Cyrus IMAP 3.0.12 Release Notes
*******************************

Important:

  This is a bug-fix release in the stable 3.0 series.Refer to the
  Cyrus IMAP 3.0.0 Release Notes for important information about the
  3.0 series, including upgrading instructions.

Download via HTTPS:

   * https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-
     imapd-3.0.12/cyrus-imapd-3.0.12.tar.gz

   * https://github.com/cyrusimap/cyrus-imapd/releases/download/cyrus-
     imapd-3.0.12/cyrus-imapd-3.0.12.tar.gz.sig


Changes Since 3.0.11
====================


Release changes
---------------

We're trialing using the Github Releases feature.  If you have trouble
downloading this release, please report this to the mailing lists.
Thanks!


Security fixes
--------------

* Fixed CVE-2019-18928: unauthenticated HTTP requests no longer
  inherit authentication from the previous request on the same
  connection


Build changes
-------------

* *configure* can now find xapian-config-1.5 on its own, if it's in
  your PATH.

* *make distcheck* now tries to build with most components enabled

* Sphinx 2 is now supported for documentation builds (thanks Jakob
  Gahde)

* Now builds cleanly with GCC 9.1.1 (thanks Дилян Палаузов)

* *configure --disable-pcre* now works properly, and falls back to
  POSIX regexes


Other changes
-------------

* Added support for tls1_3


Bug fixes
---------

* Fixed Issue #2848: MessageExpunge events from ipurge now have valid
  uri field

* Fixed Issue #2877: *quota -f* now works correctly with
  *improved_mboxlist_sort: no*

* Fixed Issue #2741: Murder frontends no longer crash on GETMETADATA

* Fixed Issue #2808: UNDUMP no longer crashes when quota needs
  updating

* Fixed: mailboxes can no longer be created in the namespace reserved
  for reverseacls data

* Fixed Issue #2893: the experimental backup system now supports
  shared mailboxes

* Fixed: can now assign a sieve variable based on itself

* Fixed Issue #2904: authenticataed, cacheable DAV responses now
  include a Cache-Control: private header