Changelog for ngircd-debugsource-20.2-1.14.x86_64.rpm :
Fri Feb 15 13:00:00 2013 vodooAATTvakw.ch
- Upgrade to bugfix release 20.2 (2013-02-15)
- Upstream changes:

* Security: Fix a denial of service bug in the function handling KICK
commands that could be used by arbitrary users to to crash the daemon.

* WHO command: Use the currently \"displayed hostname\" (which can be cloaked!)
for hostname matching, not the real one. In other words: don\'t display all
the cloaked users on a specific real hostname!

* configure: The header file \"netinet/in_systm.h\" already is optional in
ngIRCd, so don\'t require it in the configure script. Now ngIRCd can be
built on Minix 3 again :-)

* Return better \"Connection not registered as server link\" errors: Now ngIRCd
returns a more specific error message for numeric ERR_NOTREGISTERED(451)
when a regular user tries to use a command that isn\'t allowed for users but
for servers.

* Don\'t report ERR_NEEDMOREPARAMS(461) when a MDOE command with more modes
than nicknames is handled, as well as for channel limit and key changes
without specifying the limit or key parameters.
This is how a lot (all?) other IRC servers behave, including ircd2.11,
InspIRCd, and ircd-seven. And because of clients (tested with Textual and
mIRC) sending bogus MODE commands like \"MODE -ooo nick\", end-users got the
expected result as well as correct but misleading error messages ...

* Correctly detect when SSL subsystem must be initialized and take
outgoing connections (server links!) into account, too.

* autogen.sh: Enforce serial test harness on GNU automake >=1.13. The
new parallel test harness which is enabled by default starting with
automake 1.13 isn\'t compatible with our test suite.
And don\'t use \"egrep -o\", insetead use \"sed\", because it isn\'t portable
and not available on OpenBSD, for example.

Thu Jan 3 13:00:00 2013 vodooAATTvakw.ch
- Upgrade to bugfix release 20.1 (2013-01-02)
- Upstream changes:

* Allow ERROR command on server and service links only, ignore them and
add a penalty time on all other link types.

* Enforced mode setting by IRC Operators: Only check the channel user
modes of the initiator if he is joined to the channel and not an IRC
operator enforcing modes (which requires the configuration option
\"OperCanUseMode\" to be enabled), because trying to check channel user
modes of a non-member results in an assertion when running with debug
code or could crash the daemon otherwise. This closes bug #147, thanks
to James Kirwill for tracking this down!

* Fix build system to cope with spaces in path names.

* Code cleanups, mostly to fix build warnings on Cygwin.

Tue Dec 18 13:00:00 2012 vodooAATTvakw.ch
- Removed stripping of binary for SLE_11

Mon Dec 17 13:00:00 2012 vodooAATTvakw.ch
- Upgrade to upstream version 20
- Differences to version 19.x:
Starting with ngIRCd 20, users can \"cloak\" their hostname only when the
configuration variable \"CloakHostModeX\" (introduced in 19.2) is set.
Otherwise, only IRC operators, other servers, and services are allowed to
set mode +x. This prevents regular users from changing their hostmask to
the name of the IRC server itself, which confused quite a few people ;-)
- Upstream changes for ngIRCd 20~rc2 (2012-12-02):
- Rework cloaked hostname handling and implement the \"METADATA cloakhost\"
subcommand: Now ngIRCd uses two fields internally, one to store the
\"real\" hostname and one to save the \"cloaked\" hostname. This allows
\"foreign servers\" (aka \"IRC services\") to alter the real and cloaked
hostnames of clients without problems, even when the user itself issues
additional \"MODE +x\" and \"MODE -x\" commands.
- RPL_UMODEIS: send correct target name, even on server links.
- Update platformtest.sh to follow autoconf changes and only generate
the \"configure\" script when it is missing.
- Fix the test suite to correctly execute test scripts even when stdout
is redirected.
- Fix some compiler warnings on NetBSD and OpenBSD.
- Upstream changes for ngIRCd 20~rc1:
- Update doc/Services.txt: describe the upcoming version of Anope 1.9.8,
then including a protocol module for ngIRCd. And remove our own patches
in ./contrib/Anope because they aren\'t supported any more ...
- Implement new \"METADATA\" command which can be used by remote servers
and IRC services to update client metadata like the client info text
(\"real name\"), user name, and hostname, and use this command to
configure an cloaked hostname (user mode \"+x\") on remote servers:
This prevents \"double cloaking\" of hostnames and even cloaked
hostnames are in sync on all servers supporting \"METADATA\" now.
- Fix error message when trying to join non-predefined channels and the
\"PredefChannelsOnly\" configuration option is set.
- Implement new IRC \"SVSNICK\" command to allow remote servers (and IRC
services) to change nicknames of already registered users. The SVSNICK
command itself doesn\'t change the nickname, but it becomes forwarded
to the server to which the user is connected to. And then this server
initiates the real nickname changing using regular NICK commands.
This allows to run mixed networks with old servers not supporting the
SVSNICK command, because SVSNICK commands for nicknames on such servers
are silently ignored and don\'t cause a desynchronization of the network.
- Make server reconnect time a little bit more random, so that two
servers trying to connect to each other asynchronously don\'t try this
in exactly the same time periods and kick each other off ...
- Don\'t accept connections for servers already being linked: there was a
time frame that could result in one connection overwriting the other,
e. g. the incoming connection overwriting the status of the outgoing
one. And this could lead to all kind of weirdness (even crashes!) later
on: now such incoming connections are dropped.
- New configuration option \"MaxListSize\" to configure the maximum number
of channels returned by a LIST command. The default is 100, as before.
- Implement user mode \"b\", \"block messages\": when a user has set mode \"b\",
all private messages and notices to this user are blocked if they don\'t
originate from a registered user, an IRC Op, server or service. The
originator gets an error numeric sent back in this case,
ERR_NONONREG_MSG (486), which is used by UnrealIRCd, too. (Closes #144)
- WHOIS: Not only show RPL_WHOISHOST_MSG to local IRC operators, but show
it to all IRC operators in the network. And don\'t show it to anybody if
the \"more privacy\" configuration option is enabled. (Closes #134)
- Test suite: make expect scripts more verbose displaying dots for each
reply of the server that it is waiting for.
- WHOIS: Implement numeric RPL_WHOISMODES_MSG (379) and show user modes in
the reply of the WHOIS command for the user himself or, if MorePrivacy
isn\'t set, for request initiated by an IRC operator. (Closes #129)
- Implement channel mode \"V\" (invite disallow): If the new channel mode
\"V\" is set, the INVITE command becomes invalid and all clients get the
new ERR_NOINVITE_MSG (518) reply. (Closes #143)
- KICK-protect IRC services.
- Implement channel mode \"Q\" and user mode \"q\": Both modes protect users
from channel kicks: only IRC operators and servers can kick users having
mode \"q\" or in channels with mode \"Q\". (Closes #141)
- Debian: require \"telnet\" or \"telnet-ssl\" for building and enable
CHARCONV in ngircd-full[-dbg] variants.
- Send RPL_REHASHING (382) numeric if a REHASH command was accepted.
- Fix spelling and variable names in some log messages.
- Allow users to \"cloak\" their hostname only when the configuration
variable \"CloakHostModeX\" (introduced in 19.2) is set. Otherwise, only
IRC operators, other servers, and services are allowed to set the user
mode \"+x\": this prevents regular users from changing their hostmask to
the name of the IRC server itself, which confused quite a few people ;-)
(Closes #133)
- New configuration option \"OperChanPAutoOp\": If disabled, IRC operators
don\'t become channel operators in persistent channels when joining.
Enabled by default, which has been the behavior of ngIRCd up to this
patch. (Closes #135)
- Allow IRC operators to see secret (+s) channels in LIST command as long
as the \"MorePrivacy\" configuration option isn\'t enabled in the
configuration file. (Closes #136)
- Enhance build system: Support new (>=1.12) and old (<=1.11) GNU automake
versions, update checks for required and optional features, enable
colored test output of automake (if available), rename configure.in to
more modern configure.ac, include .mailmap and all build-system files in
distribution archives and no longer require a GIT tree to detect the
correct version string.
- Update documentation: add doc/Contributing.txt and include version
numbers in doc/Modes.txt.
- Free all listen ports on initialization: now listen ports can be
reconfigured on runtime using a configuration reload.
- Initialize SSL when needed only, and disable SSL on errors.
- Implement new (optional) IRC+ \"CHARCONV\" command to set a client
character set that the server translates all messages to/from UTF-8.
This feature requires the \"libiconv\" library and must be enabled using
the new \"--with-iconv\" option of the ./configure script. See
doc/Protocol.txt for details. (Closes #109)
- Allow limited punctuation in usernames, for better PAM integration.
- Correctly re-initialize signal handlers on RESTART commands.
- Show a warning on startup if the configuration file is not a full path:
ngIRCd is a long-running process and changes its working directory to
\"/\" to not block mounted filesystems and the like when running as daemon
(\"not in the foreground\"); therefore the path to the configuration file
must be relative to \"/\" (or the chroot() directory), which basically is
\"not relative\", to ensure that \"kill -HUP\" and the \"REHASH\" command work
as expected later on. (Closes #127)
- Make the \"&SERVER\" channel definable in a [Channel] configuration block,
which enables server operators to overwrite the built-in topic and
channel modes. (Closes #131)
- Don\'t limit list size of \"WHO #channel\" commands, because it makes no
sense to not return all the users in that channel, so I removed the
check. But if there are more than MAX_RPL_WHO(25) replies, the client
requesting the list will be \"penalized\" one second more, then 2 in
total. (Closes #125)
- Make ngIRCd buildable using the kqueue() IO interface on FreeBSD 4.x.
- Fix the \"NoticeAuth\" configuration option when using SSL connections and
enhance the message to show the hostname and IDENT reply of the client.
- Introduce numeric RPL_HOSTHIDDEN_MSG (396): This numeric is sent to the
client each time it changes its displayed hostname using \"MODE +/-x\",
and if \"CloakHost\" is set right after the MOTD has been sent.
- Fix USERHOST not displaying the correctly cloaked hostname.
- Implement user mode \"B\" (\"Bot flag\"): it is settable and unsettable by
every (non-restricted) client. This is how Unreal and InspIRCd do
behave, and so do we :-)
- Dynamically allocate memory for connection passwords: This a) saves
memory for clients not using passwords at all and b) allows for
\"arbitrarily\" long passwords.
- Implement channel mode \"M\": Only the server, identified users and IRC
operators are able to talk in such a channel.
- Block nicknames that are reserved for services and are defined using the
configuration variable \"ServiceMask\" in \"Server\" blocks; And this
variable now can handle more than one mask separated by commas.
- Now \"make uninstall\" removes the installed \"ngircd.conf\" file, if it is
still equal to our \"sample-ngircd.conf\" file and therefore hasn\'t been
modified by the user. If it has been modified, it isn\'t removed and a
notice is displayed to the user. And \"make install\" now displays a
message when no ngircd.conf file exists and the \"sample-ngircd.conf\"
file will be installed as a starting point.
- Add contrib/ngircd.service, a systemd service file for ngircd.
- Implemented XOP channel user modes: \"Half Op\" (\"+h\", prefix \"%\") can set
the channel modes +imntvIbek and kick all +v and normal users; \"Admin\"
(\"+a\", prefix \"&\") can set channel modes +imntvIbekoRsz and kick all +o,
+h, +v and normal users; and \"Owner\" (\"+q\", prefix \"~\") can set channel
modes +imntvIbekoRsz and kick all +a, +o, +h, +v and normal users.
- Implement hashed cloaked hostnames for both the \"CloakHost\" and
\"CloakHostModeX\" configuration options: now the admin can use the new
\'%x\' placeholder to insert a hashed version of the clients hostname,
and the new configuration option \"CloakHostSalt\" defines the salt for
the hash function. When \"CloakHostSalt\" is not set (the default), a
random salt will be generated after each server restart. (Closes #133)
- Fix spec file: strip binary for SLE_11
- Fix ngircd-default_config.patch
Uncomment GID/UID = ngircd by default
- Change description in ngircd.service

Sun Nov 18 13:00:00 2012 vodooAATTvakw.ch
- Removed -o option from useradd in specfile

Tue Nov 6 13:00:00 2012 vodooAATTvakw.ch
- Service file for systemd added

Tue Nov 6 13:00:00 2012 vodooAATTvakw.ch
- Update to 19.2:

* New configuration option \"CloakHostModeX\" to configure the hostname
that gets used for IRC clients which have user mode \"+x\" enabled.
Up to now, the name of the IRC server itself has been used for this,
which still is the default when \"CloakHostModeX\" isn\'t set.

* Add instructions for setting up Atheme IRC services.

* Implement support for IRC capability handling, the new \"CAP\" command,
and capablity \"multi-prefix\" which allows both the NAME and WHO command
handlers to return more than one \"class prefix\" to the client.

Fri Jun 15 14:00:00 2012 vodooAATTvakw.ch
- update to 19.1:

* Really include _all_ patches to build the Anope module into the
distribution archive ... ooops!

* Don\'t log \"ngIRCd hello message\" two times when starting up.

Sun Mar 4 13:00:00 2012 pascal.bleserAATTopensuse.org
- update to 19:

* new user modes (R, C) and channel modes (r, R) have been implemented

* the flood and abuse protection has been improved (for example, better limits for list replies)

* support for Anope IRC services has been enhanced

* exception lists (mode e) have been implemented

* several IRC commands are more standards-compliant now

* the IRC commands GLINE and KLINE have been implemented

Sat Jul 23 14:00:00 2011 pascal.bleserAATTopensuse.org
- update to 18

Sun Apr 17 14:00:00 2011 mrueckertAATTsuse.de
- update to version 17.1
- Don\'t log critical (or worse) messages to stderr
- Remove \"error file\" when compiled with debug code enabled
- New numeric 329: get channel creation time on \"MODE #chan\"
commands

Mon Nov 8 13:00:00 2010 pascal.bleserAATTopensuse.org
- update to version 17
- enable SSL support
- enable PAM support