Cyrus IMAP 3.8.6 Release Notes
******************************

Download from GitHub:

* https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-
  imapd-3.8.6/cyrus-imapd-3.8.6.tar.gz

* https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-
  imapd-3.8.6/cyrus-imapd-3.8.6.tar.gz.sig


Changes since 3.8.5
===================


STARTTLS changes
----------------

The industry is deprecating STARTTLS (aka opportunistic TLS) in favor
of implicit TLS over a dedicated port.  STARTTLS is now disabled by
default.

Installations that need to service clients that use opportunistic TLS
should enable the *allowstarttls* imapd.conf(5) option for the
services that need it.  For example, for a service configured with the
name *imap* in cyrus.conf(5), set *imap_allowstarttls: on* to enable
STARTTLS.


Security changes
----------------

* Fixed Issue #5477: master: tighten up pidfile/etc handling


Build changes
-------------

* Fixed Issue #5450: fix zoneinfo_db code for GCC 15 (thanks Yadd)


Bug fixes
---------

* Fixed Issue #5309: deadlock on shutdown (thanks Mark Cammidge)

* Fixed Issue #5424: recognise service-specific SASL options in
  "cyr_info conf-lint"

* Fixed Issue #5420: fix double-free in http_admin (thanks Wolfgang
  Breyha)

* Fixed Issue #5460: pop3d: add basic prometheus support (thanks
  Wolfgang Breyha)

* Fixed Issue #5454: httpd fails to parse OpenSSL version for status
  string
