1.1.18+Gudbrandsdalsost

[w00t]

1.1.18 is now available for download, the latest of the stable 1.1.x series. This release rolls together a number of major (and minor) fixes, some critical which may cause crashes under some conditions.

Also include is a new module, m_ldapauth, for authing against an LDAP directory server. This module was based on the module written by Stskeeps for the (now defunct) Unreal 4, with a few changes to make it more secure.

This is a HIGHLY RECOMMENDED release. You SHOULD upgrade to it ASAP as it contains security fixes.

Major changes:

• dccallow: fix incorrect api usage
  
• mysql: fix race condition (crash) on unload
  
• core: LoopCall fix that fixes modules which call it in a command handler so that spanningtree doesnt break (useful for third party module authors only)
• snomasks: Accidentally hidden quits is fixed (it wasn't me, I swear --w00t)
  
• ssl: Reworded prompts in configure
  
• invisible: Fix multiple +Q and -Q notices (harmless)
  
• configreader: Better checking of newline values
  
• swhois: Don't desync when setting a title on an already-titled user.
  
• new module: m_ldapauth

I'd like to say a big thanks to the following people for their help in this release:

• Darom (working with us on the mysql patch)
• Skip (uhnames/namesx stuff)

Two followup posts will be added in this thread about hotpatching and the full changelog for anyone interested.

[w00t]

Hotpatching:

If you use a version prior to 1.1.18 and you do NOT use m_namesx, you should update to 1.1.18 on the fly, then load m_namesx to avoid using code vulnerable to a crash.

If you use either uhnames or namesx, you should reload both of those modules after upgrading.

The easiest way of course is to just upgrade directly to 1.1.18 so you may also take advantage of the other fixes.

[w00t]

Full changelog:

• 1.1.18+Gudbrandsdalsost release
• Default the max clients on windows to 10240
• We also need to re-order to make sure the length comprison comes BEFORE the append: different items may have different lengths and otherwise we'd be comparing length of the LAST item not the current
• Fix for bug #506 reported by Skip
• Don't desync when trying to remotely set swhois on a user who already has one
• Don't expire allows with length 0, they are permanent for the session (thx praetorian)
• Ricer up AllModulesReportReady further. If one fails, all fail, so returning false on first fail will save subsequent reduntant calls.
• Final tweak to AllModulesReportReady, should be there now.
• Fix bug where if two modules claim OnCheckReady, the core permits registration when the first of the set is ready, not when all are ready
• Allow IPv6 windows builds.
• Remove the note about requirement for anonymous bind
• Document binddn and bindauth
• Allow binding to non-anonymous DN for searches (i very much doubt most people are going to hack open their ldap tree like i did to get this module to work initially, smells of security hole)
• update svn:ignore for a few files
• Fix deprecation
• Now compiles, note that it seems a few functions are deprecated in the versions of openldap i have. FIXME?
• Merge copyrights
• Use some of unreal4's extra modules at request of a user. Original code of this module by Carsten Valdemar Munk based on m_sqlauth.
• Recommend that users symlink, not copy the files
• Backport update telling users to use -modupdate
• D'oh, this repeats the 'mode enabled' line once per channel. Thanks ElementAlchemist.
• Apply voidzero's suggestion for a better worded prompt re. ssl modules
• Fix bug #497, when we ported back the new cull list stuff, we didnt initialize a new bool in the userrec constructor which determines if the quit server notice line is shown, so its value is , undefined, and may hide the quit snomask.
• This took ages to process. Block all revisions in svnmerge that arent needed
• Fix an unneeded assignment in LoopCall that stops it being used for commands which are sent out 'raw' to other servers by spanningtree
• Merge in patch by Darom that fixes race condition when unloading m_mysql.so that may cause it to crash, fixes bug #438
• Merge in tweaks