INN commit: branches/2.4 (NEWS doc/pod/news.pod)
INN Commit
Russ_Allbery at isc.org
Wed Feb 25 21:21:19 UTC 2009
Date: Wednesday, February 25, 2009 @ 13:21:19
Author: iulius
Revision: 8349
Old changelog fixes.
Modified:
branches/2.4/NEWS
branches/2.4/doc/pod/news.pod
------------------+
NEWS | 55 +++++++++++++++++++++++++++++++------------------
doc/pod/news.pod | 59 ++++++++++++++++++++++++++++++++++++-----------------
2 files changed, 76 insertions(+), 38 deletions(-)
Modified: NEWS
===================================================================
--- NEWS 2009-02-25 20:53:03 UTC (rev 8348)
+++ NEWS 2009-02-25 21:21:19 UTC (rev 8349)
@@ -413,16 +413,16 @@
ovdb is known to have some locking and timing issues related to how
nnrpd shuts down (or fails to shut down) the overview databases. If you
- have stability problems with ovdb, try setting *readserver* to "true" in
+ have stability problems with ovdb, try setting *readserver* to true in
ovdb.conf. This will funnel all ovdb reads through a single process
with a cleaner interface to the underlying Berkeley DB database.
If you use Perl authentication for nnrpd (if *nnrpdperlauth* in inn.conf
- is "true"), there have been major changes. See "Changes to Perl
+ is true), there have been major changes. See "Changes to Perl
Authentication Support for nnrpd" in doc/hook-perl for details.
Similarly, if you use Python authentication for nnrpd (if
- *nnrpdpythonauth* in inn.conf is "true"), there have been major changes.
+ *nnrpdpythonauth* in inn.conf is true), there have been major changes.
See "Changes to Python Authentication and Access Control Support for
nnrpd" in doc/hook-python for details.
@@ -486,7 +486,7 @@
caught before anyone starts to rely on it.
* innfeed supports a new peer parameter, *backlog-feed-first*, that if
- set to "true" feeds any backlog to a peer before new articles, see
+ set to true feeds any backlog to a peer before new articles, see
innfeed.conf(5). When used in combination with *max-connections* set
to 1, this can be used to enforce in-order delivery of messages to a
peer that is doing Xref slaving, avoiding cases where a
@@ -541,15 +541,15 @@
* Two new options, *nfsreader* and *nfswriter*, have been added to
inn.conf to aid in building NFS based shared reader/writer platforms.
- On the writer server configure *nfswriter* to "true" and on all of the
- readers configure *nfsreader* to "true"; these options add calls to
+ On the writer server configure *nfswriter* to true and on all of the
+ readers configure *nfsreader* to true; these options add calls to
force data out to the NFS server and force it to be read directly from
the NFS server at the appropriate moments. Note that it has only been
tested on Solaris 8, using CNFS as the storage mechanism and
tradindexed as the overview method.
* A new option, *tradindexedmmap*, has been added to inn.conf. If set
- to "true" (the default), then the tradindexed overview method will use
+ to true (the default), then the tradindexed overview method will use
mmap() to access its overview data (in 2.3 you couldn't control this;
it always used mmap).
@@ -573,9 +573,14 @@
additional authenticators resolvers. See libauth(3) for details, and
any of the existing programs in authprogs/ for examples.
- * Most (if not all) of the temporary file creation in INN now uses
- functions that create temporary files properly and safely.
+ * INN now checks to ensure that the configured temporary directory is
+ not world-writeable. Additionally, most (if not all) of the temporary
+ file creation in INN now uses functions that create temporary files
+ properly and safely.
+ * All of the applicable bug fixes from the INN 2.3 STABLE series are
+ also included in INN 2.4.
+
Changes in 2.3.5
* Clients using POST are no longer permitted to provide an
@@ -684,6 +689,8 @@
* Added a sample subscriptions file and documentation for it and
innmail.
+ * Various other bug fixes and documentation updates.
+
Changes in 2.3.1
* inews no longer downloads the active file, no longer tries to send
@@ -700,9 +707,9 @@
* The annoying compilation problem with embedded Perl filtering on Linux
systems without libgdbm installed should be fixed.
- * INN now complains loudly at "configure" time if the configured path
- for temporary files is world-writeable, since this configuration can
- be a security hole.
+ * INN now complains loudly at configure time if the configured path for
+ temporary files is world-writeable, since this configuration can be a
+ security hole.
* Many other varied bug fixes and documentation fixes of all sorts.
@@ -789,7 +796,7 @@
better failure mode under high loads. Writing overview data directly is
the default, so in a normal upgrade from 2.2 to 2.3 you'll want to
comment out or remove your overchan entry in newsfeeds and set
- *useoverchan* to "false" in inn.conf.
+ *useoverchan* to false in inn.conf.
crosspost is no longer installed, and no longer works (even with
traditional spool). If you have an entry for crosspost in newsfeeds,
@@ -869,22 +876,28 @@
libtool build support (including shared library support) should be
better than previous releases.
+ * All of the applicable bug fixes from the INN 2.2 STABLE series are
+ also included in INN 2.3.
+
Changes in 2.2.3
- * inews is not installed setgid news and rnews is not installed setuid
- root by default any more. If you need the old permissions, you have
- to give a flag to configure. See INSTALL for more details.
+ * INN no longer installs inews setgid news or rnews setuid root by
+ default. If you need the old behavior, --enable-uucp-rnews and/or
+ --enable-setgid-inews must be given to "configure". See INSTALL for
+ more information.
- * Fixed a security hole when *verifycancels* was enabled in inn.conf
- (not the default).
+ * A security hole when *verifycancels* is turned on in inn.conf (not the
+ default) was fixed.
* Message-IDs are now limited to 250 octets to prevent interoperability
problems with other servers.
- * Embedded Perl filters now work with Perl 5.6.0.
+ * Various other security paranoia fixes have been made.
- * Lots of bug fixes and changes for security paranoia.
+ * Embedded Perl filters fixed to work with Perl 5.6.0.
+ * Lots of bug fixes.
+
Changes in 2.2.2
* Various minor bug fixes and a Y2K bug fix. The Y2K bug is in version
@@ -927,3 +940,5 @@
* The innshellvars.csh.in script is obsolete (and lives in the obsolete
directory, for now).
+ $Id$
+
Modified: doc/pod/news.pod
===================================================================
--- doc/pod/news.pod 2009-02-25 20:53:03 UTC (rev 8348)
+++ doc/pod/news.pod 2009-02-25 21:21:19 UTC (rev 8349)
@@ -605,16 +605,16 @@
ovdb is known to have some locking and timing issues related to how B<nnrpd>
shuts down (or fails to shut down) the overview databases. If you have
-stability problems with ovdb, try setting I<readserver> to C<true> in
+stability problems with ovdb, try setting I<readserver> to true in
F<ovdb.conf>. This will funnel all ovdb reads through a single process
with a cleaner interface to the underlying S<Berkeley DB> database.
If you use Perl authentication for B<nnrpd> (if I<nnrpdperlauth> in
-F<inn.conf> is C<true>), there have been major changes. See "Changes to
+F<inn.conf> is true), there have been major changes. See "Changes to
Perl Authentication Support for nnrpd" in F<doc/hook-perl> for details.
Similarly, if you use Python authentication for B<nnrpd> (if
-I<nnrpdpythonauth> in F<inn.conf> is C<true>), there have been major changes.
+I<nnrpdpythonauth> in F<inn.conf> is true), there have been major changes.
See "Changes to Python Authentication and Access Control Support for
nnrpd" in F<doc/hook-python> for details.
@@ -693,7 +693,7 @@
=item *
B<innfeed> supports a new peer parameter, I<backlog-feed-first>, that if set
-to C<true> feeds any backlog to a peer before new articles, see
+to true feeds any backlog to a peer before new articles, see
innfeed.conf(5). When used in combination with I<max-connections> set to C<1>,
this can be used to enforce in-order delivery of messages to a peer that
is doing Xref slaving, avoiding cases where a higher-numbered message is
@@ -762,8 +762,8 @@
Two new options, I<nfsreader> and I<nfswriter>, have been added to
F<inn.conf> to aid in building NFS based shared reader/writer platforms.
-On the writer server configure I<nfswriter> to C<true> and on all of the readers
-configure I<nfsreader> to C<true>; these options add calls to force data out to
+On the writer server configure I<nfswriter> to true and on all of the readers
+configure I<nfsreader> to true; these options add calls to force data out to
the NFS server and force it to be read directly from the NFS server at the
appropriate moments. Note that it has only been tested on S<Solaris 8>,
using CNFS as the storage mechanism and tradindexed as the overview
@@ -772,7 +772,7 @@
=item *
A new option, I<tradindexedmmap>, has been added to F<inn.conf>. If set
-to C<true> (the default), then the tradindexed overview method will use
+to true (the default), then the tradindexed overview method will use
mmap() to access its overview data (in 2.3 you couldn't control this; it
always used mmap).
@@ -805,9 +805,16 @@
=item *
-Most (if not all) of the temporary file creation in INN now uses functions
-that create temporary files properly and safely.
+INN now checks to ensure that the configured temporary directory is
+not world-writeable. Additionally, most (if not all) of the temporary
+file creation in INN now uses functions that create temporary files
+properly and safely.
+=item *
+
+All of the applicable bug fixes from the S<INN 2.3> STABLE series are
+also included in S<INN 2.4>.
+
=back
=head1 Changes in 2.3.5
@@ -977,6 +984,10 @@
Added a sample F<subscriptions> file and documentation for it and B<innmail>.
+=item *
+
+Various other bug fixes and documentation updates.
+
=back
=head1 Changes in 2.3.1
@@ -1007,7 +1018,7 @@
=item *
-INN now complains loudly at C<configure> time if the configured path for
+INN now complains loudly at configure time if the configured path for
temporary files is world-writeable, since this configuration can be a
security hole.
@@ -1100,7 +1111,7 @@
better failure mode under high loads. Writing overview data directly is
the default, so in a normal upgrade from 2.2 to 2.3 you'll want to comment
out or remove your B<overchan> entry in F<newsfeeds> and set I<useoverchan> to
-C<false> in F<inn.conf>.
+false in F<inn.conf>.
B<crosspost> is no longer installed, and no longer works (even with
traditional spool). If you have an entry for B<crosspost> in F<newsfeeds>,
@@ -1196,6 +1207,11 @@
handled directly by C<autoconf>. libtool build support (including shared
library support) should be better than previous releases.
+=item *
+
+All of the applicable bug fixes from the S<INN 2.2> STABLE series are
+also included in S<INN 2.3>.
+
=back
=head1 Changes in 2.2.3
@@ -1204,14 +1220,15 @@
=item *
-B<inews> is not installed setgid news and B<rnews> is not installed setuid root
-by default any more. If you need the old permissions, you have to give a
-flag to configure. See F<INSTALL> for more details.
+INN no longer installs B<inews> setgid news or B<rnews> setuid root
+by default. If you need the old behavior, B<--enable-uucp-rnews>
+and/or B<--enable-setgid-inews> must be given to C<configure>. See
+F<INSTALL> for more information.
=item *
-Fixed a security hole when I<verifycancels> was enabled in F<inn.conf> (not the
-default).
+A security hole when I<verifycancels> is turned on in F<inn.conf> (not
+the default) was fixed.
=item *
@@ -1220,12 +1237,16 @@
=item *
-Embedded Perl filters now work with S<Perl 5.6.0>.
+Various other security paranoia fixes have been made.
=item *
-Lots of bug fixes and changes for security paranoia.
+Embedded Perl filters fixed to work with S<Perl 5.6.0>.
+=item *
+
+Lots of bug fixes.
+
=back
=head1 Changes in 2.2.2
@@ -1303,4 +1324,6 @@
=back
+$Id$
+
=cut
More information about the inn-committers
mailing list