INN 2.6.4 release candidate

[Julien ÉLIE]

Hi all,

A release candidate for INN 2.6.4 can be downloaded at:

    https://ftp.isc.org/isc/inn/testing/inn-2.6.4rc1.tar.gz

The MD5 checksum is:  cfd9ed26b8083f3ad2e9d2023aeae8a9.

A patch from 2.6.3 to 2.6.4rc1 is available in the same directory.

Feel free to report any issue you may encounter.
The final release is scheduled in January.


Known issue (and already fixed in daily snapshots):  if the build fails 
with an error like "ld: unknown option: -z", just edit Makefile.global 
and change the following line:
LDFLAGS         =  -pie -Wl,-z,relro -Wl,-z,now
to:
LDFLAGS         =  -pie
and re-run "make".




Changes from 2.6.3 to 2.6.4

     * nnrpd now adapts the length of the DH parameter used during a DHE key
       exchange so as to comply with the security level OpenSSL 1.1.0 or
       later expects.  Thanks to Michael Baeuerle for the bug report.

     * cnfsstat now also returns information about retired CNFS buffers
       (mentioned in cycbuff.conf as a cycbuff but not in a metacycbuff).

     * Switch default innreport behaviour to common practice of 
externalizing
       CSS into a separate file.  Its name can be configured with the
       *html_css_url* parameter in innreport.conf.  If this parameter is
       unset, the default innreport.css file name will be used and innreport
       will generate this CSS file for you.  Previously generated 
reports are
       kept untouched, though, and will still contain inline CSS if you had
       not already set the *html_css_url* parameter in previous INN 
versions.
       Thanks to Richard Kettlewell for the patch.

     * sm can now read and store any number of articles given in wire format
       on its standard input when both -s and -R are used.  Only native
       format was previously possible.  Thanks to Bo Lindbergh for the 
patch.

     * Added new -a flag to rnews to disallow, if needed, the use of
       additional unpackers from the rnews.libexec sub-directory of 
*pathbin*
       (as set in inn.conf); only "rnews" and "cunbatch" will then be
       recognized as valid batch commands.

     * Added new -b flag to rnews to save rejected articles in the bad
       sub-directory of *pathincoming* (as set in inn.conf).  Otherwise,
       rnews just logs and discards any articles that are rejected or cannot
       be parsed for some reason.

     * Added new -d flag to rnews to log via syslog the message-ID and the
       Path header value of each article rejected as a duplicate.

     * Added new --enable-hardening-flags configure-time option, enabled by
       default, to use hardening build flags like "-fPIE" and
       "-fstack-protector-strong".  This option can easily be disabled 
if the
       compiler or the platform does not support them well.  More hardening
       build flags will eventually be added in future releases.


-- 
Julien ÉLIE

« Boire du café empêche de dormir. Par contre, dormir empêche de boire
   du café. » (Philippe Geluck)