From 0d635ce5c3fc4d9ba67f3586e4b66783e1862ec0 Mon Sep 17 00:00:00 2001 From: Shivaram Lingamneni Date: Sun, 3 Nov 2019 03:13:50 -0500 Subject: [PATCH 1/5] import v1.1.1 changelog --- CHANGELOG.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6993cf1d..10147be3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -16,6 +16,20 @@ New release of Oragono! ### Fixed +## [1.1.1] - 2019-07-21 +Oragono 1.1.1 is a bugfix release for flaws in message handling, including one with security implications. + +Many thanks to [@streaps](https://github.com/streaps) for reporting issues. + +### Upgrade notes + +This release does not change the database or configuration file format. + +### Security +* Previous releases of Oragono would incorrectly relay chat messages containing the `\r` byte. An attacker could use this to spoof protocol messages from the server (depending on the implementation of the victim's client). This has been fixed. (#610) + +### Fixed +* Fixed incorrect rejection of messages with multiple spaces (#602, thanks [@streaps](https://github.com/streaps)!) ## [1.1.0] - 2019-06-27 We're pleased to announce Oragono version 1.1.0. This version has a number of exciting improvements, including: From e62475633941768cf495920fbe4fce5ab107f8dd Mon Sep 17 00:00:00 2001 From: Shivaram Lingamneni Date: Sun, 3 Nov 2019 05:29:24 -0500 Subject: [PATCH 2/5] update changelog for 1.2.0-rc1 --- CHANGELOG.md | 43 +++++++++++++++++++++++++++++++++++++------ 1 file changed, 37 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 10147be3..fdb26b85 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,20 +1,51 @@ # Changelog All notable changes to Oragono will be documented in this file. -## Unreleased -New release of Oragono! +## [1.2.0-rc1] - 2019-11-04 +We're pleased to be publishing the release candidate for 1.2.0 (the official release should follow in a week or two). This version contains bug fixes and minor improvements. + +Many thanks to [@bogdomania](https://github.com/bogdomania), [@csmith](https://github.com/csmith), [@jesopo](https://github.com/jesopo), and [@jwheare](https://github.com/jwheare) for reporting issues and contributing code reviews, and also to [@bogdomania](https://github.com/bogdomania), Forbidden (cptbl00dra1n), MaLVaDoOo, Nuve, and [@streaps](https://github.com/streaps) for contributing translations. + +This release includes a database change. If you have `datastore.autoupgrade` set to `true` in your configuration, it will be automatically applied when you restart Oragono. Otherwise, you can update the database manually by running `oragono upgradedb` (see the manual for complete instructions). + +This release includes a change to the config file format: the old `server.listen` format for configuring listeners has been replaced by the new `server.listeners` format. See the bundled `oragono.yaml` configuration file for a commented example. For now, Oragono maintains backwards compatibility with the old format. To minimize potential downtime, we recommend the following workflow: + +1. Without rewriting your config file, upgrade your `oragono` binary to the new 1.2.x version and restart your server +2. Rewrite your configuration file to use the new `server.listeners` format +3. Rehash your server, confirming that the rewritten config file is valid and correct ### Config Changes - -### Security +* Replaced `server.listen` section with `server.listeners`; see `oragono.yaml` for a commented example (#565) +* Added `history.autoresize_window` for automatically resizing history buffers (#349) ### Added +* Added STS-only listeners; you can configure port 6667 so that it "redirects" clients to TLS on port 6697. See the manual for details. (#448) +* Added the `CHANLIMIT` ISUPPORT token (#625) +* Added ban creator and creation time to banlist output (#644) ### Changed - -### Removed +* Upgraded to the new the `draft/labeled-response-0.2` capability (#555) +* `oragono mkcerts` no longer overwrites existing certificate files (#622) +* Allowed Tor and non-Tor connections to attach to the same nickname via bouncer functionality (#632) ### Fixed +* Fixed `CAP LS 302` response being potentially truncated (#594) +* Fixed redundant output to some `MODE` commands (#649) +* NickServ now replies to `/msg NickServ verify` (#567) +* Made NickServ timeout warnings easier to see in some clients (#572) +* `LUSERS` output is now sent at the end of connection registration (#526) +* Fixed operators not being able to `WHOIS` some Unicode nicknames (#331) +* Fixed `RESUME` not clearing the `BRB` reason (#592) +* Fixed an edge case where the `BRB` timestamp wasn't reset correctly (#642) +* Fixed double-translation of some service help output (#588) +* Fixed behavior of `SAMODE` issued against a different user (#585) +* Fixed a false-positive error logline (#601) +* `oragono.io/bnc` is no longer advertised when disabled in the config (#595) +* Made the connection limiter and throttler more resilient against the failure to whitelist a reverse proxy IP (#197) + +### Internal Notes +* Official builds now use Go 1.13, which includes native TLS 1.3 support (#626) +* Minor performance improvements (#640, #615) ## [1.1.1] - 2019-07-21 Oragono 1.1.1 is a bugfix release for flaws in message handling, including one with security implications. From c2ea974fc6f30af5808fe166697c3cfb9c263f13 Mon Sep 17 00:00:00 2001 From: Shivaram Lingamneni Date: Sun, 3 Nov 2019 12:38:46 -0500 Subject: [PATCH 3/5] changelog improvements --- CHANGELOG.md | 27 +++++++++++++-------------- 1 file changed, 13 insertions(+), 14 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fdb26b85..915910e0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,44 +4,43 @@ All notable changes to Oragono will be documented in this file. ## [1.2.0-rc1] - 2019-11-04 We're pleased to be publishing the release candidate for 1.2.0 (the official release should follow in a week or two). This version contains bug fixes and minor improvements. -Many thanks to [@bogdomania](https://github.com/bogdomania), [@csmith](https://github.com/csmith), [@jesopo](https://github.com/jesopo), and [@jwheare](https://github.com/jwheare) for reporting issues and contributing code reviews, and also to [@bogdomania](https://github.com/bogdomania), Forbidden (cptbl00dra1n), MaLVaDoOo, Nuve, and [@streaps](https://github.com/streaps) for contributing translations. +Many thanks to [@bogdomania](https://github.com/bogdomania), [@csmith](https://github.com/csmith), [@edmund-huber](https://github.com/edmund-huber), [@jesopo](https://github.com/jesopo), [@jwheare](https://github.com/jwheare), [@poVoq](https://github.com/oragono/oragono/issues/624), [@prawnsalad](https://github.com/prawnsalad), and stealthgin for reporting issues and contributing code reviews, and also to [@bogdomania](https://github.com/bogdomania), Forbidden (cptbl00dra1n), MaLVaDoOo, Nuve, and [@streaps](https://github.com/streaps) for contributing translations. -This release includes a database change. If you have `datastore.autoupgrade` set to `true` in your configuration, it will be automatically applied when you restart Oragono. Otherwise, you can update the database manually by running `oragono upgradedb` (see the manual for complete instructions). - -This release includes a change to the config file format: the old `server.listen` format for configuring listeners has been replaced by the new `server.listeners` format. See the bundled `oragono.yaml` configuration file for a commented example. For now, Oragono maintains backwards compatibility with the old format. To minimize potential downtime, we recommend the following workflow: +This release includes a change to the config file format: the old `server.listen` format for configuring listeners has been replaced by a new `server.listeners` format. See the bundled `oragono.yaml` configuration file for a commented example. For now, Oragono maintains backwards compatibility with the old format. To minimize potential downtime, we recommend the following workflow: 1. Without rewriting your config file, upgrade your `oragono` binary to the new 1.2.x version and restart your server 2. Rewrite your configuration file to use the new `server.listeners` format 3. Rehash your server, confirming that the rewritten config file is valid and correct +This release includes a database change. If you have `datastore.autoupgrade` set to `true` in your configuration, it will be automatically applied when you restart Oragono. Otherwise, you can update the database manually by running `oragono upgradedb` (see the manual for complete instructions). + ### Config Changes * Replaced `server.listen` section with `server.listeners`; see `oragono.yaml` for a commented example (#565) * Added `history.autoresize_window` for automatically resizing history buffers (#349) ### Added * Added STS-only listeners; you can configure port 6667 so that it "redirects" clients to TLS on port 6697. See the manual for details. (#448) -* Added the `CHANLIMIT` ISUPPORT token (#625) -* Added ban creator and creation time to banlist output (#644) +* Added the `CHANLIMIT` ISUPPORT token (#625, thanks [@poVoq](https://github.com/oragono/oragono/issues/624)!) +* Added ban creator and creation time to banlist output (#644, thanks stealthgin!) ### Changed -* Upgraded to the new the `draft/labeled-response-0.2` capability (#555) -* `oragono mkcerts` no longer overwrites existing certificate files (#622) +* Upgraded to the new `draft/labeled-response-0.2` capability (#555) +* `oragono mkcerts` no longer overwrites existing certificate files (#622, thanks [@poVoq](https://github.com/oragono/oragono/issues/624)!) * Allowed Tor and non-Tor connections to attach to the same nickname via bouncer functionality (#632) ### Fixed * Fixed `CAP LS 302` response being potentially truncated (#594) * Fixed redundant output to some `MODE` commands (#649) -* NickServ now replies to `/msg NickServ verify` (#567) -* Made NickServ timeout warnings easier to see in some clients (#572) +* Improved display of replies to `/msg NickServ verify` in some clients (#567, thanks [@edmund-huber](https://github.com/edmund-huber)!) +* Improved display of NickServ timeout warnings in some clients (#572, thanks [@bogdomania](https://github.com/bogdomania)!) * `LUSERS` output is now sent at the end of connection registration (#526) -* Fixed operators not being able to `WHOIS` some Unicode nicknames (#331) -* Fixed `RESUME` not clearing the `BRB` reason (#592) +* Fixed operators not being able to `WHOIS` some Unicode nicknames (#331, thanks [@bogdomania](https://github.com/bogdomania)!) +* Fixed `RESUME` not clearing the `BRB` reason (#592, thanks [@jesopo](https://github.com/jesopo)!) * Fixed an edge case where the `BRB` timestamp wasn't reset correctly (#642) -* Fixed double-translation of some service help output (#588) * Fixed behavior of `SAMODE` issued against a different user (#585) * Fixed a false-positive error logline (#601) * `oragono.io/bnc` is no longer advertised when disabled in the config (#595) -* Made the connection limiter and throttler more resilient against the failure to whitelist a reverse proxy IP (#197) +* Made the connection limiter and throttler more resilient against the failure to whitelist a reverse proxy IP (#197, thanks [@prawnsalad](https://github.com/prawnsalad)!) ### Internal Notes * Official builds now use Go 1.13, which includes native TLS 1.3 support (#626) From 507740464abf9d94f6a68d2d2cdda73fc2176284 Mon Sep 17 00:00:00 2001 From: Shivaram Lingamneni Date: Sun, 3 Nov 2019 12:39:13 -0500 Subject: [PATCH 4/5] bump version --- irc/constants.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/irc/constants.go b/irc/constants.go index e91c0ff3..81453079 100644 --- a/irc/constants.go +++ b/irc/constants.go @@ -9,7 +9,7 @@ import "fmt" const ( // SemVer is the semantic version of Oragono. - SemVer = "1.2.0-unreleased" + SemVer = "1.2.0-rc1" ) var ( From 2df63b74b0dfd0c57c7b164addb0dc0a8006999a Mon Sep 17 00:00:00 2001 From: Shivaram Lingamneni Date: Sun, 3 Nov 2019 19:46:51 -0500 Subject: [PATCH 5/5] fix translator credit --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 915910e0..d04f7738 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,7 +4,7 @@ All notable changes to Oragono will be documented in this file. ## [1.2.0-rc1] - 2019-11-04 We're pleased to be publishing the release candidate for 1.2.0 (the official release should follow in a week or two). This version contains bug fixes and minor improvements. -Many thanks to [@bogdomania](https://github.com/bogdomania), [@csmith](https://github.com/csmith), [@edmund-huber](https://github.com/edmund-huber), [@jesopo](https://github.com/jesopo), [@jwheare](https://github.com/jwheare), [@poVoq](https://github.com/oragono/oragono/issues/624), [@prawnsalad](https://github.com/prawnsalad), and stealthgin for reporting issues and contributing code reviews, and also to [@bogdomania](https://github.com/bogdomania), Forbidden (cptbl00dra1n), MaLVaDoOo, Nuve, and [@streaps](https://github.com/streaps) for contributing translations. +Many thanks to [@bogdomania](https://github.com/bogdomania), [@csmith](https://github.com/csmith), [@edmund-huber](https://github.com/edmund-huber), [@jesopo](https://github.com/jesopo), [@jwheare](https://github.com/jwheare), [@poVoq](https://github.com/oragono/oragono/issues/624), [@prawnsalad](https://github.com/prawnsalad), and stealthgin for reporting issues and contributing code reviews, and also to [@bogdomania](https://github.com/bogdomania), Forbidden (cptbl00dra1n), Nuve, [@streaps](https://github.com/streaps), and UnLokitoFeliz for contributing translations. This release includes a change to the config file format: the old `server.listen` format for configuring listeners has been replaced by a new `server.listeners` format. See the bundled `oragono.yaml` configuration file for a commented example. For now, Oragono maintains backwards compatibility with the old format. To minimize potential downtime, we recommend the following workflow: