diff --git a/CHANGES b/CHANGES
index 6340b4434..624e244dd 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2748,4 +2748,6 @@
 * add port range support
 * docker: disable userland proxy
 * oidc: always re-setup oidc client record
+* mail: update solr to 8.11.3
+* mail: spam acl should allow underscore and question mark
 
diff --git a/src/infra_version.js b/src/infra_version.js
index b79835949..c5cec1b03 100644
--- a/src/infra_version.js
+++ b/src/infra_version.js
@@ -13,7 +13,7 @@ exports = module.exports = {
     'images': {
         'base': 'registry.docker.com/cloudron/base:4.2.0@sha256:46da2fffb36353ef714f97ae8e962bd2c212ca091108d768ba473078319a47f4',
         'graphite': 'registry.docker.com/cloudron/graphite:3.4.3@sha256:75df420ece34b31a7ce8d45b932246b7f524c123e1854f5e8f115a9e94e33f20',
-        'mail': 'registry.docker.com/cloudron/mail:3.12.0@sha256:66d1c0373c5a95bdf789fdda7b405c4a07be01c60be834c38d1ff385ca5c7ca3',
+        'mail': 'registry.docker.com/cloudron/mail:3.12.1@sha256:f539bea6c7360d3c0aa604323847172359593f109b304bb2d2c5152ca56be05c',
         'mongodb': 'registry.docker.com/cloudron/mongodb:6.0.0@sha256:1108319805acfb66115aa96a8fdbf2cded28d46da0e04d171a87ec734b453d1e',
         'mysql': 'registry.docker.com/cloudron/mysql:3.4.2@sha256:379749708186a89f4ae09d6b23b58bc6d99a2005bac32e812b4b1dafa47071e4',
         'postgresql': 'registry.docker.com/cloudron/postgresql:5.1.7@sha256:cd6ce14da84b3d0a6e633b53a73be4700acfda67f853990f56ecc934ca1f2ac9',