0.85 2011-06-13 CRITICAL SECURITY RELEASE
- Fix an XML entity injection attack allowing the attacker to read random files
from the server. Reported by Wouter Coekaerts <wouter@coekaerts.be>.
(Yann Kerherve <yann@cyberion.net>)
- Support intermediate SSL certificates.
(Rajiv Aaron Manglani <rajiv@brontes3d.com>)
- SASL support (Previously released, but not advertised here)
(Yann Kerherve <yann@cyberion.net>)
- Implement proper support for XML namespace prefixes
(Daniel Ruoso <daniel@ruoso.com>)
- Meta: djabberd is now hosted on http://github.com/djabberd
- Meta: The core repository is now separated from plugins.
- Treat the node and domain parts of a JID as case-insensitive as per
the XMPP spec. This creates a dependency on the CPAN module
Unicode::Stringprep. A backward-compatibility setting is provided
for servers that have existing non-normalized JIDs stored,
since they are likely to be broken by this change until their
stored data is normalized.
Patch from Alex Vandiver <alexmv@bestpractical.com>
- Some configuration file docs
(Alex Vandiver <alexmv@bestpractical.com>)
- Improve debugging information for S2S connections.
(Alex Vandiver <alexmv@bestpractical.com>)
- Remove the stream:features-in-dialback quirk hack, since it breaks
interop with a few different implementations and is incorrect
per spec. This may break interop with some other implementation,
but we've been unable to determine which one, so I'm assuming
that it's no longer an issue.
(Alex Vandiver <alexmv@bestpractical.com>)
- Small tweak to comment and logging in DJabberd::Connection::ServerOut
(Alex Vandiver <alexmv@bestpractical.com>)
- Don't treat hostnames that look like 192.168.0.1.domain.com as IP
addresses. (Reported by Domrachev Ivan <domrachev.ivan@gmail.com>).
- new hook chain called "SendFeatures" allows plugins to add xml
to the stream:features stanza returned by the server
- new hook chain called "HandleStanza" allows plugins to register
for and then handle what would otherwise be unsupported-stanza-type
- SSL memory leak fix (http://codereview.appspot.com/2326)
- hook chain callback logging fix merged from 'kane-hacking' branch
0.84_01 (2009-07-31) dev release because it's beeen awhile
- SARTAK caught a typo in BotContext.pm where a qr was used in a place
that obviously should have been qq.
- "use bytes" in Connection.pm, which reportedl fixes UTF-8
corruption in rosters (Aleksey Luzin <subscr@p34.net>)
- If an explicit configuration file location is given to djabberd,
don't fall back on the built-in default locations. If the user
wanted the defaults, he wouldn't have used the --conffile option.
- Allow the location of the log4perl configuration file to be
set via a command-line argument to djabberd.
(Jakob Burkhart <igotimac@gmail.com>)
- Correct support for re-using an S2S connection for multiple source
domains. (Adrian Ulrich <slack@blinkenlights.ch>)
- Jacob Burkhart <igotimac@gmail.com>: Fix memory leak when using SSL
- Michael Scherer <misc@mandriva.org>: more helpful error
messages in logs after dialback failure (shows hosts in question)
- Piers Harding <piers@ompka.net>: Fix bug where server wasn't
including a "from" attribute in IQ responses.
- Multiple resources of the same local JID are now made aware of
one another via presence stanzas as required by the spec.
- don't leak UDP sockets on DNS SRV lookup timeouts
- handle improper SSL disconnects without spinning CPU
- Updated DJabberd::Component::Example which uses the correct
API. The previous example didn't actually work anymore.
- Add POD for DJabberd::Agent, DJabberd::Component and a bunch of
other related modules.
- Make bots automatically accept roster subscription requests.
0.83 2007-05-08
- the "yes, this project is still alive" release
- packaging fixes, tree clean, dist now managed by ShipIt, for more
regular releases
- ClientPort, ServerPort, AdminPort can include IPs to bind to, not
just port numbers.
- better pidfile support
- optional expansion of environment in config files, using
syntax: ${ENV:KEY}, which expands to environment variable KEY
- vhost/server/plugin nesting issues in config files. more
tolerant now
- DJabberd::Delivery::ComponentConnection - Delivery through a
JEP-0114 component connection
- DJabberd::Connection::ComponentIn - JEP-0114 Server
- DJabberd::Connection::ComponentOut - JEP-0114 Client
- when closing an XMLElement, also clone the raw field
- don't crash when DNS SRV records have no port defined
- Component::External bug fixes, enhancements
- warnings about implicit delivery/etc plugins auto-added
for you (like Local deliver, S2S deliver, local presence
checks, etc...)
0.82 2007-05-08
- accidental release in which I mistakenly claimed nothing was new
since 0.81... whoops!
0.81 2006-10-01
- fix the MANIFEST to include the dozen some missing files.
0.80
- first tarball release of core only after svn rearrange to split
modules into per-distribution directories.