X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd-alex.git;a=blobdiff_plain;f=ChangeLog;h=1186276b88d21e6d549f432c923f621f04e6567b;hp=976a9f49e93acd0338a9df69b905b6c90ae985a4;hb=d0977258ee14a5178e98c9a00c064d90f0eac9d6;hpb=11240376a5008dea9e970f40df659931d1321e8b

diff --git a/ChangeLog b/ChangeLog
index 976a9f49..1186276b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -11,6 +11,26 @@
 
 ngIRCd 21
 
+  - Enforce "penalty times" on error conditions more consistently and in
+    more places. Now most error codes sent back from the IRC server to the
+    client should result in a 2 second "penalty".
+  - Implement a new configuration option "AllowedChannelTypes" that lists
+    all allowed channel types (channel prefixes) for newly created channels
+    on the local server. By default, all supported channel types are allowed.
+    If set to the empty string, local clients can't create new channels at
+    all, which equals the old "PredefChannelsOnly = yes" setting.
+    This change deprecates the "PredefChannelsOnly" variable, too, but it is
+    still supported and translated to the apropriate "AllowedChannelTypes"
+    setting. When the old "PredefChannelsOnly" variable is processed, a
+    warning message is logged. (Closes bug #152)
+  - Add support for "client certificate fingerprinting". When a client
+    passes an SSL certificate to the server, the "fingerprint" will be
+    forwarded in the network which enables IRC services to identify the
+    user using this certificate and not using passwords.
+  - IRC Operator names, as defined in ngircd.conf, are logged now when
+    handling successful OPER commands.
+  - Some error conditions while handling IRC commands, like "permission
+    denied" or "need more parameters", result in more penalty times.
   - The numeric replies of some commands became split too early which
     resulted in more numeric reply lines than necessary.
   - Implement a new configuration option "IncludeDir" in the "[Options]"
@@ -67,8 +87,9 @@ ngIRCd 21
     Please note that neither the Operator (+o) not the "bot status" (+B)
     of an IRC service id displayed in the output.
   - Exit message: use singular & plural :-)
-  - Add missing punctuation marks in log messages and adjust some
-    severity levels.
+  - autogen.sh: Check for autoconf/automake wrapper scripts
+  - Add missing punctuation marks in log messages, adjust some severity
+    levels, and make SSL-related messages more readable.
   - AUTHORS file: Update list of contributors.
   - Update systemd(8) example configuration files in ./contrib/ directory:
     the "ngircd.service" file now uses the "forking" service type which
@@ -81,6 +102,13 @@ ngIRCd 21
     and then is used to output individual help texts to specific topics.
     Please see the file ./doc/Commands.txt for details.
 
+ngIRCd 20.3 (2013-08-23)
+
+  - Security: Fix a denial of service bug (server crash) which could happen
+    when the configuration option "NoticeAuth" is enabled (which is NOT the
+    default) and ngIRCd failed to send the "notice auth" messages to new
+    clients connecting to the server (CVE-2013-5580).
+
 ngIRCd 20.2 (2013-02-15)
 
   - Security: Fix a denial of service bug in the function handling KICK