Unreal3.2.8.1
- Fixes a security issue, which is exploitable (crash) when allow::options::noident
is in use.
Unreal3.2.8
==[ NEW ]==
- set::level-on-join: this defines which privileges a user receives when creating a
channel, default is 'chanop', the only other available setting is 'none' (opless).
- Away notification through WATCH: This allows clients to receive a notification
when someone goes away or comes back, along with a reason, a bit like IM's.
There's probably no current client supporting this but it would be a nice feature
in notify lists. Client developers: see Changes file for full protocol details.
This feature can be disabled by setting set::watch-away-notification to 'no'.
- Spamfilter: Slow spamfilter detection: For each spamfilter, Unreal will check,
each time it executes, how long it takes to execute. When a certain threshold is
reached the IRCd will warn or even remove the spamfilter. This could prevent a
spamfilter from completely stalling the IRCd. Warning is configured through
set::spamfilter::slowdetect-warn (default: 250ms) and automatic deletion is
configured by set::spamfilter::slowdetect-fatal (default: 500ms).
You can set both settings to 0 (zero) to disable slow spamfilter detection.
This feature is currently not available on Windows.
- SSL: set::ssl::server-cipher-list can be used to limit the allowed ciphers
- SSL: To specify when an SSL session key should be renegotiated you can use
set::ssl::renegotiate-bytes <bytes> and set::ssl::renegotiate-timeout <seconds>.
- UHNAMES support: This sends the full nick!ident@host in NAMES which can be
used by clients for their IAL. mIRC, Klient, etc support this.
- There have also been some behavior changes, which can be considered NEW, see
next section (CHANGED).
==[ CHANGED ]==
- IPv6: On IPv6 servers you no longer have to use ::ffff:1.2.3.4 IP's for IPv4 in the
config file, you can use the simple 1.2.3.4 form, as they are converted automatically.
- When someone is banned and /PARTs, the part reason (comment) is no longer shown
- ChanMode +S/+c: now strips/blocks 'reverse' as well
- Smart banning is now disabled by default because it was too annoying, this means that
f.e. if there's a ban on *!*@*.com then you can still add a ban on *!*@*.aol.com
- except ban { } now also protects against ZLINEs and ban ip { }
- Modules: user modes and channel modes without parameters (eg: +X) no longer have
to be PERManent, this means they can be upgraded/reloaded/unloaded on-the-fly.
==[ MAJOR BUGS FIXED ]==
- Zip links issue (Overflowed unzipbuf)
- Crash issue with 3rd party modules that introduce new channel modes w/parameters
- Mac OS X: Various issues which prevented the IRCd from booting up
- Remote includes (constant) crash with new curl/c-ares versions
- A few rare crash issues, including a crash when linking to another server
- In case of clock adjustments, the IRCd will no longer freeze when the time is
adjusted backwards, nor will it incorrectly throttle clients when adjusted forward.
However, because clock adjustments (time shifts) of more than xx seconds are
so dangerous (and will still cause a number of issues), big warnings are now
printed when they happen.
Morale: synchronize your system clock, or use the built-in timesync feature.
==[ MINOR BUGS FIXED ]==
- CGI:IRC: Several IPv6 issues, both on IPv6 IRCd's and CGI:IRC gateways
- IP masks in oper::from::userhost sometimes didn't match when they should
- (G)ZLINE's on IPv6 users were sometimes rejected
- CHROOTDIR works again
- OperOverride fixes
- Throttling is now more accurate
- And more... see Changelog
- Updated c-ares to 1.4.0, TRE to 0.7.5
- chmode +L does no longer require chmode +l
- Oper blocks now can have CIDR, as in "userhost *@127.0.0.1/32";
- Services coders: SVSNOLAG/SVS2NOLAG (described in Changes) will allow a user to avoid fake lag (ie, flood as much as he/she wants).
- More intelligent accept() handling - that is, take in multiple times at a time instead of one per I/O loop
- A lot of bug fixes, basically.
the owner of all installed files is a non-root user. This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.
(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
unprivileged.mk. These two variables are lists of other bmake
variables that define package-specific users and groups. Packages
that have user-settable variables for users and groups, e.g. apache
and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
and ${UNPRIVILEGED_GROUP}.
(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
In brief:
Unreal3.2.6 Release Notes
==========================
==[ GENERAL INFORMATION ]==
- The purpose of the sections below (NEW, CHANGED, MINOR, etc) is to be a
SUMMARY of the changes in this release. There have been 80+ changes, and
trying to mention them all would be useless, see the Changelog for the full
list of changes.
==[ CHANGED ]==
- SSL: The server certificate and keys can now be reloaded via '/REHASH -ssl',
no restart needed anymore.
- loadmodule errors are improved
- Snomask 'N' will no longer show nick changes of U-lined servers
- Various doc updates ('/HELPOP ?EXTBANS', and some unreal32docs improvements)
==[ MAJOR BUGS FIXED ]==
- Crash if link::options::quarantine was used
- Another crash which could happen in some rare cases
- Throttling was not always being applied correctly
- Windows 2003: Fixed crash on-boot if no nameserver was set
- Windows: Fixed /RESTART not always working properly (leaving the ircd dead)
==[ MAJOR BUGS FIXED ]==
- Spamfilter was not always working properly
- MS Visual studio 2005 (8.x) was unable to compile Unreal and/or caused crashes
- Certain IPv6 listen blocks could crash the ircd on-boot/on-rehash
==[ MINOR BUGS FIXED ]==
- "Looking up your hostname" message was missing if
set::options::show-connect-notice was enabled (other messages, like "looking
up ident" were shown, however)
- It was sometimes impossible to update a link { } block: all old settings
would still be used, this happened if connfreq was low. This might also have
caused crashes.
- Netsynch problem, which could cause the wrong modes to be applied to a
channel in some rare cases.
- Setting set::maxdccallow to 0 (or lower) still allowed one entry to be added
- Spamfilter oversized-checking is no longer done when removing a spamfilter
- Operator count bug (there might still be others...)
- Some chinese-* charsets could not be selected individually
- No longer requiring a C++ compiler (was caused by resolver in 3.2.4)
- Added workaround for "make: Permission denied" bug in some FreeBSD's
RECOMMENDED is removed. It becomes ABI_DEPENDS.
BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo.
BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo.
BUILDLINK_DEPENDS does not change.
IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS
which defaults to "yes".
Added to obsolete.mk checking for IGNORE_RECOMMENDED.
I did not manually go through and fix any aesthetic tab/spacing issues.
I have tested the above patch on DragonFly building and packaging
subversion and pkglint and their many dependencies.
I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I
have used IGNORE_RECOMMENDED for a long time). I have been an active user
of IGNORE_RECOMMENDED since it was available.
As suggested, I removed the documentation sentences suggesting bumping for
"security" issues.
As discussed on tech-pkg.
I will commit to revbump, pkglint, pkg_install, createbuildlink separately.
Note that if you use wip, it will fail! I will commit to pkgsrc-wip
later (within day).
This is just a summary of changes, for full details see:
http://www.unrealircd.com/txt/unreal3_2_4_release_notes.txt
> ==[ MAJOR BUGS FIXED ]==
> - Two issues with an incorrect badword { } block in the config file causing a crash.
> - Incorrect TKL/*LINE causing a crash
> - Complete resolver recode: now using c-ares + caching to fix some (rare?) crash bugs and
> to make our code much more cleaner.
> - Using GCC4 caused a crash on-link.
> - Crash when a class block was removed and had any other blocks were referencing it.
> - OpenBSD crash on /REHASH.
> - Several AMD64 crash issues.
> - Sometimes a serious flood of notices was generated if link::options::nodnscache was used.
> - Spamfilter: action 'viruschan' combined with target 'user' caused crashes.
> - chinese-* nick characters support caused memory corruption.
> - Crash issue regarding SSL and junk snomask.
>
> ==[ MINOR BUGS FIXED ]==
> - Now properly resolves hostnames again that use CNAME delegation (got broken in 3.2.3).
> - Fedora Core w/IPv6 failed to compile.
> - A few read-after-free bugs that could have caused crashes.
> - ./Config was not loading the settings properly on Solaris 10
> - Crash if high ascii in set::network-name
> - Fixed advanced channel aliases not working properly
> - Fixed \* and \? escaping not always working properly (for example in ~r/~c bans).
extern int errno; /* some systems don't have this in errno.h */
after the following in a central header:
#ifndef _WIN32
#include <sys/errno.h>
#else
#include <errno.h>
#endif
Sure, e.g. NetBSD doesn't define errno in sys/errno.h, but why should it?
So, let's just fix this.
Fix patch-aa so libcares is properly detected
Fix options.mk so that libcurl is properly detected
Use PKG_OPTIONS_OPTIONAL_GROUPS as suggesed by wiz@ in private email
Use PKG_OPTIONS_REQUIRED_GROUPS for hub/leaf choice
Bump to nb1
formerly used by the DALnet IRC Network. Since development started on it
(around May 1999) many new features has been added, modified, and many bugs
fixed. Unreal runs both on *nix platforms, Amiga & Windows 95/98/2k/NT.
Some features to mention: Channel Halfops, No-color channel mode,
Strip-colors channel mode, channelmode +q & +a - protect modes, Oper and
Admin only channels, exception bans, Nokicks mode (channel and user), Flood
limiter, Channel links, Host cloaking, Net* Tech and Co-Admin modes, Whois
notifies, Foreign connects monitor, Oper suspend, G:Lines, T:Lines, channel
restriction (people can only go to these channels if enabled), Trojan/DCC
Deny, RPING/RPONG, Sethost family, Token in server<->server etc.
FDlists/High Traffic Mode, SOCKS check on connect, Speeded up server
synchs, limited WebTV Client support, /vhost, and many dreamforge
optimations. UnrealIRCd is aimed to be an advanced, not an easy IRCd.
Also includes SSL and IPv6 support.
