Cyrus IMAP 3.8.6 Release Notes

Download from GitHub:

• https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.8.6/cyrus-imapd-3.8.6.tar.gz

• https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.8.6/cyrus-imapd-3.8.6.tar.gz.sig

Changes since 3.8.5

STARTTLS changes

The industry is deprecating STARTTLS (aka opportunistic TLS) in favor of implicit TLS over a dedicated port. STARTTLS is now disabled by default.

Installations that need to service clients that use opportunistic TLS should enable the allowstarttls imapd.conf(5) option for the services that need it. For example, for a service configured with the name imap in cyrus.conf(5), set imap_allowstarttls: on to enable STARTTLS.

Security changes

• Fixed Issue #5477: master: tighten up pidfile/etc handling

Build changes

• Fixed Issue #5450: fix zoneinfo_db code for GCC 15 (thanks Yadd)

Bug fixes

• Fixed Issue #5309: deadlock on shutdown (thanks Mark Cammidge)

• Fixed Issue #5424: recognise service-specific SASL options in cyr_info conf-lint

• Fixed Issue #5420: fix double-free in http_admin (thanks Wolfgang Breyha)

• Fixed Issue #5460: pop3d: add basic prometheus support (thanks Wolfgang Breyha)

• Fixed Issue #5454: httpd fails to parse OpenSSL version for status string