Cyrus IMAP 2.4.18 Release Notes

  • Security fix: handle urlfetch range starting outside message range
  • A bunch of cleanups and fixes to compiling
  • A bunch of sieve cleanups
  • Enhanced SSL/TLS configuration options
  • Disable use of SSLv2/SSLv3
  • Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
  • Fixed task 116: correct LIST response for domains starting with 'inbox.'
  • Fixed task 76: fixed lmtpd userdeny db checks (thanks Leena Heino)
  • Fixed bug #3856: lmtpd now performs userdeny checks
  • Fixed bug #3848: support charset aliases in encoded headers
  • Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
  • Fixed bug #3415: fixed nntpd LIST/GROUP bug
  • Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
  • Fixed bug #3757: don't segfault on mailbox close with no user

New ssl/tls configuration options

tls_compression: 0

Enable TLS compression. Disabled by default.

tls_eccurve: prime256v1

Select the elliptic curve used for ECDHE.

tls_prefer_server_ciphers: 0

Prefer the cipher order configured on the server-side.

tls_versions: tls1_0 tls1_1 tls1_2

Disable SSL/TLS protocols not in this list.

Cyrus IMAP 2.4 Releases