1:tocdepth: 3
2
3====================================
4Cyrus IMAP 3.2.0 Release Notes
5====================================
6
7Download from GitHub:
8
9    *   https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.2.0/cyrus-imapd-3.2.0.tar.gz
10    *   https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-imapd-3.2.0/cyrus-imapd-3.2.0.tar.gz.sig
11
12.. _relnotes-3.2.0-changes:
13
14Major changes since the 3.0.x series
15====================================
16
17* Sieve bug fixes and features
18* Replication safety improvements
19* Caldav and Carddav improvements
20* Support for JMAP core protocol (:rfc:`8620`)
21* Support for JMAP Mail (:rfc:`8621`)
22* Experimental support for JMAP Contacts (requires
23  `jmap_nonstandard_extensions: yes` in :cyrusman:`imapd.conf(5)`)
24* Experimental support for JMAP Calendars (requires
25  `jmap_nonstandard_extensions: yes` in :cyrusman:`imapd.conf(5)`)
26* Xapian bug fixes
27* Improvements to Annotations handling
28* DRAC support has been deprecated
29* Support for Prometheus stats
30* SNMP stats support has been deprecated
31* Removed support for the Sphinx backend to squatter searches
32* New cyrus.index format v16 included since 3.1.5 - adds unseen count and
33  createdmodseq to index header, savedate and createdmodseq to index records
34* Support for WebSockets
35* Support for HTTP/2.0
36* Support for SCRAM authentication for httpd
37* Experimental support for Zeroskip database format
38* Intermediate mailboxes are now recorded in mailboxes database
39* Conversations database format update - adds flags and internaldate fields,
40  and is now versioned for future-compatibility.  You will need to rebuild
41  your conversations databases with :cyrusman:`ctl_conversationsdb(8)` and
42  the `-b` switch to benefit from this
43* IMAP FETCH accepts two new data items, MAILBOXIDS and MAILBOXES, which
44  respectively return the unique ids or names of the containing mailboxes of
45  each message in the sequence (for best performance, rebuild your
46  conversations databases as above)
47* :cyrusman:`mbpath(8)` is now much more useful
48* Twoskip database format now supports shared locks, and ensures record
49  headers do not span disk block boundaries
50* All Cyrus binaries now use real sysexits exit codes instead of mapping
51  nearly everything to EX_TEMPFAIL
52* CyrusDB errors now syslog the actual error instead of just "cyrusdb error"
53* New `allowdeleted` :cyrusman:`imapd.conf(5)` option (default off), which
54  allows admin users to see deleted mailboxes and expunged messages over IMAP
55* :cyrusman:`cyr_virusscan(8)` now supports custom templates for notifications
56  sent about infected messages that have been deleted
57* :cyrusman:`imapd.conf(5)` options that represent a time duration now accept
58  'd', 'h', 'm', 's' suffixes rather than arbitrary units
59* The `tls_server_cert` and `tls_server_key` :cyrusman:`imapd.conf(5)` options
60  now allow two certificate/key pairs (e.g. RSA and EC) to be used.  Thanks
61  Дилян Палаузов
62* Mailbox create/delete/rename are now performed under a lock on the user's
63  namespace, to prevent races (especially during big renames)
64* The :cyrusman:`cyr_info(8)` `conf-lint` subcommand no longer complains
65  about channel-prefixed sync options
66* New `master_bind_errors_fatal` :cyrusman:`imapd.conf(5)` option (default
67  off), with which master will refuse to start if any of the configured
68  services are unable to successfully bind their port.  The default and legacy
69  behaviour is for master to start with the affected services disabled, and
70  not try to start them again until a SIGHUP is received
71* New `autocreate_acl` :cyrusman:`imapd.conf(5)` option, for specifying ACLs
72  to use when mailboxes are created by `autocreate_inbox_folders`
73* New `zoneinfo_dir` :cyrusman:`imapd.conf(5)` option, for specifying the
74  directory Cyrus should look for timezone definitions in.  The default is
75  to let libical find them itself.  If the `tzdist` http module is enabled,
76  this option is mandatory.
77* The iso-8859-1 charset is now treated as an alias for windows-1252, as per
78  `WHATWG Encoding for emails and websites
79  <https://encoding.spec.whatwg.org/#names-and-labels>`_
80
81Updates to default configuration
82================================
83
84The :cyrusman:`cyr_info(8)` `conf`, `conf-all` and `conf-default` subcommands
85now accept an `-s <version>` argument to highlight :cyrusman:`imapd.conf(5)`
86options that are new or whose behaviour has changed since the specified
87version.  We recommend using this when evaluating a new Cyrus version to
88check which configuration options you will need to re-examine and maybe change
89during the process.
90
91* The `specialusealways` option is now enabled by default. It must
92  explicitly be disabled for interoperability with legacy clients that
93  can't handle RFC 6154 attributes in extended LIST commands.
94* The values accepted by `expunge_mode` have changed, please see the
95  documentation for more information about the changes.
96* The legacy GETANNOTATIONS/SETANNOTATIONS IMAP commands will no longer
97  work unless `annotation_enable_legacy_commands` is enabled.
98* The `outbox_sendlater` option and its functionality have been removed.
99* The `tzdist` http module now finds its timezone data directory according
100  to the new `zoneinfo_dir` :cyrusman:`imapd.conf(5)` option, instead of
101  being hardcoded to "{configdirectory}/zoneinfo".  If you are using this
102  module, you MUST now set this option explicitly.  Calendaring services
103  will use the same timezone definitions.
104
105
106Security fixes
107==============
108
109* Contains fix for `CVE-2017-14230 <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14230>`_
110* Contains fix for `CVE-2019-18928 <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18928>`_
111* Contains fix for `CVE-2019-19783 <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19783>`_
112
113
114Significant bugfixes
115====================
116
117* Contains fix for :issue:`2839`
118
119
120.. _Xapian: https://xapian.org
121.. _ClamAV: https://www.clamav.net
122.. _JMAP: http://jmap.io
123