X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd-alex.git;a=blobdiff_plain;f=ChangeLog;h=03090b882a87d997fe88bf0c512ef489d0670906;hp=490257eb20f2e456c8caa14fe7bd63a6f38db717;hb=6d11fb149707194e986b0d64af3d44f21e158fcc;hpb=3d8eda9c860cbcbf195fe2242c67dd57fe966b3e diff --git a/ChangeLog b/ChangeLog index 490257eb..03090b88 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,26 +1,281 @@ ngIRCd - Next Generation IRC Server + http://ngircd.barton.de/ - (c)2001-2008 Alexander Barton, - alex@barton.de, http://www.barton.de/ - + (c)2001-2011 Alexander Barton and Contributors. ngIRCd is free software and published under the terms of the GNU General Public License. -- ChangeLog -- -ngIRCd-dev - - - Fixed Bug 75: KICK now handles comma-delimited lists. - (Brandon Beresini, Bryan Caldwell) - - Fixed Bug 83: ngIRCd chokes on 1-character messages. - - Add support for modeless channels ("+channels"). - (Bryan Caldwell, Ali Shemiran) - -ngIRCd 0.12.0-pre2 (2008-04-29) - - - IPv6: Add config options to disabe ipv4/ipv6 support. +ngIRCd + + - Make [No]ZeroConf configuration option work with Howl. + - Deprecate NoXX-Options in ngircd.conf: 'NoDNS=no' => 'DNS=yes', + 'NoIdent=no' => 'Ident=yes', 'NoPAM=no' => 'PAM=yes', and + 'NoZeroConf=no' => 'ZeroConf=yes' (and vice-versa). + The defaults are adjusted accordingly and the old variables are still + accepted, so there is no functional change. + - Fix confusing "adding to invite list" debug messages. + - Don't throttle services and servers beeing registered. + - Xcode: correctly sort files + - Don't assert() when serching a client for an invalid server token. + +ngIRCd Release 17.1 (2010-12-19) + + - --configtest: remember if MOTD is configured by file or phrase + - Enhance log messages when establishing server links a little bit + - Reset ID of outgoing server link on DNS error correctly + - Don't log critical (or worse) messages to stderr + - Manual page ngircd(8): add SIGNALS section + - Manual pages: update and simplyfy AUTHORS section + - Remove "error file" when compiled with debug code enabled + - README: Updated list of implemented commands + - add doc/README-Interix.txt and doc/Bopm.txt to distribution tarball + - Merge branch 'numeric-329' + - add doc/PAM.txt to distribution tarball + - New numeric 329: get channel creation time on "MODE #chan" commands + - Save channel creation time; new function Channel_CreationTime() + +ngIRCd Release 17 (2010-11-07) + + - doc: change path names in sample-ngircd.conf depending on sysconfdir + - Fix up generation and distribution of sample-ngircd.conf + - contrib/ngircd-redhat.init: updated email address of Naoya Nakazawa + - contrib/platformtest.sh: make command name quoting consistent + + ngIRCd 17~rc3 (2010-10-27) + - Xcode builds: detect version number correctly, updateed project file + to use the Mac OS X 10.5.x SDK, disable pam_fail_delay() because it + is only available starting with Mac OS X 10.6, and generate a default + PAM configuration for the Mac OS X Installer.app package of ngIRCd. + - Debian: updated standards version to 3.9.1, added libpam0g-dev to the + dependencies, and install a default /etc/pam.d/ngircd allowing all logins. + - Make contrib/platformtest.sh more portable. + - Fix connect attempts to further IP addresses of outgoing server links. + + ngIRCd 17~rc2 (2010-10-25) + - ZeroConf: include header files missing since commit a988bbc86a. + - Generate ngIRCd version number from GIT tag. + - Make sourcecode compatible with ansi2knr again. This allows to compile + ngIRCd using a pre-ANSI K&R C compiler again. + - ./configure: check if C compiler can compile ISO Standard C. + - ./configure: check support for C prototypes again. + - Don't use PARAMS() macro for function implementations. + - Added m68k/apple/aux3.0.1 (gcc 2.7.2) to doc/Platforms.txt. + - Only try to set FD_CLOEXEC if this flag is defined. + - Only use "__attribute__ ((unused))" if GCC >=2.8 is used. + - doc/Makefile.am: don't set docdir, automake handles it already. + + ngIRCd 17~rc1 (2010-10-11) + - New configuration option "NoZeroConf" to disable service registration at + runtime even if ngIRCd is compiled with support for ZeroConf (e.g. using + Howl, Avahi or on Mac OS X). + - New configuration option "SyslogFacility" to define the syslog "facility" + (the "target"), to which ngIRCd should send its log messages. + Possible values are system dependant, but most probably "auth", "daemon", + "user" and "local1" through "local7" are possible values; see syslog(3). + Default is "local5" for historical reasons. + - Dump the "internal server state" (configured servers, established + connections and known clients) to the console or syslog when receiving + the SIGUSR2 signal and debug mode is enabled. + - Enable the daemon to disable and enable "debug mode" on runtime using + signal SIGUSR1, when debug code is compiled in, not only on startup + using the command line parameters. + - Signal handler: added new 'delayed' signal handlers, including fallback + to deprecated sysv API. And removed global NGIRCd_SignalRehash variable. + - IO: add io_cloexec() to set close-on-exec flag. + - ng_ipaddr.h: include required assert.h header. + - Conn_SyncServerStruct(): test all connections; and work case insensitive + - configure script: correctly indent IPv6 yes/no summary output. + - Don't reset My_Connections[Idx].lastping when reading data, so the + client lag debug-output is working again. + - Implement user mode "x": hostname cloaking (closes: #102). + - Make configure switch "--docdir" work (closes: #108). + - Reformat and update FAQ.txt a little bit. + - INSTALL: mention SSL, IPv6, and changed handling of MotdFile. + - Change MOTD file handling: ngIRCd now caches the contens of the MOTD + file, so the daemon now requires a HUP signal or REHASH command to + re-read the MOTD file when its content changed. + - Startup: open /dev/null before chroot'ing the daemon. + - Allow IRC ops to change channel modes even without OperServerMode set. + - Allow IRC operators to use MODE command on any channel (closes: #100). + - Added mailmap file for git-[short]log and git-blame. + - Authenticated users should be registered without the "~" mark. + - Set NoPAM=yes in configuration files used for the testsuite. + - New configuration option "NoPAM" to disable PAM. + - Implement asynchronous user authentication using PAM, please see the + file doc/PAM.txt for details. + - Resolver: Implement signal handler and catch TERM signals. + - Don't set a penalty time when doing DNS lookups. + - Add some documentation for using BOPM with ngIRCd, see doc/Bopm.txt. + - Implement user mode "c": receive connect/disconnect NOTICEs. Note that + this new mode requires the user to be an IRC operator. + - ngircd.init: require "$network" and "$remote_fs" when stopping ngircd. + - Show SSL status in WHOIS output, numeric 275. + - Include correct header files when testing for arpa/inet.h (Closes: #105). + - Don't access already freed memory in IRC_KILL(). + - Fix "beeing" typo ... + - SSL/TLS: fix bogus "socket closed" error message. + +ngIRCd Release 16 (2010-05-02) + + - doc/SSL: remove line continuation marker + + ngIRCd 16~rc2 (2010-04-25) + - Updated some more copyright notices, it's 2010 already :-) + - Only compile in Get_Error() if really needed + - Fix gcc warning "ignoring return value of ..." + - Include netinet/in_systm.h alongside netinet/ip.h + - Include netinet/{in.h, in_systm.h} when checking for netinet/ip.h + - Only include if it exists + - Updated doc/Platforms.txt + - Enhace connection statistics counters: display total number of served + connections on daemon shutdown and when a new client connects using + the new numeric RPL_STATSCONN (250). + + ngIRCd 16~rc1 (2010-03-25) + - Various fixes to the build system and code cleanups. + - contrib/platformtest.sh: Only show latest commit. + - Updatet doc/Platforms.txt, added new README-Interix.txt documenting + how to tun ngIRCd on Microsoft Services for UNIX (MS SFU, MS SUA). + - Updated links to the ngIRCd homepage (bug tracker, mailing list). + - Added missing modes to USERMODES #define + - Show our name (IRCD=ngIRCd) in ISUPPORT (005) numeric + - Quote received messages of ERROR commands in log output. + - ngircd.conf manual page: document missing "Password" variable. + - Implement WEBIRC command used by some Web-IRC frontends. The password + required to secure this command must be configured using the new + "WebircPassword" variable in the ngircd.conf file. + - Don't use port 6668 as example for both "Ports" and "SSLPorts". + - Remove limit on max number of configured irc operators. + - Only link "nsl" library when really needed. + - A new channel mode "secure connections only" (+z) has been implemented: + Only clients using a SSL encrypted connection to the server are allowed + to join such a channel. + But please note three things: a) already joined clients are not checked + when setting this mode, b) IRC operators are always allowed to join + every channel, and c) remote clients using a server not supporting this + mode are not checked either and therefore always allowed to join. + +ngIRCd Release 15 (2009-11-07) + + - "ngircd --configtest": print SSL configuration options even when unset. + + ngIRCd 15~rc1 (2009-10-15) + - Do not add default listening port (6667) if SSL ports were specified, so + ngIRCd can be configured to only accept SSL-encrypted connections now. + - Enable IRC operators to use the IRC command SQUIT (insted of the already + implemented but non-standard DISCONNECT command). + - New configuration option "AllowRemoteOper" (disabled by default) that + enables remote IRC operators to use the IRC commands SQUIT and CONNECT + on the local server. + - Mac OS X: fix test for packagemaker(1) tool in Makefile and use gcc 4.0 + for Mac OS X 10.4 compatibility in the Xcode project file. + - Fix --with-{openssl|gnutls} to accept path names. + - Fix LSB header of Debian init script. + - Updated doc/Platforms.txt and include new script contrib/platformtest.sh + to ease generating platform reports. + - Fix connection information for already registered connections. + - Enforce upper limit on maximum number of handled commands. This implements + a throttling scheme: an IRC client can send up to 3 commands or 256 bytes + per second before a one second pause is enforced. + - Fix connection counter. + - Fix a few error handling glitches for SSL/TLS connections. + - Minor fixes to manual pages and documentation. + +ngIRCd Release 14.1 (2009-05-05) + + - Security: fix remotely triggerable crash in SSL/TLS code. + - BSD start script contrib/ngircd.sh has been renamed to ngircd-bsd.sh. + - New start/stop script for RedHat-based distributions: + contrib/ngircd-redhat.init, thanks to Naoya Nakazawa . + - Doxygen: update source code repository link to GIT. + - Debian: build ngircd-full-dbg package. + - Allow ping timeout quit messages to show the timeout value. + - Fix error handling on compressed links. + - Fix server list announcement. + - Do not remove hostnames from info text. + +ngIRCd Release 14 (2009-04-20) + + - Display IPv6 addresses as "[]" when accepting connections. + + ngIRCd 14~rc1 (2009-03-29) + - Updated Debian/Linux init script (see contrib/Debian/ngircd.init). + - Allow creation of persistent modeless channels. + - The INFO command reports the compile time now (if available). + - Spell check and enhance ngIRCd manual pages. + - Channel mode changes: break on syntax errors in MODE command. + - Support individual channel keys for pre-defined channels: introduce + new configuration variable "KeyFile" in [Channel] sections in ngircd.conf, + here a file can be configured for each pre-defined channel which contains + individual channel keys for different users. + - Remove limit on maximum number of predefined channels in ngircd.conf. + - Updated ngircd.spec file for building RPM packages. + - Add new and missing files to Mac OS X Xcode project, and update project. + - Reject masks with wildcard after last dot. + - TLS/SSL: remove useless error message when ssl connection is closed. + - Fix memory leak when a encrypted and compressed server link goes down. + (closes bug #95, reported by Christoph, fiesh@fiesh.homeip.net) + - Fix handling of channels containing dots. + (closes ug #93, reported by Gonosz Csiga) + +ngIRCd Release 13 (2008-12-25) + + - Updated documentation, especially doc/Services.txt and doc/SSL.txt. + - Make the test suite work on OpenSolaris. + + ngIRCd 13~rc1 (2008-11-21): + - New version number scheme :-) + - Initial support for IRC services, using a RFC1459 style interface, + tested with IRCServices (http://www.ircservices.za.net/) version 5.1.13. + For this to work, ngIRCd now supports server-server links conforming + to RFC 1459. New ngircd.conf(5) option: ServiceMask. + - Support for SSL-encrypted server-server and client-server links using + OpenSSL (configure: --with-openssl) or GNUTLS (configure: --with-gnutls). + New ngircd.conf(5) options: SSLPorts, SSLKeyFile, SSLKeyFilePassword, + SSLCertFile, SSLDHFile, and SSLConnect. + - Server local channels have been implemented, prefix "&", that are only + visible to users of the same server and are not visible in the network. + In addition ngIRCd creates a "special" channel &SERVER on startup and logs + all the messages to it that a user with mode +s receives. + - New make target "osxpkg" to build a Mac OS X installer package. + - Debug mode: enable support for GNU libc memory tracing (see mtrace(3)). + - SysV init script: use LSB logging functions, if available. + - Added some more FAQ entries (regarding logging and IRC operators). + - Allow IRC operators to overwrite channel limits. + - Support for enhanced PRIVMSG and NOTICE message targets. + - More tests have been added to the test-suite ("make check"), and two + servers are started for testing server-server linking. + - Added a timestamp to log messages to the console. + - New configuration option "NoIdent" to disable IDENT lookups even if the + daemon is compiled with IDENT support. + +ngIRCd 0.12.1 (2008-07-09) + + - Allow mixed line terminations (CR+LF/CR/LF) in non-RFC-compliant mode + - Don't allow stray \r or \n in command parameters + - --configtest: return non-zero exit code if there are errors + - Update ngIRCd manual pages + - Add option aliases -V (for --version) and -h (for --help). + - Fix 'no-ipv6' compile error. + - Make Listen parameter a comma-separated list of addresses. This also + obsoletes ListenIPv4 and ListenIPv6 options. If Listen is unset, it + is treated as Listen="::,0.0.0.0". + Note: ListenIPv4 and ListenIPv6 options are still recognized, + but ngircd will print a warning if they are used in the config file. + +ngIRCd 0.12.0 (2008-05-13) + + - Fix Bug: 85: "WHO #SecretChannel" that user is not a member of now returns + proper RPL_ENDOFWHO_MSG instead of nothing. (Ali Shemiran) + - Fix compile on FreeBSD 5.4 and AIX. + - If bind() fails, also print IP address and not just the port number. + + ngIRCd 0.12.0-pre2 (2008-04-29) + - IPv6: Add config options to disable ipv4/ipv6 support. - Don't include doc/CVS.txt in distribution archive, use doc/GIT.txt now! - Documentation: get rid of some more references to CVS, switch to GIT. - Get rid of cvs-version.* and CVSDATE definition. @@ -57,17 +312,17 @@ ngIRCd 0.11.0 (2008-01-15) ngIRCd 0.11.0-pre2 (2008-01-07) - SECURITY: IRC_PART could reference invalid memory, causing - ngircd to crash [from HEAD]. + ngircd to crash [from HEAD]. (CVE-2008-0285) ngIRCd 0.11.0-pre1 (2008-01-02) - Use dotted-decimal IP address if hostname is >= 64. - Add support for /STAT u (server uptime) command. - New [Server] configuration Option "Bind" allows to specify - the source ip adress to use when connecting to remote server. + the source IP address to use when connecting to remote server. - New configuration option "MaxNickLength" to specify the allowed maximum length of user nick names. Note: must be unique in an IRC network! - Enhanced the IRC+ protocol to support an enhanced "server handshake" and - enable server to recognice numeric 005 (ISUPPORT) and 376 (ENDOFMOTD). + enable server to recognize numeric 005 (ISUPPORT) and 376 (ENDOFMOTD). See doc/Protocol.txt for details. - Re-added doc/SSL.txt to distribution -- got lost somewhere!? - Fixes the wrong logging output when nested servers are introduced @@ -91,12 +346,13 @@ ngIRCd 0.11.0 (2008-01-15) ngIRCd 0.10.4 (2008-01-07) - SECURITY: IRC_PART could reference invalid memory, causing - ngircd to crash [from HEAD]. + ngircd to crash [from HEAD]. (CVE-2008-0285) ngIRCd 0.10.3 (2007-08-01) - SECURITY: Fixed a severe bug in handling JOIN commands, which could cause the server to crash. Thanks to Sebastian Vesper, . + (CVE-2007-6062) ngIRCd 0.10.2 (2007-06-08) @@ -231,13 +487,13 @@ ngIRCd 0.8.3 (2005-02-03) - Fixed a bug that could case a root exploit when the daemon is compiled to do IDENT lookups and is logging to syslog. Bug discovered by CoKi, , thanks a lot! - (http://www.nosystem.com.ar/advisories/advisory-11.txt) + (CVE-2005-0226; http://www.nosystem.com.ar/advisories/advisory-11.txt) ngIRCd 0.8.2 (2005-01-26) - Added doc/SSL.txt to distribution. - Fixed a buffer overflow that could cause the daemon to crash. Bug found - by Florian Westphal, . + by Florian Westphal, . (CVE-2005-0199) - Fixed a possible buffer underrun when reading the MOTD file. Thanks to Florian Westphal, . - Fixed detection of IRC lines which are too long to send. Detected by @@ -395,7 +651,7 @@ ngIRCd 0.7.0 (2003-05-01) - Better error reporting to clients on connect. - Enhanced manual pages ngircd(8) and ngircd.conf(5). - Documentation is now installed in $(datadir)/doc/ngircd. - - Enhanced hanling of NJOIN in case of nick collisions. + - Enhanced handling of NJOIN in case of nick collisions. ngIRCd 0.6.1, 2003-01-21