X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd-alex.git;a=blobdiff_plain;f=NEWS;h=7cada91242d5501062001f3ce8d4d6d8dba90fca;hp=420c1d873a4e0728a76d02e9b02458ef44bb7051;hb=bd33bd770decd470577487fa4bd399cb1d8426fc;hpb=11240376a5008dea9e970f40df659931d1321e8b diff --git a/NEWS b/NEWS index 420c1d87..7cada912 100644 --- a/NEWS +++ b/NEWS @@ -9,8 +9,49 @@ -- NEWS -- -ngIRCd 21 - +ngIRCd 21 (2013-10-30) + + - Call arc4random_stir() in forked subprocesses, when available. This + is required by FreeBSD <10 and current NetBSD at least to correctly + initialize the "arc4" random number generator on these platforms. + + ngIRCd 21~rc2 (2013-10-20) + - Report the correct configuration file name on configuration errors, + support longer configuration lines, and warn when lines are truncated. + + ngIRCd 21~rc1 (2013-10-05) + - Actually KILL clients on GLINE/KLINE. (Closes bug #156) + - Add support to show all user links using the "STATS L" (uppercase) + command (restricted to IRC Operators). + - Implement configurable SSL cipher list selection for GnuTLS and OpenSSL + using the new configuration option "CipherList". In addition, this + changes the defaults to more secure values: "HIGH:!aNULL:@STRENGTH" for + OpenSSL, and "SECURE128" for GnuTLS. + - Show connection flag "s" (SSL) in RPL_TRACE{LINK|SERVER} messages: now + you can check if a server-to-server link is SSL-encrypted or not using + the IRC "TRACE" command. + - Implement the new configuration option "DefaultUserModes" which lists + user modes that become automatically set on new local clients right + after login. Please note that only modes can be set that the client + could set on itself, so you can't set "a" (away) or "o" (IRC Op), + for example! User modes "i" (invisible) or "x" (cloaked) etc. are + "interesting", though. (Closes bug #160) + - Add support for the new METADATA "account" property, which allows + services to automatically identify users after netsplits and across + service restarts. + - Implement a new configuration option "AllowedChannelTypes" that lists + all allowed channel types (channel prefixes) for newly created channels + on the local server. By default, all supported channel types are allowed. + If set to the empty string, local clients can't create new channels at + all, which equals the old "PredefChannelsOnly = yes" setting. + This change deprecates the "PredefChannelsOnly" variable, too, but it is + still supported and translated to the appropriate "AllowedChannelTypes" + setting. When the old "PredefChannelsOnly" variable is processed, a + warning message is logged. (Closes bug #152) + - Add support for "client certificate fingerprinting". When a client + passes an SSL certificate to the server, the "fingerprint" will be + forwarded in the network which enables IRC services to identify the + user using this certificate and not using passwords. - Implement a new configuration option "IncludeDir" in the "[Options]" section that can be used to specify a directory which can contain further configuration files and configuration file snippets matching @@ -40,7 +81,7 @@ ngIRCd 21 InspIRCd, for example -- but as usual, other numerics are in use, too, like 613 in UltimateIRCd ... Please note that neither the Operator (+o) not the "bot status" (+B) - of an IRC service id displayed in the output. + of an IRC service is displayed in the output. - Update systemd(8) example configuration files in ./contrib/ directory: the "ngircd.service" file now uses the "forking" service type which enhances the log messages shown by "systemctl status ngircd.service", @@ -52,6 +93,14 @@ ngIRCd 21 and then is used to output individual help texts to specific topics. Please see the file ./doc/Commands.txt for details. +ngIRCd 20.3 (2013-08-23) + + - This release is a bugfix release only, without new features. + - Security: Fix a denial of service bug (server crash) which could happen + when the configuration option "NoticeAuth" is enabled (which is NOT the + default) and ngIRCd failed to send the "notice auth" messages to new + clients connecting to the server (CVE-2013-5580). + ngIRCd 20.2 (2013-02-15) - This release is a bugfix release only, without new features. @@ -148,7 +197,7 @@ ngIRCd 20 (2012-12-17) the hash function. When "CloakHostSalt" is not set (the default), a random salt will be generated after each server restart. -ngIRCd Release 19.2 (2012-06-19) +ngIRCd 19.2 (2012-06-19) ngIRCd 19.2~rc1 (2012-06-13) - New configuration option "CloakHostModeX" to configure the hostname @@ -160,12 +209,12 @@ ngIRCd Release 19.2 (2012-06-19) and capablity "multi-prefix" which allows both the NAME and WHO command handlers to return more than one "class prefix" to the client. -ngIRCd Release 19.1 (2012-03-19) +ngIRCd 19.1 (2012-03-19) - Really include _all_ patches to build the Anope module into the distribution archive ... ooops! -ngIRCd Release 19 (2012-02-29) +ngIRCd 19 (2012-02-29) ngIRCd 19~rc1 (2012-02-12) - Update preliminary ngIRCd protocol module for Anope 1.9.6, which now @@ -233,7 +282,7 @@ ngIRCd Release 19 (2012-02-29) argument. Like unknown user and channel modes, these modes are saved and forwarded to other servers, but ignored otherwise. -ngIRCd Release 18 (2011-07-10) +ngIRCd 18 (2011-07-10) - Add preliminary ngIRCd protocol module for Anope 1.9 to contrib/Anope/. @@ -308,13 +357,13 @@ ngIRCd Release 18 (2011-07-10) vice-versa). The defaults are adjusted accordingly and the old variables in [Global] are still accepted, so there is no functional change. -ngIRCd Release 17.1 (2010-12-19) +ngIRCd 17.1 (2010-12-19) - Don't log critical (or worse) messages to stderr - Remove "error file" when compiled with debug code enabled - New numeric 329: get channel creation time on "MODE #chan" commands -ngIRCd Release 17 (2010-11-07) +ngIRCd 17 (2010-11-07) - doc: change path names in sample-ngircd.conf depending on sysconfdir @@ -352,7 +401,7 @@ ngIRCd Release 17 (2010-11-07) this new mode requires the user to be an IRC operator. - Show SSL status in WHOIS output, numeric 275. -ngIRCd Release 16 (2010-05-02) +ngIRCd 16 (2010-05-02) ngIRCd 16~rc2 (2010-04-25) - Enhace connection statistics counters: display total number of served @@ -372,7 +421,7 @@ ngIRCd Release 16 (2010-05-02) every channel, and c) remote clients using a server not supporting this mode are not checked either and therefore always allowed to join. -ngIRCd Release 15 (2009-11-07) +ngIRCd 15 (2009-11-07) ngIRCd 15~rc1 (2009-10-15) - Do not add default listening port (6667) if SSL ports were specified, so @@ -386,13 +435,13 @@ ngIRCd Release 15 (2009-11-07) a throttling scheme: an IRC client can send up to 3 commands or 256 bytes per second before a one second pause is enforced. -ngIRCd Release 14.1 (2009-05-05) +ngIRCd 14.1 (2009-05-05) - Security: fix remotely triggerable crash in SSL/TLS code. - Debian: build ngircd-full-dbg package. - Allow ping timeout quit messages to show the timeout value. -ngIRCd Release 14 (2009-04-20) +ngIRCd 14 (2009-04-20) ngIRCd 14~rc1 (2009-03-29) - Allow creation of persistent modeless channels. @@ -403,7 +452,7 @@ ngIRCd Release 14 (2009-04-20) individual channel keys for different users. - Remove limit on maximum number of predefined channels in ngircd.conf. -ngIRCd Release 13 (2008-12-25) +ngIRCd 13 (2008-12-25) ngIRCd 13~rc1 (2008-11-21): - New version number scheme :-) @@ -562,7 +611,7 @@ ngIRCd 0.7.0 (2003-05-01) Older news (sorry, only available in german language): -ngIRCd 0.6.0, 2002-12-24 +ngIRCd 0.6.0, 24.12.2002 - beim Schliessen einer Verbindung zeigt der Server nun vor dem ERROR noch eine Statistik ueber die empfangene und gesendete Datenmenge an.