Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
|
|
- CVE-2007-5839: e_hostname uses mktempnam in an unsafe manner.
- CVE-2007-4584: p_mode classic buffer overflow using a static string.
|
|
the client into executing arbitrary code.
|
|
|
|
|
|
Minor pkglintification of Makefile
|
|
|
|
* Fixed bug with using [$8] in expressions (Reported by BlackJac)
(Patch from |Rain|) (BugID: 64) (powuh)
* Fixed bug in /set show_end_of_msgs. When OFF prevented hooking
of some end_of_msg numerics. (Reported by BlackJac)
(Patch from |Rain|) (BugID: 51) (powuh)
* Fixed incorrect ordering of operations in screen.c which
caused an off-by-one access at the end ofthe buffer.
(Patch from |Rain|) (BugID: 48) (powuh)
* Fixed ischanvoice() to be compatiable with epic. Maintained
reverse functionality as not to break existing scripts.
(Patch from |Rain|) (BugID: 20) (powuh)
* Fixed segfault with convert_output_format not honoring
MAX_RECURSE. (Patch from |Rain|) (powuh)
* Fixed possble rouge server exploit:
If a rogue server sends us a ctcp request from an extremely large
nickname (over about 512 bytes), we may attempt to alloca() a
negative value, which under gcc will return a invalid pointer the
contents of which will then be overwritten. (Reported by O_6)
(Patch from |Rain|) (powuh)
* Fixed segfault with channel mode parsing. (Patch from O_6) (powuh)
* Removed auto_resume script, it's not needed any more (caf).
* Fixed string copying snafu in gtkbitchx.c (reported by Huey) (caf).
* Added STATUS_USER20 to STATUS_USER39 (patch from BlackJac) (caf).
|
|
BUS error on sparc64. Appears to apply to version Bitchx 1.1 too.
|
|
|
|
- Fix major core bug with channel mode -k * on hybrid7 servers. For more
information see: http://www.securityfocus.com/archive/1/321093
Patch from BitchX CVS.
|
|
Sirainen <tss at iki dot fi>, see the following url for more details:
http://securityfocus.com/archive/1/315057
Patch from bugtraq by <caf at guarana dor org>.
|
|
Changes unknown.
Based on PR pkg/19296 from Juan RP.
|
|
|
|
|
|
used with NetBSD curses.
|
|
|
|
+ move the patch digest/checksum values from files/patch-sum to distinfo
|