Update to Jabberd 2.2.8:
From the release announcement:
What changed:
- User can message/query own resources
- Settable size for vCard image field
- Proper server disco#info answer
- Support for /etc/hosts lookup (as a last resort)
- many stability fixes
Security Note: r765 fixes a possible router crasher when an "evil"
directly connected component may crash router (thus the whole
server). Since components are considered trusted, this is a minor
issue. But once a remote user finds a way of triggering the "bad"
packet from a component, this might become a serious issue. You've
been warned.
Changelog:
* Proper check for valid arguments in nad_find_namespace(). Fixes Bug
#364816.
* fix for ser_string_get missing from storage_db.so by Michael Weiser.
Fixes Bug #345947
* Send all in-sess generated and not processed packets to the wild.
* Proper order of redirect and background job operators
* Merged support for settable vCard and vCard-avatar fields size by
Sylvain Rochet. Fixes Bug #336123
* Redirecting both stdout and stdin to /dev/null on daemon launch.
Fixes Bug #349714
* Give both disco#info and disco#items to disco#info query. Fixes Bug
#349134.
* End SM session when client disconnects before session start recieved
* Replying with presence-unsubscribed to presence-probe only. Fixes Bug
#341170.
* Added /etc/hosts support in s2s resolver. Thanks to Gebi Miguel.
Fixes#63
* New Visual Studio 2008 compatible README.win32
* Visual Studio 2008 (SP1) projects migration
* Use only necessary link libraries
* Use own OpenSSL libraries (i.e. libeay32.lib instad of libeay32MT.lib
from Shining Light Productions)
* Add OpenSSL directly to the build, avoiding problems with OpenSSL
installation on some systems
* Remove OpenSSL check (now it is installed inside jabberd2 folder)
* Check VS 2008 RTM on Vista and Windows 7 too
* Define target versions to Win2k and IE4 to avoid problems with Vista
SDK
+ cleanup junky comments
* util.h is local in util folder
* Add SSL_OP_NO_TICKET definition for older OpenSSL installations.
Fixes#256
* ANSI C compatibility, variable declaration at the beginning of the
block.
* SSL certificate loading fixes
* Implemented MIO read throttling in c2s. Now we pause reading
socket instead of disconnection on throttle.
* Removed scod module.
* Added a maximum stanza limit to c2s. This can be used to set an
upper limit on the number of individual requests that can be
made in a given window of time.
* Fix a bug in s2s where xmlns="jabber:client" would get appended
to an incoming stanza even though the stanza already had an
xmlns attribute set.
For a full ChangeLog see:
http://svn.xiaoka.com/jabberd2/tags/jabberd-2.2.2/ChangeLog