diff options
| author | rhialto <rhialto@pkgsrc.org> | 2019-12-19 14:41:59 +0000 |
|---|---|---|
| committer | rhialto <rhialto@pkgsrc.org> | 2019-12-19 14:41:59 +0000 |
| commit | c9165133778c61b8b8c3b6ed08d01ac8c80f0f09 (patch) | |
| tree | fbcb01591df6e57d661d1c05ca846e6102c66bc0 /games/nethack-lib/Makefile.common | |
| parent | 4a013fe731e318da8386bf9eb714ab597b419c01 (diff) | |
| download | pkgsrc-c9165133778c61b8b8c3b6ed08d01ac8c80f0f09.tar.gz | |
games/nethack: security update to 3.6.4.
https://www.nethack.org/security/index.html:
NetHack: Privilege escalation/remote code execution/crash in
configuration parsing
Severity: High
Affected versions: 3.6.0, 3.6.1, 3.6.2, 3.6.3
First Patched Version: 3.6.4
Basic Information:
A buffer overflow issue exists when reading very long lines from a
NetHack configuration file (usually named .nethackrc).
This vulnerability affects systems that have NetHack installed suid/sgid
and shared systems that allow users to upload their own configuration
files.
All users are urged to upgrade to NetHack 3.6.4 as soon as possible.
Additional information related to this advisory, if any, will be made
available at https://nethack.org/security.
Diffstat (limited to 'games/nethack-lib/Makefile.common')
| -rw-r--r-- | games/nethack-lib/Makefile.common | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/games/nethack-lib/Makefile.common b/games/nethack-lib/Makefile.common index b215794142c..2121a7fd402 100644 --- a/games/nethack-lib/Makefile.common +++ b/games/nethack-lib/Makefile.common @@ -1,4 +1,4 @@ -# $NetBSD: Makefile.common,v 1.39 2019/12/07 13:27:08 rhialto Exp $ +# $NetBSD: Makefile.common,v 1.40 2019/12/19 14:41:59 rhialto Exp $ # # used by games/nethack/Makefile # used by games/nethack-lib/Makefile @@ -11,7 +11,7 @@ # The desired owner and the file mode of game executables. # -NETHACK_BASEVER= 3.6.3 +NETHACK_BASEVER= 3.6.4 NETHACK_VERSION= ${NETHACK_BASEVER} NETHACK_DISTVER= ${NETHACK_BASEVER:S/.//g} NETHACK_DIR= nethackdir${NETHACK_SAVEVER:S/.//g} |