1===============================
2Cyrus IMAP 2.4.18 Release Notes
3===============================
4
5*   Security fix: handle urlfetch range starting outside message range
6*   A bunch of cleanups and fixes to compiling
7*   A bunch of sieve cleanups
8*   Enhanced SSL/TLS configuration options
9*   Disable use of SSLv2/SSLv3
10*   Allow SQL backend for mboxlist and statuscache (thanks Julien Coloos)
11*   Fixed task 116: correct LIST response for domains starting with 'inbox.'
12*   Fixed task 76: fixed lmtpd userdeny db checks (thanks Leena Heino)
13*   Fixed bug #3856: lmtpd now performs userdeny checks
14*   Fixed bug #3848: support charset aliases in encoded headers
15*   Fixed bug #3853: disconnect_on_vanished_mailbox: release mailbox lock before exiting (thanks Wolfgang Breyha)
16*   Fixed bug #3415: fixed nntpd LIST/GROUP bug
17*   Fixed bug #3784: no longer crash in THREAD REFERENCES when messages reference themselves
18*   Fixed bug #3757: don't segfault on mailbox close with no user
19
20
21New ssl/tls configuration options
22---------------------------------
23
24    tls_compression: 0
25
26        Enable TLS compression. Disabled by default.
27
28    tls_eccurve: prime256v1
29
30        Select the elliptic curve used for ECDHE.
31
32    tls_prefer_server_ciphers: 0
33
34        Prefer the cipher order configured on the server-side.
35
36    tls_versions: tls1_0 tls1_1 tls1_2
37
38        Disable SSL/TLS protocols not in this list.
39
40
41:ref:`imap-release-notes-2.4`
42