|
While we are touching it, fix PR/45986 with the patch supplied therein
(thanks)
Changes from 2.5.2 to 2.5.3:
* When HDR/XHDR/XPAT were used on a new article coming into a newsgroup,
requesting a header not present in the overview database, the first
subsequent OVER/XOVER command did not show that article. A remap of
the overview data file was missing in nnrpd. Thanks to Sam
Varshavchik for the bug report.
* When a header field appeared more than once in an article, it was
missing from the overview data. OVER/XOVER, as well as HDR/XHDR/XPAT
using the overview, were therefore returning an empty field. The
content of the first occurrence is now returned, in accordance with
RFC 3977.
Perl and Python filters for innd now also properly initialize their
header variables with the first occurrence of header fields. (It is
still the last occurrence for the Perl filter for nnrpd.)
* Fixed a possible plaintext command injection during the negotiation of
a TLS layer. The vulnerability detailed in CVE-2011-0411 affects the
STARTTLS and AUTHINFO SASL commands. nnrpd now resets its read buffer
upon a successful negotiation of a TLS layer. It prevents malicious
commands, sent unencrypted, from being executed in the new encrypted
state of the session.
* Fixed a regression that occurred in INN 2.5.0 when leading whitespace
characters have been made significant in header field bodies. It
could lead INN to drop articles and throttle itself when running as a
slave because Xref: header fields generated by other news servers, or
even INN 2.4.6, could contain (valid) leading whitespace. Thanks to
Matija Nalis for having caught this bug.
* Fixed an invalid 431 response to CHECK commands when innd is paused:
the message-ID of the article to defer was missing. Also fixed
another issue in the messages innd replied; when an error occurred
during a write on a channel, a trailing extra junk byte was added to
the reply. Thanks to River Tarnell for these bug reports.
* It is now possible to properly generate daily statistics with
sendinpaths thanks to the new -k and -r flags that permit to control
the interval of days for processing dump files. The new -c flag
permits to send a copy of the generated e-mail to the newsmaster.
Also fixed an issue with statistics that could be missing or
duplicated for a couple of days when monthly sent.
The documentation has been updated and mentions a preferred daily run
of sendinpaths. This script is a complete rewrite in Perl, and is
based on Mohan Kokal's initial work.
* cnfsheadconf now properly recognizes continuation lines in
cycbuff.conf, that is to say lines ending with a backslash ("\").
Thanks to John F. Morse for the bug report.
* The order of CNFS buffers in a metacycbuff is now properly read and
written by cnfsheadconf. There previously was a confusion between
hexadecimal and decimal values. Thanks again to John F. Morse.
* When the -l flag is given to cnfsstat, the cycbuff.conf and
storage.conf files are now reloaded if they have been modified since
the previous output of cnfsstat.
* A single header field line is limited to 998 bytes, per RFC 5536.
innd was previously accepting, and also generating Xref: header field
lines, up to 1022 bytes. Now, nnrpd (acting as an injecting agent)
rejects articles which contain header field lines whose length exceeds
998 bytes. And innd (acting as a relaying or serving agent) no longer
checks that.
* nnrpd advertises the COUNTS, DISTRIBUTIONS, MODERATORS, MOTD and
SUBSCRIPTIONS variants of the LIST command in response to
CAPABILITIES. These commands already existed in nnrpd but RFC 6048
had not yet been published.
* Add support for LIST MOTD in innd. Consequently, the motd.news
configuration file which was previously used only by nnrpd is renamed
to motd.nnrpd (innupgrade takes care of the rename). innd uses the
new motd.innd file in *pathetc* for its message of the day.
* Fixed an issue at configure time that made INN wrongly assume that
OpenBSD (4.6) didn't support Unix-domain sockets. Thanks to Wim Lewis
for the patch.
* Fixed an issue on systems which do not have a working flock(2)
function (Solaris, for instance). mailpost and pullnews are reported
not to be usable on such systems. Many thanks to Dennis Davis for the
bug report.
A wrapper around shlock is now called in Perl scripts. The
INN::Utils::Shlock module has been added for that use.
* Fixed an issue in the Python access hook for nnrpd: it has not been
working since Python 2.5 on 64-bit platforms, owing to a change to
Python's C API, using a new Py_ssize_t type definition instead of int.
Thanks to Raphael Barrois for the patch.
* Improve the stability of the Perl filters for innd and nnrpd: properly
save and restore the stack pointer when needed.
* The Injection-Date: header, when present, is now used by innd and
makehistory to determine the posting date of an article. Otherwise,
the Date: header is used.
* controlchan now imposes a date cutoff on processing control articles.
The *artcutoff* parameter set in inn.conf is used. Otherwise, without
that cutoff, old control articles could be maliciously reinjected into
Usenet, and replayed. (An unsigned Injection-Date: header field could
be added to an article that only had a Date: header field.) A new -c
flag has been added to controlchan to disable the cutoff check, if
needed (usually when manually invoking the program).
* nnrpd no longer adds or updates the Path: header field when an article
is forwarded to a moderator. It could otherwise lead to rejects at
injection time when the article was approved by the moderator.
* The X-Trace: header field was not properly generated when an article
was locally posted. The field mentioning the IP address was skipped,
resulting in a wrong syntax for this header. The local "127.0.0.1" IP
address is now used. Besides, "localhost" is now mentioned instead of
an obscure "stdin" in injection header fields.
* Fixed a bug in the frequency innfeed logs its status: too many
useless lines were written to news.notice. Thanks to Florian
Schlichting for the fix.
* When unset in innfeed.conf, the *dynamic-method* parameter now
properly defaults to 3 (instead of 0) and *use-mmap* to false (instead
of true). These two values were already the recommended ones in the
documentation and the sample file. Note that *use-mmap* is only used
when innfeed is given file names to send instead of storage API
tokens, which is a fairly rare use case.
* innfeed no longer generates an error message (logged in news.err) when
a parameter is not defined in innfeed.conf. All the parameters have a
default value, so there is no need to warn the user if they are not
present in innfeed.conf. Thanks to Dieter Stussy for having reported
this problem.
* Implement an upper limit to the number of file descriptors innd can
handle. At most (FD_SETSIZE-1) file descriptors can be used. This
upper limit now overrides any superior number set with *rlimitnofile*
in inn.conf. Thanks to Steve Crook for the bug report.
* A default timeout on outgoing sockets (using NNTPconnect) has been
added by Florian Schlichting. For a long time, there have been
occasional problems with actsync (and probably other programs) that
would hang until manually killed or restarted.
* The flag -S has been added to innd by Florian Schlichting. When used,
innd reports the errors found in incoming.conf and exits.
* pullnews no longer stops processing newsgroups when an error occur
during its run (for instance when a newsgroup mentioned in the
configuration file is removed from an upstream server). Besides, it
can now use authentication when posting to the downstream server.
A few other minor bugs have been fixed as for the way pullnews counts
the articles.
* Fixed the way innreport handles leap years. It now properly generates
HTML reports; dates were assumed to be relative to the current year,
which may break their computation during for instance the whole 2012
leap year. Please note that no HTML reports have been lost, and that
they will appear when INN is updated to this new version.
* A new parameter has been added to inn.conf to determine whether the
status file that innd can write out (depending on the value of the
*status* parameter) is plain text or wrapped in HTML. It previously
only was a compile-time option, set to true by default. Florian
Schlichting added the *htmlstatus* parameter to provide a configurable
behaviour.
* It is now possible to run a script at the end of the execution of
innshellvars scripts. If a file named innshellvars.local,
innshellvars.pl.local or innshellvars.tcl.local is present and
executable in *pathetc*, then it will be executed by the corresponding
innshellvars script (respectively shell, INN::Config Perl module, and
Tcl). A typical use is to add or override variables.
* Add support for wire-formatted articles in scanspool.
* A lot of work on cleaning old perl4-style code has been done by
Florian Schlichting.
* inncheck now generates a proper non-zero exit value when errors are
found, and allows quiet mode with the -q flag. Florian Schlichting
has greatly improved this script in many regards, especially with a
config-syntax parser for incoming.conf, innfeed.conf, readers.conf and
storage.conf.
* inncheck now properly finds the boundaries of substituted variables in
newsfeeds thanks to Alexander Bartolich.
* docheckgroups no longer uses awk. On a few systems, the script was
failing because of the presence of an old version of awk that has a
limit in the size of the input it can handle. Processing large
newsgroups files was consequently impossible. docheckgroups now uses
Perl instead of awk, which solves the issue reported by John F. Morse.
* Other minor bug fixes and documentation improvements. In particular,
the *debug-shrinking*, *fast-exit* and *initial-sleep* keys in
innfeed.conf are now documented. The function "filter_end()", called
when Perl filtering is turned off, is also documented for the innd and
nnrpd Perl filters.
|
|
-- 2.0.0 release 20110823 "Ardenistiel" --
U029) Thomas E. Dickey <dickey@invisible-island.net>
ADD. update configure macros; switch to 2.13.20110430
ADD. --with-pkg-config configure switch
ADD. --with-textdomain configure switch
ADD. don't use hardcoded number of available colors; don't try to set
colors out of identified range
FIX. color.c, curses.c, init.c, main.c, tcurses.c, autoconf.h[in]
proto.h aclocal.m4, configure[.in], Makefile, Makefile.in
install-sh
U028) Dennis Preiser <dennis@d--p.de>
BUG. used preprocessor directives within snprintf which may be
implemented as a macro
BUG. fixed a typo
BUG. fixed several display problems in the !USE_CURSES case
BUG. fixed several display problems with non default foreground and
background colors.
BUG. dead increment
BUG. didn't unfold structured news_headers_to_display before calling
convert_to_printable which replaces \n with ?
BUG. scopes with just quick_{kill,select}_* rules got lost when
entering the scopes menu
BUG. last option in options 'M'enu may be invisible
BUG. unnecessary screen redraw in options 'M'enu
ADD. reject out of range background colors in menu/tinrc
ADD. removed some unnecessary variables
ADD. PageToggleAllHeaders
ADD. do not strip tabs from Subject or Organization in page header
ADD. tinrc.utf8_graphics to use UTF-8 characters for various graphics
FIX. extern.h, keymap.h, proto.h, tcurses.h, tin.h, tinrc.h, art.c
attrib.c, charset.c, color.c, config.c, cook.c, curses.c, feed.c
filter.c, group.c, help.c, init.c, keymap.c, lang.c, mail.c, misc.c
nntplib.c, options_menu.c, page.c, pgp.c, post.c, prompt.c, read.c
rfc2046.c, save.c, screen.c, select.c, string.c, tcurses.c, thread.c
tincfg.tbl, tin.1, tin.5, keymap.sample
U027) Urs Janssen <urs@tin.org>
BUG. used preprocessor directives within snprintf which may be
implemented as a macro
BUG. tinrc.ask_for_metamail had no effect
BUG. CHECK_SIGN for gpg was wrong (at least for gpg 1.4.x)
BUG. .so TLD wasn't allowed but is in use since 11/2010
BUG. .xxx gTLD wasn't allowed but is in use since 04/2011
BUG. .yu TLD was still allowed but is defunct since 04/2010
BUG. forged supersedes (-DFORGERY) were only allowed via 'x'(repost)
but not via 'D'(cancel)
BUG. superseding own articles in forgery conf. didn't add Cancel-Key
BUG. possible double fclose
ADD. allow -- in domain names in URL_REGEX and NEWS_REGEX
ADD. allow new IDN ccTLDs of Algeria, India, Korea, Morocco, Serbia
Singapore and Syria
REM. Kinyarwanda po files
REM. configure check for unused getpass(3)
ADD. cache getenv("NNTPSERVER") result early
ADD. -4 / -6 cmd. line switch
ADD. config.guess, config.sub update
ADD. configure check for stdint.h and inttypes.h
ADD. configure check for fsync()
FIX. help.c, init.c, lang.c, main.c, newsrc.c, nntplib.c, pgp.c, post.c
prompt.c save.c, extern.h, policy.h, tin.h, tincfg.tbl
Makefile[.in], autoconf.h[in], configure[.in], config.guess
config.sub, tin.1, rw.po
U026) Matt Anton <tin@syrius.org>
ADD. updated french translation
FIX. fr.po
-- 1.9.6 release 20101126 "Burnside" --
U025) Matt Anton <tin@syrius.org>
ADD. updated french translation
FIX. fr.po
U024) Toomas Soome <Toomas.Soome@microlink.ee>
ADD. updated estonian translation
FIX. et.po
U023) Joe Hansen <joedalton2@yahoo.dk>
ADD. updated danish translation
FIX. da.po
U022) Thomas E. Dickey <dickey@invisible-island.net>
BUG. _XOPEN_SOURCE was defined on darwin
ADD. CF_SIGWINCH - compile check for SIGWINCH
FIX. aclocal.m4, configure[.in], Makefile[.in]
U021) Dennis Preiser <dennis@d--p.de>
BUG. SIGWINCH at page level after a connection timeout lead to a crash
BUG. no SIGWINCH hadling in setup_check_article()
BUG. comments in references were not skipped
BUG. fixed some display problems in the !USE_CURSES case
ADD. info message on SearchRepeat without previous search
ADD. attachment level 'V' at the article-pager
ADD. URL level 'U' at the article-pager
ADD. cancel article 'D' to the group and thread level
ADD. shell escape '!' to the 'M'enu
ADD. workaround for buggy isspace() implementations
ADD. tinrc.abbreviate_groupname option
ADD. don't take a copy of the article in raw mode when reading from
local-spool
ADD. skip over text/plain parts in multibyte charsets which may contain
null-bytes
ADD. message/rfc822 mime-parts are now parsed and included text/plain
parts are shown to the user
BUG. highlighting for SearchBody didn't work
BUG. depending on used terminal highlighting sometimes ran too far
BUG. fixed several sorting/threading/filtering options which did not
instantly reflect changes when not beeing in select level
BUG. help string was truncated at cCOLS without checking if inside a
multibyte sequence
BUG. build_gline() miscalculates free space for utf-8 groups &
descriptions
FIX. art.c, attrib.c, color.c, config.c, cook.c, curses.c, filter.c
group.c, help.c, init.c, keymap.c, lang.c, mail.c, main.c, misc.c
newsrc.c, nntplib.c, options_menu.c, page.c, post.c, prompt.c
refs.c, rfc2046.c, rfc2047.c, save.c, screen.c, select.c, signal.c
string.c, tags.c, thread.c, extern.h, keymap.h, proto.h, rfc2046.h
tin.h, tinrc.h, tincfg.tbl, tin.1, tin.5, keymap.sample
U020) Urs Janssen <urs@tin.org>
ADD. minor manpage tweaking
ADD. config.guess, config.sub update
ADD. disallow postings to 'j' groups
ADD. disallow 198.51.100.0/24 and 203.0.113.0/24 in gnksa-checks
ADD. forbid "poster" in Newsgroups, warn about "example" in Newsgroups
ADD. forbid "poster" and a groupname in Followup-To, warn about "example"
in Followup-To
ADD. allow IDN ccTLDs in 'GNKSA'-parser
ADD. keep failed article in dead.article is server closes the
connection and no reconnection is done.
BUG. DEFAULT_VERBATIM_BEGIN_REGEX / DEFAULT_VERBATIM_END_REGEX allowed
tailing text in the line
BUG. da.po was missing from the tarball
BUG. x-posting to an unexisting group named first in Newsgroups caused
a crash
BUG. remembered capabilities over reconnects, they are flushed now
BUG. memleak on duplicated overview fields
BUG. don't send GROUP for groups not listed in the servers active file
when newsrc_active && list_active is set
FIX. active.c, art.c, attrib.c, config.c, curses.c, filter.c, init.c
lang.c, misc.c, newsrc.c, nntplib.c, post.c, rfc2047.c, save.c
select.c, sigfile.c, string.c, tcurses.c, thread.c, extern.h
nntplib.h, policy.h, tin.h, Makefile, tin.1, tin.5, config.guess
config.sub
-- 1.9.5 release 20091224 "Lochruan" --
U019) Urs Janssen <urs@tin.org>
ADD. MarkFeedRead ^X / MarkFeedUnread ^Y to thread-level
ADD. configure check for gethostbyname in libnetwork (Haiku)
ADD. check if SIGBUS == SIGSEGV (Haiku)
ADD. don't define HAVE_LINK on Haiku
ADD. config.guess, config.sub update
FIX. help.c, keymap.c, signal.c, thread.c, extern.h, tin.1, tin.5
configure.in, aclocal.m4, config.guess, config.sub
U018) Frederic Briere <fbriere@fbriere.net>
ADD. MarkFeedRead ^X / MarkFeedUnread ^W to page-level
FIX. feed.c, group.c, help.c, keymap.c, lang.c, extern.h, keymap.h, tin.h
U017) Joe Hansen <joedalton2@yahoo.dk>
ADD. initial danish translation
FIX. da.po
U016) Volker Borchert <v.borchert@vistecprivat.de>
BUG. used towupper() in the !MULTIBYTE_ABLE case
ADD. fallback for missing sys_errlist declaration
FIX. prompt.c, string.c, pcre/Makefile[.in]
U015) Dennis Preiser <dennis@d--p.de>
ADD. scope and attributes menu
ADD. help pages to the various menus
ADD. PageSkipIncludedText now skips over the next quoted block
ADD. runtime calculation of the filter file offset
ADD. '-w' now suggests the first given cmd-line group to post to
ADD. '-s', '-m' and '-G' cmd-line switches no longer change the
corresponding tinrc values
ADD. -G for the !NNTP-case
ADD. disable creation of cached overviews in getart_limit case
ADD. disable getart_limit in -u case
ADD. mail/pipe/print articles now work on ranges
ADD. NNTP read timeout
BUG. maildirs starting with '=' caused tin to hang after 's'aving an
article to a mailbox
BUG. savedirs starting with '+' caused tin to hang after 's'aving an
article to a file
BUG. in rare cases (aborted article load or '-' after cancel) one
article was incorrectly marked as unavailable
BUG. memleaks in canlock operations
BUG. fix a long overflow in print_bitmap_seq() when xmax = __LONG_MAX__
BUG. didn't create Message-ID when cancelling own article when
configured as FORGERY + EVIL_INSIDE
BUG. batch mode wasn't as quitet/as verbose as it could be
BUG. aborted prompt_getart_limit() lost previous value
BUG. MARK_FEED_READ/MARK_FEED_UNREAD in thread level with no selected
or tagged arts and selecting 'a' marks the base-art read/unead
BUG. signal handler not unset while piping
BUG. sort_article_type didn't always work correct with
thread_articles={2,3}
BUG. realloc in expand_ctrl_chars() caused a crash
FIX. active.c, art.c, attrib.c, auth.c, config.c, cook.c, curses.c
feed.c, filter.c, group.c, help.c, inews.c, init.c, keymap.c, lang.c
mail.c, main.c, makecfg.c, memory.c, misc.c, newsrc.c, nntplib.c
nrctbl.c, options_menu.c, page.c, post.c, prompt.c, read.c
rfc1524.c, rfc2046.c, save.c, select.c, sigfile.c, signal.c
tcurses.c, thread.c, tincfg.tbl, extern.h, keymap.h, nntplib.h
proto.h, tcurses.h, tin.h, tinrc.h, tin.1, tin.5
U014) Urs Janssen <urs@tin.org>
ADD. minor code cleanup
ADD. assume pid_t is long instead of int
ADD. comment out trace.o dependeny-rule if not configured --with-trace
ADD. disable abort-posting for cursor-keys on check-article screen
(debian bug #231070)
ADD. try AUTHINFO USER/PASS on -A if CAPABILITIES didn't announce any
supported auth methods
ADD. config.guess, config.sub update
ADD. configure check for towupper(), wcscat(), wcscpy() and wctomb() in
AM_MULTIBYTE_ABLE
ADD. disallow 192.0.2.0/24 in gnksa-checks
ADD. convert MOTD from UTF-8 to local-charset
ADD. warn about aliased groups
ADD. reduce number of "LIST ACTIVE grp" cmds send with -n if server
announces "LIST ACTIVE" capabillity
ADD. reduce number of "LIST NEWSGROUPS grp" cmds send with -n if server
announces "LIST NEWSGROUPS" capabillity
ADD. prefer "LIST COUNTS" over "LIST ACTIVE" when announced via
CAPABILITIES
BUG. NULL was only allowed once to unbound a keymapping
BUG. don't de/encode header(-fields) which can not hold RFC2047-encoded
words (but strings which may look like encoded words)
BUG. memleaks in cancel_article(), submit_mail_file(),
create_normal_article_headers()
BUG. expand_ctrl_chars() misscalculated tabexpansion on multiline input
BUG. uuencoded parts might get 'V'iewd twice
BUG. when pipelinming GROUP cmds. and server requires auth for some groups
tin got confused
BUG. attributes autoupdate on version change didn't work
BUG. entered wrong group at startup if a groupname was given on the
cmd.-line and there were new groups on the server
REM. AUTHINFO GENERIC support
FIX. active.c, art.c, attrib.c, auth.c, charset.c, color.c, config.c
cook.c, debug.c, filter.c, init.c, keymap.c, lang.c, mail.c, main.c
memory.c, misc.c, my_tmpfile.c, newsrc.c, nntplib.c, pgp.c, post.c
prompt.c, refs.c, rfc2047.c, save.c, select.c, xref.c, extern.h
nntplib.h, proto.h, tin.h, configure[.in], src/Makefile[.in]
aclocal.m4, tin.1, tin.5
|
