 @@ exports = module.exports = {
     'images': {
         // 'base': 'registry.docker.com/cloudron/base:5.0.0@sha256:04fd70dbd8ad6149c19de39e35718e024417c3e01dc9c6637eaf4a41ec4e596c',
         'graphite': 'registry.docker.com/cloudron/graphite:3.5.0@sha256:ee7c9dc49a6507cb3e3cee25495b2044908feb91dac5df87a9633dea38fdeb8a',
-        'mail': 'registry.docker.com/cloudron/mail:3.15.1@sha256:62fdb69f4ea0a89678afa1b6fd766563e8a975faba3e99a977f89e319b84046d',
+        'mail': 'registry.docker.com/cloudron/mail:3.16.0@sha256:8bb6c828ece2c4c66cc3acca23aa55c7926cc05ae2311e93671d3e3070fd9057',
         'mongodb': 'registry.docker.com/cloudron/mongodb:6.1.0@sha256:e0eae0335546310d9b4fd60b225adbfa07f60204e766275a99c083726f7453fe',
         'mysql': 'registry.docker.com/cloudron/mysql:3.5.0@sha256:969ea5b2f91861940ca6309c7676c52e479d2a864ba3aabd08a4266799707280',
         'postgresql': 'registry.docker.com/cloudron/postgresql:6.0.1@sha256:c24dc6ff43cc4f7dc080836adf5e9fd0d1e0e65b44b4e2d107faa379cb0185ab',