ngIRCd - Next Generation IRC Server
- (c)2001-2005 Alexander Barton,
+ (c)2001-2009 Alexander Barton,
alex@barton.de, http://www.barton.de/
ngIRCd is free software and published under the
-- ChangeLog --
-ngIRCd CVSHEAD
- - ngircd startup: never run with root privileges, i.e. always switch uid.
- - Make Netsplit Messages RFC compliant.
- - Fix handling of QUIT Messages: send only one message, even if client
+ngIRCd Release 14.2
+
+ - Updated doc/Platforms.txt and include new script contrib/platformtest.sh
+ to ease generating platform reports.
+ - Fix connection information for already registered connections.
+ - Enforce upper limit on maximum number of handled commands. This implements
+ a throttling scheme: an IRC client can send up to 3 commands or 256 bytes
+ per second before a one second pause is enforced.
+ - Fix connection counter.
+ - Fix a few error handling glitches for SSL/TLS connections.
+ - Minor fixes to manual pages and documentation.
+
+ngIRCd Release 14.1 (2009-05-05)
+
+ - Security: fix remotely triggerable crash in SSL/TLS code.
+ - BSD start script contrib/ngircd.sh has been renamed to ngircd-bsd.sh.
+ - New start/stop script for RedHat-based distributions:
+ contrib/ngircd-redhat.init, thanks to Naoya Nakazawa <naoya@sanow.net>.
+ - Doxygen: update source code repository link to GIT.
+ - Debian: build ngircd-full-dbg package.
+ - Allow ping timeout quit messages to show the timeout value.
+ - Fix error handling on compressed links.
+ - Fix server list announcement.
+ - Do not remove hostnames from info text.
+
+ngIRCd Release 14 (2009-04-20)
+
+ - Display IPv6 addresses as "[<addr>]" when accepting connections.
+
+ ngIRCd 14~rc1 (2009-03-29)
+ - Updated Debian/Linux init script (see contrib/Debian/ngircd.init).
+ - Allow creation of persistent modeless channels.
+ - The INFO command reports the compile time now (if available).
+ - Spell check and enhance ngIRCd manual pages.
+ - Channel mode changes: break on syntax errors in MODE command.
+ - Support individual channel keys for pre-defined channels: introduce
+ new configuration variable "KeyFile" in [Channel] sections in ngircd.conf,
+ here a file can be configured for each pre-defined channel which contains
+ individual channel keys for different users.
+ - Remove limit on maximum number of predefined channels in ngircd.conf.
+ - Updated ngircd.spec file for building RPM packages.
+ - Add new and missing files to Mac OS X Xcode project, and update project.
+ - Reject masks with wildcard after last dot.
+ - TLS/SSL: remove useless error message when ssl connection is closed.
+ - Fix memory leak when a encrypted and compressed server link goes down.
+ (closes bug #95, reported by Christoph, fiesh@fiesh.homeip.net)
+ - Fix handling of channels containing dots.
+ (closes ug #93, reported by Gonosz Csiga)
+
+ngIRCd Release 13 (2008-12-25)
+
+ - Updated documentation, especially doc/Services.txt and doc/SSL.txt.
+ - Make the test suite work on OpenSolaris.
+
+ ngIRCd 13~rc1 (2008-11-21):
+ - New version number scheme :-)
+ - Initial support for IRC services, using a RFC1459 style interface,
+ tested with IRCServices (http://www.ircservices.za.net/) version 5.1.13.
+ For this to work, ngIRCd now supports server-server links conforming
+ to RFC 1459. New ngircd.conf(5) option: ServiceMask.
+ - Support for SSL-encrypted server-server and client-server links using
+ OpenSSL (configure: --with-openssl) or GNUTLS (configure: --with-gnutls).
+ New ngircd.conf(5) options: SSLPorts, SSLKeyFile, SSLKeyFilePassword,
+ SSLCertFile, SSLDHFile, and SSLConnect.
+ - Server local channels have been implemented, prefix "&", that are only
+ visible to users of the same server and are not visible in the network.
+ In addition ngIRCd creates a "special" channel &SERVER on startup and logs
+ all the messages to it that a user with mode +s receives.
+ - New make target "osxpkg" to build a Mac OS X installer package.
+ - Debug mode: enable support for GNU libc memory tracing (see mtrace(3)).
+ - SysV init script: use LSB logging functions, if available.
+ - Added some more FAQ entries (regarding logging and IRC operators).
+ - Allow IRC operators to overwrite channel limits.
+ - Support for enhanced PRIVMSG and NOTICE message targets.
+ - More tests have been added to the test-suite ("make check"), and two
+ servers are started for testing server-server linking.
+ - Added a timestamp to log messages to the console.
+ - New configuration option "NoIdent" to disable IDENT lookups even if the
+ daemon is compiled with IDENT support.
+
+ngIRCd 0.12.1 (2008-07-09)
+
+ - Allow mixed line terminations (CR+LF/CR/LF) in non-RFC-compliant mode
+ - Don't allow stray \r or \n in command parameters
+ - --configtest: return non-zero exit code if there are errors
+ - Update ngIRCd manual pages
+ - Add option aliases -V (for --version) and -h (for --help).
+ - Fix 'no-ipv6' compile error.
+ - Make Listen parameter a comma-separated list of addresses. This also
+ obsoletes ListenIPv4 and ListenIPv6 options. If Listen is unset, it
+ is treated as Listen="::,0.0.0.0".
+ Note: ListenIPv4 and ListenIPv6 options are still recognized,
+ but ngircd will print a warning if they are used in the config file.
+
+ngIRCd 0.12.0 (2008-05-13)
+
+ - Fix Bug: 85: "WHO #SecretChannel" that user is not a member of now returns
+ proper RPL_ENDOFWHO_MSG instead of nothing. (Ali Shemiran)
+ - Fix compile on FreeBSD 5.4 and AIX.
+ - If bind() fails, also print IP address and not just the port number.
+
+ ngIRCd 0.12.0-pre2 (2008-04-29)
+ - IPv6: Add config options to disable ipv4/ipv6 support.
+ - Don't include doc/CVS.txt in distribution archive, use doc/GIT.txt now!
+ - Documentation: get rid of some more references to CVS, switch to GIT.
+ - Get rid of cvs-version.* and CVSDATE definition.
+ - Report ERR_NOTONCHANNEL when trying to part a channel one is not member of.
+ - Testsuite: remove erroneous ConfUID setting in config file.
+
+ ngIRCd 0.12.0-pre1 (2008-04-20)
+ - Include Mac OS X Xcode project in distribution archives.
+ - Do not exit on SIGHUP or /REHASH if the config file cannot opened.
+ - Add IPv6 support.
+ - Install a LaunchDaemon script to start/stop ngIRCd on Mac OS X.
+ - Implemented IRC commands INFO, SUMMON (dummy), and USERS (dummy) and
+ enhanced test suite to check these commands. (Dana Dahlstrom)
+ - RPL_WHOREPLY messages generated by IRC_WHO didn't include flags (*,@,+).
+ (Dana Dahlstrom)
+ - IRC_WHO now supports search patterns and will test this against user
+ nickname/servername/hostname, etc. as required by RFC 2812, Section 3.6.1.
+ (reported by Dana Dahlstrom)
+ - Add test cases for "WHO" command. (Dana Dahlstrom)
+ - Implement RFC 2812 handling of "0" argument to 'JOIN': must be treated
+ as if the user had sent PART commands for all channels the user is a
+ member of. (Dana Dahlstrom)
+ - Allow NOTICEs to be sent to a channel. (Fabian Schlager)
+
+ngIRCd 0.11.1 (2008-02-26)
+
+ - Fix sending of JOIN commands between servers when remote server appended
+ mode flags. (Rolf Eike Beer) [from HEAD]
+ - Send "G" instead of "H" flag in WHO replies. (reported by Dana Dahlstrom)
+ - Under some circumstances ngIRCd issued channel MODE message with a
+ trailing space. (Dana Dahlstrom) [from HEAD]
+
+ngIRCd 0.11.0 (2008-01-15)
+
+ ngIRCd 0.11.0-pre2 (2008-01-07)
+ - SECURITY: IRC_PART could reference invalid memory, causing
+ ngircd to crash [from HEAD]. (CVE-2008-0285)
+
+ ngIRCd 0.11.0-pre1 (2008-01-02)
+ - Use dotted-decimal IP address if hostname is >= 64.
+ - Add support for /STAT u (server uptime) command.
+ - New [Server] configuration Option "Bind" allows to specify
+ the source IP address to use when connecting to remote server.
+ - New configuration option "MaxNickLength" to specify the allowed maximum
+ length of user nick names. Note: must be unique in an IRC network!
+ - Enhanced the IRC+ protocol to support an enhanced "server handshake" and
+ enable server to recognize numeric 005 (ISUPPORT) and 376 (ENDOFMOTD).
+ See doc/Protocol.txt for details.
+ - Re-added doc/SSL.txt to distribution -- got lost somewhere!?
+ - Fixes the wrong logging output when nested servers are introduced
+ to the network as well as the wrong output of the LINKS command.
+ - Update Mac OS X Xcode project file for Xcode 3.
+ - Adjust test suite to be usable on HP/UX 11.11 :-)
+ - Fix code to compile using K&R C compiler and ansi2kr again.
+ - New config option NoDNS: Disables DNS lookups when clients connect.
+ - Fixed propagation of channel mode 'P' on server links.
+ - Numeric 317: implemented "signon time" (displayed in WHOIS result).
+ - Fixed code that prevented GCC 2.95 to compile ngIRCd.
+ - Adjust path names in manual pages according to "./configure" settings.
+ - Added new server configuration option "Passive" for "Server" blocks to
+ disable automatic outgoing connections (similar to -p option to ngircd,
+ but only for the specified server). (Tassilo Schweyer)
+ - Don't connect to a server if a connection to another server within the
+ same group is already in progress.
+ - Added support for the WALLOPS command. Usage is restricted to IRC
+ operators.
+
+ngIRCd 0.10.4 (2008-01-07)
+
+ - SECURITY: IRC_PART could reference invalid memory, causing
+ ngircd to crash [from HEAD]. (CVE-2008-0285)
+
+ngIRCd 0.10.3 (2007-08-01)
+
+ - SECURITY: Fixed a severe bug in handling JOIN commands, which could
+ cause the server to crash. Thanks to Sebastian Vesper, <net@veoson.net>.
+ (CVE-2007-6062)
+
+ngIRCd 0.10.2 (2007-06-08)
+
+ ngIRCd 0.10.2-pre2 (2007-05-19)
+ - Server links are allowed to use larger write buffers now (up to 50 KB).
+
+ ngIRCd 0.10.2-pre1 (2007-05-05)
+ - Fix compressed server links (broken since 0.10.0).
+ - Predefined Channel configuration now allows specification of channel key
+ (mode k) and maximum user count (mode l).
+ - When using epoll() IO interface, compile in the select() interface as
+ well and fall back to it when epoll() isn't available on runtime.
+ - New configure option "--without-select" to disable select() IO API
+ (even when using epoll(), see above).
+ - Added support for IO APIs "poll()" and "/dev/poll".
+ - Reorganized internal handling of invite and ban lists.
+
+ngIRCd 0.10.1 (2006-12-17)
+
+ - Fixed validation of server names containing digits.
+ - Update the "info text" of the local server after re-reading configuration.
+ - Changed Numerics 265 and 266 to follow ircd 2.11.x "standards".
+ - Allow PASS syntax defined in RFC 1459 for server links, too.
+ - Enhanced ISUPPORT message (005 numeric).
+ - New configuration option "PredefChannelsOnly": if set, clients can only
+ join predefined channels.
+ - Code cleanups: use "LogDebug(...)" instead of "Log(LOG_DEBUG, ...)", use
+ "strcspn()", unsigned vs. signed, use "const", fix whitespaces, ...
+
+ngIRCd 0.10.0 (2006-10-01)
+
+ - Fixed file handle leak when daemon is not able to send MOTD to a client.
+
+ ngIRCd 0.10.0-pre2 (2006-09-09)
+ - Fixed build problems with GCC option -fstack-protector.
+ - Minor documentation updates.
+
+ ngIRCd 0.10.0-pre1 (2006-08-02)
+ - Validate "ServerName" (see RFC 2812, section 2.3.1).
+ - Enhanced DIE to accept a single parameter ("comment text") which is sent
+ to all locally connected clients before the server goes down.
+ - The ngIRCd handles time shifts backwards more gracefully now (the
+ timeout handling doesn't disconnect clients by mistake any more).
+ - Internal: Restructured connection handling (the connection ID is equal
+ to the file descriptor of the connection).
+ - Internal: Simplified resolver code.
+ - JOIN now supports more than one channel key at a time.
+ - Implemented numeric "333": Time and user name who set a channel topic.
+ - Enhanced the handler for PING and PONG commands: fix forwarding and enable
+ back-passing of a client supplied additional argument of PING.
+ - Changed handling of timeouts for unregistered connections: don't reset
+ the counter if data is received and disconnect clients earlier.
+ - Removed unnecessary #define of "LOCAL", now use plain C "static" instead.
+ - Channel topics are no longer limited to 127 characters: now the only limit
+ is the maximum length of an IRC command, i. e. 512 bytes (in practice, this
+ limits the topic to about 490 characters due to protocol overhead).
+ - Reverse DNS lookup code now checks the result by doing an additional
+ lookup to prevent spoofing.
+ - Added new IO layer which (optionally) supports epoll() and kqueue() in
+ addition to the select() interface.
+
+ngIRCd 0.9.2 (2005-10-15)
+
+ - Fixed a bug that could cause the daemon to crash when outgoing server
+ connections can't be established.
+ - Fixed a bug that caused the daemon to leak file descriptors when no
+ resolver subprocesses could be created.
+ - Fixed server NOTICEs to users with "s" mode ("server messages").
+ - Fixed a format string bug in "connection statistics" messages to clients.
+
+ngIRCd 0.9.1 (2005-08-03)
+
+ - The KILL command killed much more than desired (including server links!)
+ when the target user is connected to a remote server. Bug introduced in
+ ngIRCd 0.9.0 ... Reported by <qssl@fastmail.fm>, Thanks!
+ - Changed some constants to be "signed" (instead of unsigned) to solve
+ problems with old (pre-ANSI) compilers.
+
+ngIRCd 0.9.0 (2005-07-24)
+
+ ngIRCd 0.9.0-pre1 (2005-07-09)
+ - Fixed maximum length of user names, now allow up to 9 characters.
+ - Cut off oversized IRC messages that should be sent to the network instead
+ of shutting down the (wrong) connection.
+ - Don't generate error messages for unknown commands received before the
+ client is registered with the server (like the original ircd).
+ - Never run with root privileges but always switch the user ID.
+ - Make "netsplit" messages RFC compliant.
+ - Fix handling of QUIT Messages: send only one message, even if the client
is member of multiple channels.
- Don't exit server if closing of a socket fails; instead ignore it and
pray that this will be "the right thing" ...
most probably other older C compilers on other systems.
- When the daemon should switch to another user ID (ServerID is defined in
the configuration file) and is not running in a chroot environment, it
- changes it's working directory to the home directory of this user. This
+ changes its working directory to the home directory of this user. This
should enable the system to write proper core files when not running with
root privileges ...
- Fixed a bug that could case a root exploit when the daemon is compiled
to do IDENT lookups and is logging to syslog. Bug discovered by CoKi,
<coki@nosystem.com.ar>, thanks a lot!
- (http://www.nosystem.com.ar/advisories/advisory-11.txt)
+ (CVE-2005-0226; http://www.nosystem.com.ar/advisories/advisory-11.txt)
ngIRCd 0.8.2 (2005-01-26)
- Added doc/SSL.txt to distribution.
- Fixed a buffer overflow that could cause the daemon to crash. Bug found
- by Florian Westphal, <westphal@foo.fh-furtwangen.de>.
+ by Florian Westphal, <westphal@foo.fh-furtwangen.de>. (CVE-2005-0199)
- Fixed a possible buffer underrun when reading the MOTD file. Thanks
to Florian Westphal, <westphal@foo.fh-furtwangen.de>.
- Fixed detection of IRC lines which are too long to send. Detected by
- Better error reporting to clients on connect.
- Enhanced manual pages ngircd(8) and ngircd.conf(5).
- Documentation is now installed in $(datadir)/doc/ngircd.
- - Enhanced hanling of NJOIN in case of nick collisions.
+ - Enhanced handling of NJOIN in case of nick collisions.
ngIRCd 0.6.1, 2003-01-21
ngIRCd 0.0.1, 31.12.2001
- erste oeffentliche Version von ngIRCd als "public preview" :-)
-
-
---
-$Id: ChangeLog,v 1.274 2005/06/17 19:04:53 fw Exp $
projects / ngircd-alex.git / blobdiff