NEWS: Update to v2.2.36.rc1

diff --git a/NEWS b/NEWS
index 2e061e640ac5765fcb24ea20d4928eb56992b6ed..9364fb5aa024e929bddd4db798b921818dd9a80f 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,4 +1,31 @@
+v2.2.36 2018-05-xx  Timo Sirainen <tss@iki.fi>
+
+       * login-proxy: If ssl_require_crl=no, allow revoked certificates.
+         Also don't do CRL checks for incoming client certificates.
+       * stats plugin: Don't temporarily enable PR_SET_DUMPABLE while opening
+         /proc/self/io. This may still cause security problems if the process
+         is ptrace()d at the same time. Instead, open it while still running
+         as root.
+
+       + doveadm: Added mailbox cache decision&remove commands. See
+         doveadm-mailbox(1) man page for details.
+       + doveadm: Added rebuild attachments command for rebuilding
+         $HasAttachment or $HasNoAttachment flags for matching mails. See
+         doveadm-rebuild(1) man page for details.
+       - dsync: Lock file generation failed if home directory didn't exist
+       - Snippet generation for HTML mails didn't ignore &entities inside
+         blockquotes, producing strange looking snippets.
+       - imapc: Fix assert-crash if getting disconnected and after
+         reconnection all mails in the selected mailbox are gone.
+       - pop3c: Handle unexpected server disconnections without assert-crash
+       - fts: If mails contained NUL characters, the text around it wasn't
+         indexed.
+       - Obsolete dovecot.index.cache offsets were sometimes used. Trying to
+         fetch a field that was just added to cache file may not have always
+         found it.
+
 v2.2.35 2018-03-19  Aki Tuomi <aki.tuomi@dovecot.fi>
+
        - charset_alias: compile fails with Solaris Studio, reported by
          John Woods.
        - Fix local name handling in v2.2.34 SNI code, bug found by cPanel.