Hi All!
I just published the next release of ngIRCd – a free, portable and
lightweight Internet Relay Chat server for small or private networks:
In this release, the most notable change is a fix for a bug that could
result in a 100% CPU usage on a single core (DoS), which can be
triggered on any connection. ngIRCd does not crash and keeps serving
other connections, but can render the system slow and unstable because
of the high CPU usage, until the malicious connection times out.
--> Therefore all users of ngIRCd are advised to upgrade to ngIRCd 28!
You can download ngIRCd 28 from the download section on our homepage at
https://ngircd.barton.de. The primary download locations are:
- https://github.com/ngircd/ngircd/releases
- https://ngircd.barton.de/pub/ngircd/
Please report any issues and glitches you find to the GitHub issue
tracker (https://github.com/ngircd/ngircd/issues) and use the mailing
list (ngircd(a)lists.barton.de) and the #ngircd channel on IRC
(<irc://irc.barton.de/ngircd>) for questions and discussions.
Enhancements and additions to the documentation, manual pages and the
homepage are welcome as well!
The following noteworthy changes are listed in the `NEWS` file
(https://github.com/ngircd/ngircd/blob/master/NEWS)
- Truncate long KICK reasons and topics: KICKLEN is advertised in
ISUPPORT but was not enforced. And TOPICLEN is advertised, but was
so high it was guaranteed not to be fully sendable to other clients.
Thanks to Valentin Lorentz <progval+git(a)progval.net>!
Closes #339.
- Properly disconnect clients that send data without a command
terminator: A connection that sent 512 or more bytes (the maximum
length of an IRC command) containing no CR or LF -- for example
binary garbage or a TLS ClientHello accidentally (or deliberately)
sent to a plain-text listening port -- was never processed and only
closed after a timeout. And until then it kept the main loop
busy-spinning pinning one CPU core at 100%!
Thanks to James <admin(a)floretos.com>!
Closes #343.
- Implement new configuration option "DefaultChannelModes": This new
configuration option lists channel modes that become automatically
set on new channels on creation. Default: set no modes (like before).
Closes #333.
- Handle clients which erroneously send passwords for non-password
protected servers by ignoring passwords when not configured/needed.
Closes #332.
- Use the last value set for "Listen" (Global) and "Mask" (Operator).
Do not ignore newer configuration value, always use the latest value
set.
- MODE: Reply with ERR_NOSUCHCHANNEL when the target is a channel
While it is common for IRC servers to use ERR_NOSUCHNICK instead of
ERR_NOSUCHCHANNEL when a target can be either a channel or a nick,
it seems every other IRCd but UnrealIRCd uses ERR_NOSUCHCHANNEL in
this particular case.
Closes #319.
And the ChangeLog
(https://github.com/ngircd/ngircd/blob/master/ChangeLog) has even more
details and lists all the fixes, minor enhancements and tweaks.
Thanks a lot to all contributors & testers!
And as usual: Happy IRC'ing!
Alex
