← Back to home
Comparison · Comms

Mailu vs Synapse

A side-by-side editorial comparison of Mailu and Synapse — release velocity, themes, recent moves, and the top alternatives to consider.

Mailu vs Synapse: at a glance

FeatureMailuSynapse
SectorCommsComms
Velocity score5.05.0
Sparks · 30d00
Top themesmaintenance-branch, roundcube, cve-patching, self-hosted-mailmatrix-protocol, homeserver, security-patches, spec-compliance
Last editorial update2h ago3h ago
WebsiteVisit →Visit →

What is Mailu?

Mailu's October: patched PHP for webmail, and a resolver that reports DNS failures

Mailu's 2024.06 branch shipped six pinned releases in October, each tied to a single issue. Three dealt with the resolver: handling the DNSSEC KSK rollover, then making the healthcheck fail on SERVFAIL, re-shipped once. Three were webmail: Roundcube 1.6.20, mitigations for the PHP2Shell CVEs, and then the patched PHP runtime. Late September releases fixed boolean settings that could not be turned off and stale webmail sessions after switching accounts via SSO.

Read the full Mailu trajectory →

What is Synapse?

Synapse 1.164 advertises Matrix v1.16 and v1.17 amid a run of dependency security patches

Synapse keeps its two-to-three-week cycle of candidates and stables. 1.164.0 went stable on 27 October with support for Matrix v1.16 and v1.17 and a dedicated endpoint for scheduling delayed events (MSC4140). The surrounding releases are security dependency bumps: certifi, a rustls-webpki update that distrusts the compromised eMudhra intermediate CAs, Pillow 13.0.0 for critical image-handling flaws, and msgpack against memory exhaustion on the public room list.

Read the full Synapse trajectory →

Mailu vs Synapse: editorial side-by-side

M
Mailu
COMMS
5.0

Mailu's October: patched PHP for webmail, and a resolver that reports DNS failures

◆ Current state

Mailu's 2024.06 branch shipped six pinned releases in October, each tied to a single issue. Three dealt with the resolver: handling the DNSSEC KSK rollover, then making the healthcheck fail on SERVFAIL, re-shipped once. Three were webmail: Roundcube 1.6.20, mitigations for the PHP2Shell CVEs, and then the patched PHP runtime. Late September releases fixed boolean settings that could not be turned off and stale webmail sessions after switching accounts via SSO.

◆ Where it's heading

The project remains in one-fix-per-release maintenance on the 2024.06 line, with upstream webmail and PHP security driving much of the cadence. Nothing in the entries points to a new main release.

◆ Prediction

The next releases will most likely follow upstream Roundcube or PHP security fixes, as three of the last six did.

S
Synapse
COMMS
5.0

Synapse 1.164 advertises Matrix v1.16 and v1.17 amid a run of dependency security patches

◆ Current state

Synapse keeps its two-to-three-week cycle of candidates and stables. 1.164.0 went stable on 27 October with support for Matrix v1.16 and v1.17 and a dedicated endpoint for scheduling delayed events (MSC4140). The surrounding releases are security dependency bumps: certifi, a rustls-webpki update that distrusts the compromised eMudhra intermediate CAs, Pillow 13.0.0 for critical image-handling flaws, and msgpack against memory exhaustion on the public room list.

◆ Where it's heading

The homeserver tracks the spec closely, stabilising MSCs as they land in Matrix releases, while backporting each security bump to the previous stable line. Sticky Events and User Status work suggest continued alignment with newer client features.

◆ Prediction

1.165 release candidates should follow within about two weeks, likely with further MSC stabilisations.

Alternatives to Mailu and Synapse

Other Comms products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Mailu or Synapse.

See all Mailu alternatives → · See all Synapse alternatives →

Recent activity from Mailu and Synapse

Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.

  1. 4d agoSynapseSynapse 1.164.1: msgpack memory-exhaustion fix, status clearing
  2. 6d agoSynapseSynapse 1.164.0: Matrix v1.16/v1.17 support goes stable
  3. 9d agoSynapseSynapse 1.164.0rc3: Pillow 13 security bump
  4. 9d agoSynapseSynapse 1.163.2: Pillow critical security backport
  5. 10d agoMailuMailu ships patched PHP for PHP2Shell CVEs
  6. 10d agoSynapseSynapse 1.164.0rc2: certificate trust updates
  7. 10d agoSynapseSynapse 1.163.1: eMudhra CA distrust and certifi update
  8. 11d agoMailuMailu mitigates PHP2Shell webmail CVEs
  9. 12d agoMailuMailu 2024.06.65: Roundcube 1.6.20 update
  10. 18d agoMailu2024.06.64 re-ships the resolver healthcheck fix
  11. 19d agoMailu2024.06.63 makes the resolver healthcheck catch SERVFAIL
  12. 21d agoMailu2024.06.62 handles the DNSSEC KSK rollover

Frequently asked questions

What is the difference between Mailu and Synapse?

They serve adjacent needs but don't currently overlap on shipped themes. Mailu and Synapse are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.

Is Mailu better than Synapse?

Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Mailu and Synapse are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Comms products to evaluate alongside.

What are the best alternatives to Mailu?

Top Mailu alternatives in Comms are ranked by recent ship velocity. Browse the "Mailu alternatives" section above for the current picks, or visit /alternatives/mailu for the full list with editorial commentary on each.

What are the best alternatives to Synapse?

Top Synapse alternatives in Comms are ranked by recent ship velocity. Browse the "Synapse alternatives" section above for the current picks, or visit /alternatives/synapse for the full list with editorial commentary on each.