X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd-alex.git;a=blobdiff_plain;f=ChangeLog;h=8d730bf3e7846bb77231b6885ad56756677cab60;hp=0fe9a50e9b9c59c155457a5351fee2c6cd435ec2;hb=0e4e22a7a671d1e8efbc44bffd80062191f75c38;hpb=560c79615c37bd1149e90ab1a8663813ea99f6a3 diff --git a/ChangeLog b/ChangeLog index 0fe9a50e..8d730bf3 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,17 +1,405 @@ ngIRCd - Next Generation IRC Server - (c)2001-2003 by Alexander Barton, + (c)2001-2008 Alexander Barton, alex@barton.de, http://www.barton.de/ - ngIRCd ist freie Software und steht unter - der GNU General Public License. - - -- ChangeLog / Aenderungen -- - - -ngIRCd CVS-HEAD - + ngIRCd is free software and published under the + terms of the GNU General Public License. + + -- ChangeLog -- + + +ngIRCd Release 13 (2008-12-25) + + - Updated documentation, especially doc/Services.txt and doc/SSL.txt. + - Make the test suite work on OpenSolaris. + + ngIRCd 13~rc1 (2008-11-21): + - New version numer scheme :-) + - Initial support for IRC services, using a RFC1459 styel interface, + tested with IRCServices (http://www.ircservices.za.net/) version 5.1.13. + For this to work, ngIRCd now supports server-server links conforming + to RFC 1459. New ngircd.conf(5) option: ServiceMask. + - Support for SSL-encrypted server-server and client-server links using + OpenSSL (configure: --with-openssl) or GNUTLS (configure: --with-gnutls). + New ngircd.conf(5) options: SSLPorts, SSLKeyFile, SSLKeyFilePassword, + SSLCertFile, SSLDHFile, and SSLConnect. + - Server local channels have been implemented, prefix "&", that are only + visible to users of the same server and are not visible in the network. + In addition ngIRCd creates a "special" channel &SERVER on startup and logs + all the messages to it that a user with mode +s receives. + - New make target "osxpkg" to build a Mac OS X installer package. + - Debug mode: enable support for GNU libc memory tracing (see mtrace(3)). + - SysV init script: use LSB logging functions, if available. + - Added some more FAQ entries (regarding logging and IRC operators). + - Allow IRC operators to overwrite channel limits. + - Support for enhanced PRIVMSG and NOTICE message targets. + - More tests have been added to the test-suite ("make check"), and two + servers are started for testing server-server linking. + - Added a timestamp to log messages to the console. + - New configuration option "NoIdent" to disable IDENT lookups even if the + daemon is compiled with IDENT support. + +ngIRCd 0.12.1 (2008-07-09) + + - Allow mixed line terminations (CR+LF/CR/LF) in non-RFC-compliant mode + - Don't allow stray \r or \n in command parameters + - --configtest: return non-zero exit code if there are errors + - Update ngIRCd manual pages + - Add option aliases -V (for --version) and -h (for --help). + - Fix 'no-ipv6' compile error. + - Make Listen parameter a comma-seperated list of addresses. This also + obsoletes ListenIPv4 and ListenIPv6 options. If Listen is unset, it + is treated as Listen="::,0.0.0.0". + Note: ListenIPv4 and ListenIPv6 options are still recognized, + but ngircd will print a warning if they are used in the config file. + +ngIRCd 0.12.0 (2008-05-13) + + - Fix Bug: 85: "WHO #SecretChannel" that user is not a member of now returns + proper RPL_ENDOFWHO_MSG instead of nothing. (Ali Shemiran) + - Fix complie on FreeBSD 5.4 and AIX. + - If bind() fails, also print ip address and not just the port number. + + ngIRCd 0.12.0-pre2 (2008-04-29) + - IPv6: Add config options to disabe ipv4/ipv6 support. + - Don't include doc/CVS.txt in distribution archive, use doc/GIT.txt now! + - Documentation: get rid of some more references to CVS, switch to GIT. + - Get rid of cvs-version.* and CVSDATE definition. + - Report ERR_NOTONCHANNEL when trying to part a channel one is not member of. + - Testsuite: remove erroneous ConfUID setting in config file. + + ngIRCd 0.12.0-pre1 (2008-04-20) + - Include Mac OS X Xcode project in distribution archives. + - Do not exit on SIGHUP or /REHASH if the config file cannot opened. + - Add IPv6 support. + - Install a LaunchDaemon script to start/stop ngIRCd on Mac OS X. + - Implemented IRC commands INFO, SUMMON (dummy), and USERS (dummy) and + enhanced test suite to check these commands. (Dana Dahlstrom) + - RPL_WHOREPLY messages generated by IRC_WHO didn't include flags (*,@,+). + (Dana Dahlstrom) + - IRC_WHO now supports search patterns and will test this against user + nickname/servername/hostname, etc. as required by RFC 2812, Section 3.6.1. + (reported by Dana Dahlstrom) + - Add test cases for "WHO" command. (Dana Dahlstrom) + - Implement RFC 2812 handling of "0" argument to 'JOIN': must be treated + as if the user had sent PART commands for all channels the user is a + member of. (Dana Dahlstrom) + - Allow NOTICEs to be sent to a channel. (Fabian Schlager) + +ngIRCd 0.11.1 (2008-02-26) + + - Fix sending of JOIN commands between servers when remote server appended + mode flags. (Rolf Eike Beer) [from HEAD] + - Send "G" instead of "H" flag in WHO replies. (reported by Dana Dahlstrom) + - Under some circumstances ngIRCd issued channel MODE message with a + trailing space. (Dana Dahlstrom) [from HEAD] + +ngIRCd 0.11.0 (2008-01-15) + + ngIRCd 0.11.0-pre2 (2008-01-07) + - SECURITY: IRC_PART could reference invalid memory, causing + ngircd to crash [from HEAD]. (CVE-2008-0285) + + ngIRCd 0.11.0-pre1 (2008-01-02) + - Use dotted-decimal IP address if hostname is >= 64. + - Add support for /STAT u (server uptime) command. + - New [Server] configuration Option "Bind" allows to specify + the source ip adress to use when connecting to remote server. + - New configuration option "MaxNickLength" to specify the allowed maximum + length of user nick names. Note: must be unique in an IRC network! + - Enhanced the IRC+ protocol to support an enhanced "server handshake" and + enable server to recognice numeric 005 (ISUPPORT) and 376 (ENDOFMOTD). + See doc/Protocol.txt for details. + - Re-added doc/SSL.txt to distribution -- got lost somewhere!? + - Fixes the wrong logging output when nested servers are introduced + to the network as well as the wrong output of the LINKS command. + - Update Mac OS X Xcode project file for Xcode 3. + - Adjust test suite to be usable on HP/UX 11.11 :-) + - Fix code to compile using K&R C compiler and ansi2kr again. + - New config option NoDNS: Disables DNS lookups when clients connect. + - Fixed propagation of channel mode 'P' on server links. + - Numeric 317: implemented "signon time" (displayed in WHOIS result). + - Fixed code that prevented GCC 2.95 to compile ngIRCd. + - Adjust path names in manual pages according to "./configure" settings. + - Added new server configuration option "Passive" for "Server" blocks to + disable automatic outgoing connections (similar to -p option to ngircd, + but only for the specified server). (Tassilo Schweyer) + - Don't connect to a server if a connection to another server within the + same group is already in progress. + - Added support for the WALLOPS command. Usage is restricted to IRC + operators. + +ngIRCd 0.10.4 (2008-01-07) + + - SECURITY: IRC_PART could reference invalid memory, causing + ngircd to crash [from HEAD]. (CVE-2008-0285) + +ngIRCd 0.10.3 (2007-08-01) + + - SECURITY: Fixed a severe bug in handling JOIN commands, which could + cause the server to crash. Thanks to Sebastian Vesper, . + (CVE-2007-6062) + +ngIRCd 0.10.2 (2007-06-08) + + ngIRCd 0.10.2-pre2 (2007-05-19) + - Server links are allowed to use larger write buffers now (up to 50 KB). + + ngIRCd 0.10.2-pre1 (2007-05-05) + - Fix compressed server links (broken since 0.10.0). + - Predefined Channel configuration now allows specification of channel key + (mode k) and maximum user count (mode l). + - When using epoll() IO interface, compile in the select() interface as + well and fall back to it when epoll() isn't available on runtime. + - New configure option "--without-select" to disable select() IO API + (even when using epoll(), see above). + - Added support for IO APIs "poll()" and "/dev/poll". + - Reorganized internal handling of invite and ban lists. + +ngIRCd 0.10.1 (2006-12-17) + + - Fixed validation of server names containing digits. + - Update the "info text" of the local server after re-reading configuration. + - Changed Numerics 265 and 266 to follow ircd 2.11.x "standards". + - Allow PASS syntax defined in RFC 1459 for server links, too. + - Enhanced ISUPPORT message (005 numeric). + - New configuration option "PredefChannelsOnly": if set, clients can only + join predefined channels. + - Code cleanups: use "LogDebug(...)" instead of "Log(LOG_DEBUG, ...)", use + "strcspn()", unsigned vs. signed, use "const", fix whitespaces, ... + +ngIRCd 0.10.0 (2006-10-01) + + - Fixed file handle leak when daemon is not able to send MOTD to a client. + + ngIRCd 0.10.0-pre2 (2006-09-09) + - Fixed build problems with GCC option -fstack-protector. + - Minor documentation updates. + + ngIRCd 0.10.0-pre1 (2006-08-02) + - Validate "ServerName" (see RFC 2812, section 2.3.1). + - Enhanced DIE to accept a single parameter ("comment text") which is sent + to all locally connected clients before the server goes down. + - The ngIRCd handles time shifts backwards more gracefully now (the + timeout handling doesn't disconnect clients by mistake any more). + - Internal: Restructured connection handling (the connection ID is equal + to the file descriptor of the connection). + - Internal: Simplified resolver code. + - JOIN now supports more than one channel key at a time. + - Implemented numeric "333": Time and user name who set a channel topic. + - Enhanced the handler for PING and PONG commands: fix forwarding and enable + back-passing of a client supplied additional argument of PING. + - Changed handling of timeouts for unregistered connections: don't reset + the counter if data is received and disconnect clients earlier. + - Removed unnecessary #define of "LOCAL", now use plain C "static" instead. + - Channel topics are no longer limited to 127 characters: now the only limit + is the maximum length of an IRC command, i. e. 512 bytes (in practice, this + limits the topic to about 490 characters due to protocol overhead). + - Reverse DNS lookup code now checks the result by doing an additional + lookup to prevent spoofing. + - Added new IO layer which (optionally) supports epoll() and kqueue() in + addition to the select() interface. + +ngIRCd 0.9.2 (2005-10-15) + + - Fixed a bug that could cause the daemon to crash when outgoing server + connections can't be established. + - Fixed a bug that caused the daemon to leak file descriptors when no + resolver subprocesses could be created. + - Fixed server NOTICEs to users with "s" mode ("server messages"). + - Fixed a format string bug in "connection statistics" messages to clients. + +ngIRCd 0.9.1 (2005-08-03) + + - The KILL command killed much more than desired (including server links!) + when the target user is connected to a remote server. Bug introduced in + ngIRCd 0.9.0 ... Reported by , Thanks! + - Changed some constants to be "signed" (instead of unsigned) to solve + problems with old (pre-ANSI) compilers. + +ngIRCd 0.9.0 (2005-07-24) + + ngIRCd 0.9.0-pre1 (2005-07-09) + - Fixed maximum length of user names, now allow up to 9 characters. + - Cut off oversized IRC messages that should be sent to the network instead + of shutting down the (wrong) connection. + - Don't generate error messages for unknown commands received before the + client is registered with the server (like the original ircd). + - Never run with root privileges but always switch the user ID. + - Make "netsplit" messages RFC compliant. + - Fix handling of QUIT Messages: send only one message, even if the client + is member of multiple channels. + - Don't exit server if closing of a socket fails; instead ignore it and + pray that this will be "the right thing" ... + - Implemented the IRC function "WHOWAS". + - Don't enable assert() calls when not ./configure'd with --enable-debug. + - Fixed ./configure test for TCP Wrappers: now it runs on Mac OS X as well. + - Enhanced configure script: now you can pass an (optional) search path + to all --with-XXX parameters, e. g. "--with-ident=/opt/ident". + - Removed typedefs for the native C datatypes. + Use stdbool.h / inttypes.h if available. + - New configuration option "OperServerMode" to enable a workaround needed + when running an network with ircd2 servers and "OperCanUseMode" enabled + to prevent the ircd2 daemon to drop mode changes of IRC operators. + Patch by Florian Westphal, . + - Implemented support for "secret channels" (channel mode "s"). + - New configuration option "Mask" for [Operator] sections to limit OPER + commands to users with a specific IRC mask. Patch from Florian Westphal. + - Write "error file" (/tmp/ngircd-XXX.err) only if compiled with debug + code ("--enable-debug") and running as daemon process. + - Don't create version information string each time a client connects + but instead on server startup. By Florian Westphal. + - New configuration variable "PidFile", section "[Global]": if defined, + the server writes its process ID (PID) to this file. Default: off. + Idea of Florian Westphal, . + - Code cleanups from Florian Westphal, . + - Raised the maximum length of passwords to 20 characters. + - Fixed a memory leak when resizing the connection pool and realloc() + failed. Now we don't fall back to malloc(), which should be sane anyway. + Patch from Florian Westphal, . + - Added support for the Howl (http://www.porchdogsoft.com/products/howl/) + Rendezvous API, in addition to the API of Apple (Mac OS X). The available + API will be autodetected when you call "./configure --with-rendezvous". + - Made ngIRCd compile on HP/UX 10.20 with native HP pre-ANSI C compiler and + most probably other older C compilers on other systems. + - When the daemon should switch to another user ID (ServerID is defined in + the configuration file) and is not running in a chroot environment, it + changes its working directory to the home directory of this user. This + should enable the system to write proper core files when not running with + root privileges ... + +ngIRCd 0.8.3 (2005-02-03) + + - Fixed a bug that could case a root exploit when the daemon is compiled + to do IDENT lookups and is logging to syslog. Bug discovered by CoKi, + , thanks a lot! + (CVE-2005-0226; http://www.nosystem.com.ar/advisories/advisory-11.txt) + +ngIRCd 0.8.2 (2005-01-26) + + - Added doc/SSL.txt to distribution. + - Fixed a buffer overflow that could cause the daemon to crash. Bug found + by Florian Westphal, . (CVE-2005-0199) + - Fixed a possible buffer underrun when reading the MOTD file. Thanks + to Florian Westphal, . + - Fixed detection of IRC lines which are too long to send. Detected by + Florian Westphal, . + - Fixed return values of our own implementation of strlcpy(). The code has + been taken from rsync and they fixed it, but we didn't until today :-/ + It has only been used when the system didn't implement strlcpy by itself, + not on "modern" systems. Florian Westphal, . + +ngIRCd 0.8.1 (2004-12-25) + + - Autoconf: Updated config.guess and config.sub + - Added some more debug code ... + - Fixed wrong variable names in output of "ngircd --configtest". + - Debian: Fixed the name of the "default file" in the init script for + ngircd-full packages. And do the test if the binary is executable after + reading this file. + - Enhanced the "test suite": please have a look at src/testsuite/README! + +ngIRCd 0.8.0 (2004-06-26) + + - Fixed wrong buffer size calculation for results of the resolver. + + ngircd 0.8.0-pre2 (2004-05-16) + - Enhanced logging to console when running in "no-detached mode": added + PID and log messages of resolver sub-processes. + - Fixed host name lookups when using IDENT user lookups. + - "make clean" and "make maintainer-clean" remove more files now. + + ngIRCd 0.8.0-pre1 (2004-05-07) + - Two new configuration options: "ChrootDir" and "MotdPhrase", thanks to + Benjamin Pineau . Now you can force the daemon to change + its root and working directory to something "safe". MotdPhrase is used + to define an "MOTD string" instead of a whole file, useful if the + "real" MOTD file would be outside the "jail". + - INVITE- and BAN-lists become synchronized between IRC+ servers when + establishing new connections, if the peer supports this as well. + - Reorganized autogen.sh and configure scripts. + - Fixed a wrong assert() which could cause the daemon to exit spuriously + when closing down connections. + - Better logging of decompression errors returned by zlib. + - Servers other than the destination server didn't clean up the invite + list of an "invite-only" channel properly when an INVITE'd user joined. + - Changed the reply of the MODE command to match the syntax of the + original ircd exactly: the unnecessary but missing ":" before the last + parameter has been added. + - Fixed TRACE: don't output "Serv" lines for ourself; display more info. + - Results of the resolver (hostnames and IDENT names) are discarded after + the client is successfully registered with the server. + - Better logging while establishing and shutting down connections. + - The type of service (TOS) of all sockets is set to "interactive" now. + - Added short command line option "-t" as alternative to "--configtest". + - Added optional support for "IDENT" lookups on incoming connections. You + have to enable this function with the ./configure switch "--with-ident". + The default is not to do IDENT lookups. + +ngIRCd 0.7.7 (2004-02-05) + + - The info text ("real name") of users is set to "-" if none has been + specified using the USER command (e. g. "USER user * * :"). Reason: + the original ircd doesn't like empty ones and would KILL such users. + - Fixed (optional) TCP Wrapper test which was broken and could result in + false results. Thanks to Fuminori Tanizaki ! + - Removed "USE_" prefixes of configuration #defines. + +ngIRCd 0.7.6 (2003-12-05) + + - Fixed abort() ("server crash") when INVITE'ing users to nonexistent + channels. Bug found by . + - Extended version numbering of CVS versions (added date). + - Enhanced/fixed doc/Protocol.txt; + +ngIRCd 0.7.5 (2003-11-07) + + - Fixed ban behavior: users which are banned from a channel can't no + longer send PRIVMSG's to this channel (fixes Bug #47). + - Fixed and enhanced the "penalty handling" of the server: commands that + require more resources block the client for a short time. + - Changed the internal time resolution to one second. + - New configuration variable "MaxConnectionsIP" to limit the number of + simultaneous connections from a single IP that the server will accept. + This configuration options lowers the risk of denial of service attacks + (DoS), the default is 5 connections per client IP. + - Fixed build problems under Mac OS X 10.3. + - Use "-pipe" when compiling with gcc, speeds things up a little :-) + - Added new configuration variable "Listen" to bind all listening + sockets of the server to a single IP address. + - Suppress misleading error message of diff during make run. + - Enhanced test-suite and made it work on GNU/Hurd. + - Fixed minor typo in debug output :-) + +ngIRCd 0.7.1 (2003-07-18) + + - Included files to build Debian packages (located in "debian/"). + - Updated config.guess and config.sub to newer upstream versions. + - NJOIN propagates user channel modes correctly again ... Upsa. + - Made Makefile more compatible with "make -j". + - Added support for GNU/Hurd. + - Fixed a compiler warning related to an unnecessary assert(). + - Enhanced VERSION command when using debug versions. + +ngIRCd 0.7.0 (2003-05-01) + + - "ServerName" is checked better now: a dot (".") is required. + - The KILL command verifies and logs more parameters. + + ngIRCd 0.7.0-pre2 (2003-04-27) + - CVS build system fixes (made autogen.sh more portable). + - Fixed compilation and test-suite on Solaris (tested with 2.6). + - New documentation file "doc/Platforms.txt" describing the status of + ngIRCd on the various tested platforms. + - Test for broken GCC on Mac OS X and disable "-pedantic" in this case. + - Disable "-ansi" on Cygwin: system headers are incompatible. + - The server tried to connect to other servers only once when DNS or + socket failures occurred. + - Fixed --configtest: There is no variable "ServerPwd", it's "Password". + + ngIRCd 0.7.0-pre1 (2003-04-22) - New signal handler (more secure, actions are executed outside). - GCC: the compiler is now called with more warning options enabled. - Replaced a lot of str[n]cpy(), str[n]cat() and sprintf() calls with the @@ -19,7 +407,7 @@ ngIRCd CVS-HEAD that don't support strlcpy() and strlcat(), these functions are included in the libngportab now (with prototypes in portab.h). - If the server can't close a socket, it panics now. This is an error that - can't occure during normal operation so there is something broken. + can't occur during normal operation so there is something broken. - The order of log messages during disconnects is more "natural" now ;-) - Cleaned up handling of server configuration structures: modifying and removing servers during runtime works more reliable now. @@ -30,15 +418,28 @@ ngIRCd CVS-HEAD configured server and "CONNECT " to add a new server (ngIRCd tries to connect new servers only once!). - Added DISCONNECT command ("DISCONNECT ") to disable servers. - - Restructured the documentation: Now the main language is english. + - Restructured the documentation: Now the main language is English. The + german documentation has been removed (until there is a maintainer). - Enhanced killing of users caused by a nickname collision. - Better error detection for status code ("numerics") forwarding. - Moved tool functions to own library: "libngtool". - New command TRACE (you can trace only servers at the moment). - New command HELP that lists all understood commands. - - There should no longer remain "unknown connections" (see e.g. LUSRS) + - There should no longer remain "unknown connections" (see e.g. LUSERS) if an outgoing server link can't be established. - Added AC_PREREQ(2.50) to configure.in for better autoconf compatibility. + - Conn_Close() now handles recursive calls for the same link correctly. + - ngIRCd can register itself with Rendezvous: to enable support pass the + new switch "--with-rendezvous" to configure. + - Added support for TCP Wrappers library: pass "--with-tcp-wrappers" to + configure to enable it. + - Changed some configure options to use "--with"/"--without" as prefix + instead of "--enable"/"--disable": "--without-syslog", "--without-zlib", + "--with-tcp-wrappers", and "--with-rendezvous". + - Better error reporting to clients on connect. + - Enhanced manual pages ngircd(8) and ngircd.conf(5). + - Documentation is now installed in $(datadir)/doc/ngircd. + - Enhanced hanling of NJOIN in case of nick collisions. ngIRCd 0.6.1, 2003-01-21 @@ -51,7 +452,7 @@ ngIRCd 0.6.1, 2003-01-21 - The server sets a correct default AWAY message now when propagating between servers (bug introduced in 0.6.0). - Fixed up and enhanced CHANINFO command: channel keys and user limits - are syncronized between servers now, too. + are synchronized between servers now, too. - MODE returns the key and user limit for channel members correctly now. - Non-members of a channel could crash the server when trying to change its modes or modes of its members. @@ -417,7 +818,3 @@ ngIRCd 0.0.2, 06.01.2002 ngIRCd 0.0.1, 31.12.2001 - erste oeffentliche Version von ngIRCd als "public preview" :-) - - --- -$Id: ChangeLog,v 1.176 2003/01/31 18:29:06 alex Exp $