ngIRCd - Next Generation IRC Server
- (c)2001-2008 Alexander Barton,
+ (c)2001-2010 Alexander Barton,
alex@barton.de, http://www.barton.de/
ngIRCd is free software and published under the
-- ChangeLog --
-ngIRCd-dev
-
- - Fixed Bug 75: KICK now handles comma-delimited lists.
- (Brandon Beresini, Bryan Caldwell)
- - Fixed Bug 83: ngIRCd chokes on 1-character messages.
- - Add support for modeless channels ("+channels").
- (Bryan Caldwell, Ali Shemiran)
-
-ngIRCd 0.12.0-pre2 (2008-04-29)
-
- - IPv6: Add config options to disabe ipv4/ipv6 support.
+ngIRCd Release 16 (2010-05-02)
+
+ - doc/SSL: remove line continuation marker
+
+ ngIRCd 16~rc2 (2010-04-25)
+ - Updated some more copyright notices, it's 2010 already :-)
+ - Only compile in Get_Error() if really needed
+ - Fix gcc warning "ignoring return value of ..."
+ - Include netinet/in_systm.h alongside netinet/ip.h
+ - Include netinet/{in.h, in_systm.h} when checking for netinet/ip.h
+ - Only include <netinet/in_systm.h> if it exists
+ - Updated doc/Platforms.txt
+ - Enhace connection statistics counters: display total number of served
+ connections on daemon shutdown and when a new client connects using
+ the new numeric RPL_STATSCONN (250).
+
+ ngIRCd 16~rc1 (2010-03-25)
+ - Various fixes to the build system and code cleanups.
+ - contrib/platformtest.sh: Only show latest commit.
+ - Updatet doc/Platforms.txt, added new README-Interix.txt documenting
+ how to tun ngIRCd on Microsoft Services for UNIX (MS SFU, MS SUA).
+ - Updated links to the ngIRCd homepage (bug tracker, mailing list).
+ - Added missing modes to USERMODES #define
+ - Show our name (IRCD=ngIRCd) in ISUPPORT (005) numeric
+ - Quote received messages of ERROR commands in log output.
+ - ngircd.conf manual page: document missing "Password" variable.
+ - Implement WEBIRC command used by some Web-IRC frontends. The password
+ required to secure this command must be configured using the new
+ "WebircPassword" variable in the ngircd.conf file.
+ - Don't use port 6668 as example for both "Ports" and "SSLPorts".
+ - Remove limit on max number of configured irc operators.
+ - Only link "nsl" library when really needed.
+ - A new channel mode "secure connections only" (+z) has been implemented:
+ Only clients using a SSL encrypted connection to the server are allowed
+ to join such a channel.
+ But please note three things: a) already joined clients are not checked
+ when setting this mode, b) IRC operators are always allowed to join
+ every channel, and c) remote clients using a server not supporting this
+ mode are not checked either and therefore always allowed to join.
+
+ngIRCd Release 15 (2009-11-07)
+
+ - "ngircd --configtest": print SSL configuration options even when unset.
+
+ ngIRCd 15~rc1 (2009-10-15)
+ - Do not add default listening port (6667) if SSL ports were specified, so
+ ngIRCd can be configured to only accept SSL-encrypted connections now.
+ - Enable IRC operators to use the IRC command SQUIT (insted of the already
+ implemented but non-standard DISCONNECT command).
+ - New configuration option "AllowRemoteOper" (disabled by default) that
+ enables remote IRC operators to use the IRC commands SQUIT and CONNECT
+ on the local server.
+ - Mac OS X: fix test for packagemaker(1) tool in Makefile and use gcc 4.0
+ for Mac OS X 10.4 compatibility in the Xcode project file.
+ - Fix --with-{openssl|gnutls} to accept path names.
+ - Fix LSB header of Debian init script.
+ - Updated doc/Platforms.txt and include new script contrib/platformtest.sh
+ to ease generating platform reports.
+ - Fix connection information for already registered connections.
+ - Enforce upper limit on maximum number of handled commands. This implements
+ a throttling scheme: an IRC client can send up to 3 commands or 256 bytes
+ per second before a one second pause is enforced.
+ - Fix connection counter.
+ - Fix a few error handling glitches for SSL/TLS connections.
+ - Minor fixes to manual pages and documentation.
+
+ngIRCd Release 14.1 (2009-05-05)
+
+ - Security: fix remotely triggerable crash in SSL/TLS code.
+ - BSD start script contrib/ngircd.sh has been renamed to ngircd-bsd.sh.
+ - New start/stop script for RedHat-based distributions:
+ contrib/ngircd-redhat.init, thanks to Naoya Nakazawa <naoya@sanow.net>.
+ - Doxygen: update source code repository link to GIT.
+ - Debian: build ngircd-full-dbg package.
+ - Allow ping timeout quit messages to show the timeout value.
+ - Fix error handling on compressed links.
+ - Fix server list announcement.
+ - Do not remove hostnames from info text.
+
+ngIRCd Release 14 (2009-04-20)
+
+ - Display IPv6 addresses as "[<addr>]" when accepting connections.
+
+ ngIRCd 14~rc1 (2009-03-29)
+ - Updated Debian/Linux init script (see contrib/Debian/ngircd.init).
+ - Allow creation of persistent modeless channels.
+ - The INFO command reports the compile time now (if available).
+ - Spell check and enhance ngIRCd manual pages.
+ - Channel mode changes: break on syntax errors in MODE command.
+ - Support individual channel keys for pre-defined channels: introduce
+ new configuration variable "KeyFile" in [Channel] sections in ngircd.conf,
+ here a file can be configured for each pre-defined channel which contains
+ individual channel keys for different users.
+ - Remove limit on maximum number of predefined channels in ngircd.conf.
+ - Updated ngircd.spec file for building RPM packages.
+ - Add new and missing files to Mac OS X Xcode project, and update project.
+ - Reject masks with wildcard after last dot.
+ - TLS/SSL: remove useless error message when ssl connection is closed.
+ - Fix memory leak when a encrypted and compressed server link goes down.
+ (closes bug #95, reported by Christoph, fiesh@fiesh.homeip.net)
+ - Fix handling of channels containing dots.
+ (closes ug #93, reported by Gonosz Csiga)
+
+ngIRCd Release 13 (2008-12-25)
+
+ - Updated documentation, especially doc/Services.txt and doc/SSL.txt.
+ - Make the test suite work on OpenSolaris.
+
+ ngIRCd 13~rc1 (2008-11-21):
+ - New version number scheme :-)
+ - Initial support for IRC services, using a RFC1459 style interface,
+ tested with IRCServices (http://www.ircservices.za.net/) version 5.1.13.
+ For this to work, ngIRCd now supports server-server links conforming
+ to RFC 1459. New ngircd.conf(5) option: ServiceMask.
+ - Support for SSL-encrypted server-server and client-server links using
+ OpenSSL (configure: --with-openssl) or GNUTLS (configure: --with-gnutls).
+ New ngircd.conf(5) options: SSLPorts, SSLKeyFile, SSLKeyFilePassword,
+ SSLCertFile, SSLDHFile, and SSLConnect.
+ - Server local channels have been implemented, prefix "&", that are only
+ visible to users of the same server and are not visible in the network.
+ In addition ngIRCd creates a "special" channel &SERVER on startup and logs
+ all the messages to it that a user with mode +s receives.
+ - New make target "osxpkg" to build a Mac OS X installer package.
+ - Debug mode: enable support for GNU libc memory tracing (see mtrace(3)).
+ - SysV init script: use LSB logging functions, if available.
+ - Added some more FAQ entries (regarding logging and IRC operators).
+ - Allow IRC operators to overwrite channel limits.
+ - Support for enhanced PRIVMSG and NOTICE message targets.
+ - More tests have been added to the test-suite ("make check"), and two
+ servers are started for testing server-server linking.
+ - Added a timestamp to log messages to the console.
+ - New configuration option "NoIdent" to disable IDENT lookups even if the
+ daemon is compiled with IDENT support.
+
+ngIRCd 0.12.1 (2008-07-09)
+
+ - Allow mixed line terminations (CR+LF/CR/LF) in non-RFC-compliant mode
+ - Don't allow stray \r or \n in command parameters
+ - --configtest: return non-zero exit code if there are errors
+ - Update ngIRCd manual pages
+ - Add option aliases -V (for --version) and -h (for --help).
+ - Fix 'no-ipv6' compile error.
+ - Make Listen parameter a comma-separated list of addresses. This also
+ obsoletes ListenIPv4 and ListenIPv6 options. If Listen is unset, it
+ is treated as Listen="::,0.0.0.0".
+ Note: ListenIPv4 and ListenIPv6 options are still recognized,
+ but ngircd will print a warning if they are used in the config file.
+
+ngIRCd 0.12.0 (2008-05-13)
+
+ - Fix Bug: 85: "WHO #SecretChannel" that user is not a member of now returns
+ proper RPL_ENDOFWHO_MSG instead of nothing. (Ali Shemiran)
+ - Fix compile on FreeBSD 5.4 and AIX.
+ - If bind() fails, also print IP address and not just the port number.
+
+ ngIRCd 0.12.0-pre2 (2008-04-29)
+ - IPv6: Add config options to disable ipv4/ipv6 support.
- Don't include doc/CVS.txt in distribution archive, use doc/GIT.txt now!
- Documentation: get rid of some more references to CVS, switch to GIT.
- Get rid of cvs-version.* and CVSDATE definition.
ngIRCd 0.11.0-pre2 (2008-01-07)
- SECURITY: IRC_PART could reference invalid memory, causing
- ngircd to crash [from HEAD].
+ ngircd to crash [from HEAD]. (CVE-2008-0285)
ngIRCd 0.11.0-pre1 (2008-01-02)
- Use dotted-decimal IP address if hostname is >= 64.
- Add support for /STAT u (server uptime) command.
- New [Server] configuration Option "Bind" allows to specify
- the source ip adress to use when connecting to remote server.
+ the source IP address to use when connecting to remote server.
- New configuration option "MaxNickLength" to specify the allowed maximum
length of user nick names. Note: must be unique in an IRC network!
- Enhanced the IRC+ protocol to support an enhanced "server handshake" and
- enable server to recognice numeric 005 (ISUPPORT) and 376 (ENDOFMOTD).
+ enable server to recognize numeric 005 (ISUPPORT) and 376 (ENDOFMOTD).
See doc/Protocol.txt for details.
- Re-added doc/SSL.txt to distribution -- got lost somewhere!?
- Fixes the wrong logging output when nested servers are introduced
ngIRCd 0.10.4 (2008-01-07)
- SECURITY: IRC_PART could reference invalid memory, causing
- ngircd to crash [from HEAD].
+ ngircd to crash [from HEAD]. (CVE-2008-0285)
ngIRCd 0.10.3 (2007-08-01)
- SECURITY: Fixed a severe bug in handling JOIN commands, which could
cause the server to crash. Thanks to Sebastian Vesper, <net@veoson.net>.
+ (CVE-2007-6062)
ngIRCd 0.10.2 (2007-06-08)
- Fixed a bug that could case a root exploit when the daemon is compiled
to do IDENT lookups and is logging to syslog. Bug discovered by CoKi,
<coki@nosystem.com.ar>, thanks a lot!
- (http://www.nosystem.com.ar/advisories/advisory-11.txt)
+ (CVE-2005-0226; http://www.nosystem.com.ar/advisories/advisory-11.txt)
ngIRCd 0.8.2 (2005-01-26)
- Added doc/SSL.txt to distribution.
- Fixed a buffer overflow that could cause the daemon to crash. Bug found
- by Florian Westphal, <westphal@foo.fh-furtwangen.de>.
+ by Florian Westphal, <westphal@foo.fh-furtwangen.de>. (CVE-2005-0199)
- Fixed a possible buffer underrun when reading the MOTD file. Thanks
to Florian Westphal, <westphal@foo.fh-furtwangen.de>.
- Fixed detection of IRC lines which are too long to send. Detected by
- Better error reporting to clients on connect.
- Enhanced manual pages ngircd(8) and ngircd.conf(5).
- Documentation is now installed in $(datadir)/doc/ngircd.
- - Enhanced hanling of NJOIN in case of nick collisions.
+ - Enhanced handling of NJOIN in case of nick collisions.
ngIRCd 0.6.1, 2003-01-21